The adversaries targeting civil society work together. The people defending it should too.

Why it exists

A think tank gets a phishing email on Monday. A foundation gets the same one on Tuesday. A relief agency gets it on Wednesday. Each one has a single person, or no one, deciding whether it is real, and each decides alone. The attacker ran one campaign. The defenders fought three separate battles, and none of them learned from the others.

That is how civil society has been defended for most of its history, and it is why the people who target it keep coming back. The weakness was never the size of the team. It was the isolation. The NGO-ISAC community exists so that the person defending a nonprofit is never alone with the problem.

The same email, two ways. Alone: you guess, you search, you hope, and no one else learns a thing. Together: you post it, peers have seen it, an analyst has the infrastructure, and five hundred organizations are protected.

What we believe

Defense is collective or it is not defense. When one organization is hit, every other organization should learn from it the same day. When something looks wrong, there should be a trusted room to ask in, where someone has already seen it. And a room like that runs on trust, built deliberately: every member agrees to the Community Code of Conduct, what is shared in the room stays in the room, and nothing is attributed to a member organization unless it chooses. That is why members describe incidents in detail, and detail is what makes the next organization safe.

What that means

  • Nobody is left to find their own way in. New members are introduced to peers in their field.
  • Nobody learns the job alone. Members who want a guide are paired with practitioners who have done the work they are doing, in organizations like theirs.
  • Hard problems get worked together. Working groups go deep on a shared challenge and bring what they learn back to everyone.
  • Expertise moves between members. The people with something to teach are asked to speak, host, and lead.

Where this goes

Every organization that joins makes every other organization safer, because the community sees what each member sees. More than 500 organizations are in the room today, alongside more than 80 technology partners who come to listen. Most of civil society is still outside it. Our aim is a room large enough that no U.S. civil society organization under threat is ever more than one message away from someone who has seen it before, and strong enough that the people who target civil society have to assume it will answer together.