What U.S. IT Sector Coordinating Council does

The U.S. IT Sector Coordinating Council (IT SCC) is a private, non-profit industry association founded in 2006 and headquartered at the offices of the Information Technology Industry Council at 700 K Street NW, Suite 600, Washington, DC. It functions as the principal coordinating body between the U.S. IT sector and the federal government on critical infrastructure protection and cybersecurity, with the Department of Homeland Security as its primary government counterpart. The organization brings together IT sector companies, trade associations, and other stakeholders to collaborate on threat information sharing, incident response coordination, and cybersecurity policy development through working groups, quarterly membership meetings, and joint sessions with the Communications SCC.

The IT SCC's product surface consists of policy guidance documents, whitepapers, and assessment tools rather than commercial software. Key deliverables include the Outsourcing Network Services Assessment Tool (ONSAT) for supply chain risk evaluation, AI Policy Principles for policymakers, the 28-document CRADM Cyber Resiliency Technical Guidance collection hosted on MITRE's website, the Insider Threat whitepaper developed with Carnegie Mellon University's Software Engineering Institute, IoT Acquisition Guidance, DNS Risk Assessment, and the SMB Working Group resources. It also produces formal comments on NIST frameworks and DHS solicitations as part of its regulatory engagement function.

The business model is membership-based with no membership fee; participation is free for qualifying organizations that submit a completed application. The council has no disclosed revenue, no paid customers, and no funding rounds; it is administratively hosted by ITI and operates as a public-private coordination platform rather than a revenue-generating entity. Distribution is limited to vetted member organizations, and its influence derives from its formal designation as the IT sector's coordinating entity with DHS rather than from commercial scale.

Name

U.S. IT Sector Coordinating Council

Legal name

Information Technology Sector Coordinating Council

Website

https://it-scc.org

Company type

Private

Founded year

2006

Operating status

Operating

Short description

The U.S. IT Sector Coordinating Council is a non-profit industry association, founded in 2006 and hosted by the Information Technology Industry Council in Washington, DC, that coordinates IT sector collaboration with the Department of Homeland Security on critical infrastructure protection and cybersecurity policy through working groups, publications, and assessment tools.

Ownership category

akta.pro rank

Product category

Critical Infrastructure Protection Coordination

NAICS

National Security (928110)

SIC

Services-Membership Organizations (8600)

akta.pro primary industry

Compliance Technology, GRC Platforms & Controls Automation Advisory (BPAHAFAO)

Keywords

• Critical infrastructure protection
• Cybersecurity coordination
• Public-private partnership
• Supply chain risk assessment
• Cyber resilience guidance

Headquarters

HQ city

Washington

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Others

Revenue model

1. Membership and Coordination Services: The IT SCC operates as a membership-based organization with no membership fee. The organization coordinates critical infrastructure protection and cybersecurity activities through public-private partnership without charging participants. Revenue is generated through collaboration activities and resource development rather than direct revenue streams.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels4 records

Core offering

The U.S. IT Sector Coordinating Council (IT SCC) is an industry coordinating body that serves as the principal entity for coordinating with the U.S. government on critical infrastructure protection and cybersecurity activities. It brings together IT sector companies, associations, and government partners (notably the Department of Homeland Security) to facilitate collaboration on threat information sharing, incident response, supply chain risk, and policy development. The council publishes cybersecurity guidance documents, whitepapers, and assessment tools such as the ONSAT.

Product overview

The IT Sector Coordinating Council (IT SCC) is an industry coordinating body, not a product company. It does not offer a unified product platform. The IT SCC provides access to a collection of cybersecurity resources, assessment tools, guidance documents, whitepapers, and working groups focused on critical infrastructure protection. Key offerings include the Outsourcing Network Services Assessment Tool (ONSAT) - a downloadable spreadsheet for supply chain risk assessment, policy guidance documents such as AI Policy Principles and IoT Acquisition Guidance, technical whitepapers covering cyber resilience, insider threat detection, and DNS risk assessment, and working groups including the SMB Working Group. These resources support public-private partnership coordination for cybersecurity rather than commercial product delivery.

Differentiator

Problem solved

Functional benefit

Products and services

• Outsourcing Network Services Assessment Tool (ONSAT)

Quantifiable outcome

• At least three full membership meetings per year with government partners, plus annual joint meetings with Communications SCC

Named customers4 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Seven partnerships are on record, tiered core and flagship.

• MITRE CorporationcoreStrategic or Co-development Partner · 1 January 2014Hosts the CRADM (Cyber Resiliency Technical Guidance Documents) collection on their public industry-perspective website. These 28 documents provide guidance on how organizations can best protect themselves from cyber-attack.
• Carnegie Mellon University Software Engineering InstitutecoreStrategic or Co-development Partner · 1 January 2014Hosts the Insider Threat Whitepaper 'Analytic Approaches to Detect Insider Threat' and collaborated on research regarding insider threat detection analytics.
• Department of Homeland Security CISAcoreStrategic or Co-development Partner · 1 January 2014Collaborated on resilient time guidance documents, IoT acquisition guidance, and life critical embedded systems security tenets. Multiple joint publications with DHS on cybersecurity guidance.
• National Institute of Standards and Technology (NIST)coreStrategic or Co-development Partner · 1 January 2014Formal comment and response process on NIST Framework for Improving Critical Infrastructure Security and NIST Special Publication 800-161. Active engagement in cybersecurity standards development.
• Department of Homeland SecuritycoreStrategic or Co-development Partner · 1 January 2006Primary government coordinating partner for critical infrastructure protection and cybersecurity activities. The IT SCC serves as the principal industry entity for coordinating with DHS on wide range of critical infrastructure protection and cybersecurity activities and issues.
• Information Technology Industry Council (ITI)coreStrategic or Co-development Partner · 1 January 2006The IT SCC is hosted by ITI and operates from ITI's Washington, DC offices. ITI serves as the administrative home for the coordinating council.
• Communications Sector Coordinating CouncilflagshipStrategic or Co-development Partner · 1 January 2006Annual joint meeting partner for cross-sector coordination. The IT SCC and Communications SCC collaborate on shared cybersecurity challenges and hold annual meetings with government partners together.

Scale indicators2 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Information Technology Information Sharing and Analysis Center (IT-ISAC): Closely adjacent cybersecurity coordination body for the IT sector that focuses on real-time threat information sharing rather than policy coordination. Often co-engaged with IT SCC working groups on threat intelligence and incident response, making it a functional peer in the IT-sector cyber ecosystem.
• Energy Sector Coordinating Council (ESCC): Direct peer coordinating the energy sector with government on critical infrastructure and cybersecurity. Operates under the identical SCC framework that the IT SCC participates in, with overlapping member archetypes (large sector companies, trade associations, and government partners).
• Communications Sector Coordinating Council (CSCC): Direct peer and sister coordinating council that holds annual joint meetings with IT SCC. It operates under the same DHS-recognized SCC model for the communications sector, making it the most comparable coordination body in structure, mission, and operating cadence.
• Financial Services Sector Coordinating Council (FSSCC): One of the parallel sector coordinating councils under the same DHS critical infrastructure protection framework. FSSCC coordinates between the financial services sector and government on cybersecurity and resilience, making it a direct structural and functional peer to the IT SCC.
• Health Sector Coordinating Council (HSCC): Direct peer operating under the same government-recognized SCC framework for the healthcare sector. It convenes health industry stakeholders with government partners on critical infrastructure security, paralleling the IT SCC's industry-government coordination role.

Others

• MITRE Corporation: Federally funded research and development center that hosts the CRADM cyber resiliency documents produced in partnership with the IT SCC. Functions as a technical enabler and partner rather than a direct competitor, sharing the IT SCC's mission of advancing critical infrastructure cyber resilience.
• National Institute of Standards and Technology (NIST): Federal agency that the IT SCC engages with through formal RFI comments on the Cybersecurity Framework and NIST SP 800-161. NIST is a regulator/standards body that the IT SCC interfaces with, rather than a peer organization, but the structural relationship is core to the IT SCC's role.
• Carnegie Mellon University Software Engineering Institute (SEI): Research partner that collaborated with IT SCC on the 'Analytic Approaches to Detect Insider Threat' whitepaper. Provides technical research and CERT capabilities that complement the IT SCC's policy and coordination work.

Emerging players

• National Council of ISACs: Umbrella organization for the ISACs across critical infrastructure sectors. Adjacent to the IT SCC's coordination role but focused on operational threat sharing rather than policy-level industry-government coordination.

Broad incumbents

• Information Technology Industry Council (ITI): Parent organization and administrative host of the IT SCC; the largest U.S. IT industry trade association. Operates as a broader industry advocacy body with global policy reach, while the IT SCC functions as a DHS-recognized sector coordination arm within ITI's ecosystem.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks5 records

Key highlights6 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about U.S. IT Sector Coordinating Council