Space Cybersecurity

What is Space ISAC (Information Sharing and Analysis Center)?

Updated April 6, 2026

A non-profit membership organisation established in 2019 that facilitates cybersecurity threat intelligence sharing among satellite operators, launch providers, and ground system suppliers — enabling coordinated defence against common threats to space infrastructure.

What is the Space ISAC?

The Space Information Sharing and Analysis Center (Space ISAC) is a non-profit organisation established in 2019 to facilitate cybersecurity information sharing and analysis specifically for the space industry. Modelled on the ISACs (Information Sharing and Analysis Centers) established for other critical infrastructure sectors (financial, energy, healthcare), the Space ISAC provides a trusted, structured environment where satellite operators, launch providers, ground system vendors, and government partners can share threat intelligence and coordinate responses to cyber incidents affecting space systems.

How it works

Space ISAC members share threat indicators, incident reports, and vulnerability disclosures through a secure information sharing platform, anonymised where necessary to protect commercially sensitive details. A 24/7 Watch Operations Center monitors the threat environment and distributes timely alerts to members. The Space ISAC also coordinates with government agencies — CISA, US Space Command, NSA — and peer ISACs in adjacent sectors (financial systems that depend on GPS timing; aviation ISAC for satellite-dependent navigation) to share relevant cross-sector intelligence.

Significance after 2022

The Viasat KA-SAT cyberattack on February 24, 2022, was a catalytic event for space cybersecurity: it demonstrated that satellite ground infrastructure is a legitimate military cyber target with cascading effects on non-space critical infrastructure (wind farm management systems, government communications). Following the attack, Space ISAC membership grew significantly and CISA, ESA, and NATO published guidance specifically addressing satellite system cyber resilience. The EU's NIS2 Directive (2024) classifies satellite operators as 'essential entities' subject to mandatory cybersecurity measures and incident reporting — including reporting to ENISA and national CERTs, with Space ISAC serving as a coordination layer.