What it asks for. Article 45 allows financial entities to exchange cyber threat information and intelligence among themselves, including indicators of compromise, tactics, techniques and procedures, alerts and configuration tools, within trusted communities. Sharing must aim to improve resilience and protect sensitive and personal data. Entities must notify competent authorities when they join such arrangements.
In practice. Entities join sector sharing groups, agree terms on confidentiality and data protection, and integrate received intelligence into detection and vulnerability management. Evidence includes membership agreements, notifications to authorities and examples of intelligence being used.
Common gaps. Intelligence is often received but not operationalised. Data protection concerns are sometimes used as a reason not to share at all, even when safeguards would allow it.