Center for Internet Security Multi-State ISAC 3/22/2017

CITY CENTER FOR INTERNET SECURITY MULTI-STATE ISAC Member Agreement This Agreement("Agreement")is made between the other analysis for security planning,and distributing City of Everett, WA and the Multi-State Information current proven security practices and suggestions. As a Sharing and Analysis Center of the United States(MS- participating member of the MS-ISAC,Primary ISAC),a division of the Center for Internet Security. Custodian agrees that when sharing this information The MS-ISAC will enable information sharing, with MS-ISAC members it will do so through the MS- analysis,gathering and distribution in a secure manner ISAC in accordance with the categories established in using facilities and methods designed to permit this document. MS-ISAC members agree to the terms individual Members to submit information about and conditions contained in this Agreement. security threats,vulnerabilities, incidents,and solutions NOW THEREFORE, in consideration of the above securely. Only MS-ISAC members have access to promises recited herein,the parties agree to the review and retrieve this information. When submitting following: information to the MS-ISAC,Primary Custodians will Definitions: identify information to the MS-ISAC in the following categories: 1. Primary Custodian—the entity that developed or Category A: information that is provided only to the owns the Data. Each collection of Data(database, MS-ISAC and will not be shared with the MS-ISAC file,etc.)shall have a single Primary Custodian. members or others except as authorized by the Primary 2. MS-ISAC members—the members(U.S. states, Custodian. Category A information also consists of territories,the District of Columbia,tribal nations any non-categorized information provided to the MS- and local governments)who may be in possession ISAC and/or pre-cleansed category B information. or use of Data acquired from the Primary Category B: information which is shared with the MS- Custodian or from the MS-ISAC. ISAC and in consultation with the Primary Custodian is Purpose: cleansed by the MS-ISAC of all identifying information 3. MS-ISAC members acknowledge that the and then,consistent with applicable laws,will be protection of Category A information is essential to shared only with MS-ISAC members,or the the security of Primary Custodian and the mission Department of Homeland Security consistent with of the MS-ISAC. The purpose of this Agreement is paragraph six(6). to enable Primary Custodian to make disclosures of Category C: information which is shared with the MS- Category A information to MS-ISAC while still ISAC and does not need to be cleansed and may be maintaining rights in,and control over,Category A shared within the MS-ISAC and outside the MS-ISAC information. The purpose is also to preserve as appropriate. confidentiality of the Category A information and MS-ISAC members acknowledge that Primary to prevent its unauthorized disclosure. It is understood that this Agreement does not grant MS- Custodian has certain cyber and/or critical infrastructure information and material that is exempt ISAC or members an express or implied license or from disclosure to the public or other unauthorized an option on a license,or any other rights to or persons under federal or state laws including the interests in the Category A information,or Homeland Security Act of 2002(6 U.S.C. § 133). MS- otherwise. If Primary Custodian retracts any ISAC members may provide access to this information information it sent to the MS-ISAC,then,upon and material in order to facilitate interstate notification by the Primary Custodian,the MS- communication regarding cyber and/or critical ISAC will destroy such information and all copies infrastructure readiness and response efforts. These thereof,and notify MS-ISAC members to destroy efforts include,but are not limited to,disseminating the information. If an MS-ISAC member is unable to destroy the information based on applicable law, early warnings of physical and cyber system threats, then the member will continue to maintain the sharing security incident information between U.S. confidentiality of the information consistent with states,territories,the District of Columbia,tribal this agreement. Upon receiving such notification, nations and local governments,providing trends and Multi-State ISAC 1 of 3 Member Agreement 1/1/2012