#4269 Cybersecurity Information Sources

#4269 What are good sources for staying current on Cybersecurity standards and threats?

Comprehensive Intelligence Architectures: A Strategic Evaluation of Global Cybersecurity Standards, Threat Landscapes, and Information Sharing EcosystemsThe contemporary cybersecurity environment is defined by an unprecedented rate of technical innovation and an equally rapid expansion of the threat surface. For organizations tasked with protecting critical information assets, the traditional model of reactive defense has proven insufficient. Resilience now necessitates a proactive, multi-modal intelligence strategy that integrates high-level governance frameworks, technical vulnerability repositories, and collaborative sharing networks. This report provides a detailed examination of the most authoritative sources for staying current on cybersecurity standards and threats, offering a synthesis of the mechanisms through which global security postures are established, monitored, and defended.
The Evolution of Cybersecurity Frameworks and Governance StandardsAt the center of any robust cybersecurity program lies the foundational framework, which serves as the primary instrument for aligning security initiatives with broader organizational objectives. These standards provide a common taxonomy and a structured methodology for managing risk, ensuring that technical controls are not implemented in isolation but as part of a coherent strategy.
The Paradigm Shift of NIST CSF 2.0The National Institute of Standards and Technology (NIST) remains the preeminent authority for cybersecurity guidance in the United States, with its work influencing standards globally. The transition to the NIST Cybersecurity Framework (CSF) 2.0, which marked its two-year anniversary on February 24, 2026, represents a fundamental shift in risk management philosophy. Originally conceived to protect critical infrastructure, CSF 2.0 has been re-architected to support organizations of all sizes and sectors, reflecting the universal nature of modern cyber risk.   
The most significant update in Version 2.0 is the introduction of the "Govern" function. By elevating governance to a core pillar alongside Identify, Protect, Detect, Respond, and Recover, NIST acknowledges that cybersecurity is an enterprise-wide responsibility that starts at the executive and board levels. This new function focuses on establishing the organization’s cybersecurity risk management strategy, expectations, and oversight mechanisms. To support this implementation, NIST has released specialized resources, including the CSF 2.0 Informative References Quick-Start Guide and SP 1308, which provides a roadmap for integrating cybersecurity with enterprise risk management (ERM) and workforce management.   
CSF 2.0 FunctionStrategic ObjectiveCore Implementation Focus
GovernStrategic OversightStrategy, policies, roles, and oversight mechanisms.
IdentifyRisk AwarenessAsset management, risk assessment, and supply chain visibility.
ProtectDefensive SafeguardsIdentity management, data security, and awareness training.
DetectEvent VisibilityMonitoring and detection of anomalies or potential breaches.
RespondIncident ActionResponse planning, communications, and mitigation strategies.
RecoverResilience RestorationExecution of recovery plans and continuous improvement.
   
Beyond the core functions, NIST continues to lead in emerging domains. Recent workshops, such as the Second NIST Cyber AI Profile Workshop held in early 2026, highlight the agency's commitment to securing the intersection of cybersecurity and artificial intelligence. Organizations looking to stay current must monitor the NIST CSF Resource Center, which provides digital tools, implementation profiles for specific communities (such as the Transit Cybersecurity Framework Community Profile), and mappings to other international standards.   
International and Comparative Framework EcosystemsWhile NIST provides a non-prescriptive, flexible approach favored in the U.S., the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) provide the global benchmark through the ISO/IEC 27000 series. Specifically, ISO/IEC 27001 is the standard for Establishing, Implementing, Maintaining, and Continually Improving an Information Security Management System (ISMS). Unlike the NIST CSF, ISO 27001 offers a formal certification process, making it the "gold standard" for organizations that must demonstrate security maturity to international clients and partners.   
The choice of framework often depends on the organizational maturity level and regulatory environment. For companies starting from scratch, the Center for Internet Security (CIS) Controls offer a prioritized, actionable list of 18 safeguards designed to stop the most common cyberattacks. These are organized into Implementation Groups (IGs) to help small and medium-sized businesses focus on "essential cyber hygiene" (IG1) before progressing to more complex environments (IG2 and IG3).   
Requirement ContextRecommended FrameworkStrategic Rationale
Initial Security PostureCIS ControlsPrioritized, actionable, and low barrier to entry.
International OperationsISO/IEC 27001Globally recognized certification for trust-building.
Comprehensive U.S. GovernanceNIST CSF 2.0Flexible guidance that bridges technical and executive tiers.
Multi-Regulatory ComplianceHITRUST CSFConsolidates HIPAA, PCI, ISO, and NIST into one audit.
IT Governance FocusCOBITAligns IT risk with high-level enterprise performance.
Distributed Team SecurityNIST CSF or ISO 27001Strong emphasis on access control and remote monitoring.
   
For sectors like healthcare, the HITRUST CSF is a vital resource because it maps requirements from NIST, ISO, HIPAA, PCI DSS, and FedRAMP into a single framework. This allows organizations to satisfy multiple regulatory obligations through a single assessment, significantly reducing the administrative burden of compliance.   
Governmental Intelligence and National Security ArchitecturesGovernmental agencies provide the most authoritative intelligence regarding nation-state actors and critical infrastructure threats. These entities leverage massive collection capabilities and international partnerships to provide real-time warnings and technical guidance.
CISA: The Operational Lead for National DefenseThe Cybersecurity and Infrastructure Security Agency (CISA) serves as the primary coordinator for protecting U.S. critical infrastructure. CISA’s intelligence output is diverse, ranging from immediate threat alerts to deep-dive malware analysis. One of its most indispensable tools is the Known Exploited Vulnerabilities (KEV) catalog. By focusing on vulnerabilities that have been exploited in the wild, the KEV catalog allows organizations to move beyond theoretical risk scores (like CVSS) and prioritize patches based on actual adversary behavior.   
In early 2026, CISA’s activity has been particularly intense, with multiple alerts regarding vulnerabilities in Cisco SD-WAN systems and F5 devices. On March 20, 2026, CISA added five new vulnerabilities to the KEV catalog, following similar additions throughout the month. These alerts often include "Emergency Directives," such as Directive 26-03, which mandated federal agencies to inventory and mitigate critical flaws in software-defined wide area network (SD-WAN) systems.   
CISA Notification TypePrimary FunctionIntended Use Case
AlertImmediate WarningHigh-impact threats, newly disclosed exploits, or DDoS events.
Advisory (CSA)Technical IntelligenceDetailed documentation of TTPs, IOCs, and mitigations.
Malware Analysis (MAR)Functional AnalysisDeep dive into specific malware samples and signatures.
KEV CatalogPrioritization ToolMandatory patching list based on active exploitation.
   
CISA also focuses on the concept of "Shields Ready," which emphasizes proactive preparedness for large-scale cyber conflicts. Its recent guidance, "Why Johnny Can’t Authenticate," highlights barriers to secure communication in operational technology (OT) and provides actionable recommendations for manufacturers to embrace "secure-by-design" principles.   
The FBI and Inter-Agency Threat CollaborationThe Federal Bureau of Investigation (FBI) provides a crucial investigative layer to cybersecurity intelligence. Through the Internet Crime Complaint Center (IC3), the FBI tracks and reports on cybercrime trends such as ransomware and business email compromise. Recent PSAs from the FBI and CISA have warned about Russian intelligence services targeting commercial messaging application accounts, reflecting a trend toward the exploitation of shadow IT and personal devices for espionage.   
The FBI frequently releases joint advisories with international partners, such as the NCSC-UK and the Australian Signals Directorate (ASD). For instance, recent joint reports have detailed the tactics of the "Silent Ransom Group" (also known as Luna Moth) and the deployment of "LummaC2" information stealers. These advisories provide defenders with the specific Indicators of Compromise (IOCs) needed to detect and neutralize threats before data exfiltration occurs.   
The NSA and the Future of Cryptographic StandardsThe National Security Agency (NSA) operates at the vanguard of cybersecurity standards, particularly those involving national security systems (NSS). The NSA’s Center for Cybersecurity Standards works closely with NIST and international bodies to develop resilient architectures for 5G networks and post-quantum cryptography. As the threat of quantum computing looms, the NSA is standardizing commercial cryptographic primitives to ensure that communications remain secure in a future environment where current encryption may be easily broken.   
International Intelligence: ENISA and APAC PerspectivesIn the European Union, the EU Agency for Cybersecurity (ENISA) is the primary body for achieving a high common level of cybersecurity. Its work is currently dominated by the implementation of the NIS2 Directive, which sets requirements for risk management in 18 critical sectors. ENISA’s technical guidelines help digital infrastructure and managed service providers align with these new legal requirements.   
ENISA’s annual Threat Landscape (ETL) report provides a comprehensive overview of the most prominent threats facing the EU, including ransomware, malware, and DDoS attacks. In 2025 and early 2026, ENISA highlighted a trend of threat groups reusing tools and techniques across different sectors, necessitating a more "threat-centric" approach to contextual analysis.   
Regional AgencyPrimary GeographyStrategic Focus
CISAUnited StatesInfrastructure resilience and vulnerability management.
ENISAEuropean UnionNIS2 implementation and regional threat landscaping.
JPCERT/CCJapanIncident coordination and APAC regional secretariat.
ASD (ACSC)AustraliaCollaborative threat alerts and cyber defense operations.
CERT-InIndiaNational incident response and situational awareness.
   
In the Asia-Pacific region, JPCERT/CC acts as a central hub for incident coordination in Japan and serves as the secretariat for APCERT. This regional collaboration is vital for tracking threats that often originate in or target specific economic zones before spreading globally.   
The Technical Core: Vulnerability Databases and Exploit RepositoriesFor technical practitioners, the ability to identify, track, and understand specific vulnerabilities is the cornerstone of effective defense. Standardized naming conventions and centralized databases provide the necessary taxonomy for this work.
Standardizing Identification: CVE and NVDThe Common Vulnerabilities and Exposures (CVE) list, managed by the MITRE Corporation, provides a standardized dictionary of publicly disclosed security flaws. By assigning a unique CVE ID to each vulnerability, the program enables communication between disparate tools and databases, helping to improve security coverage and interoperability.   
The CVE list is the foundation for the National Vulnerability Database (NVD), maintained by NIST. The NVD enhances the basic CVE information with additional analysis, such as CVSS scores, which quantify the severity of a vulnerability based on its impact on confidentiality, integrity, and availability. However, recent years have seen the emergence of third-party alternatives that aim to compensate for perceived delays or inaccuracies in official databases. CVEdetails, for instance, provides enriched context by integrating advisories, exploit availability, and source code changes into its database.   
Offensive Intelligence: Exploit-DB and PoC RepositoriesWhile identification is essential, defenders also need to understand how vulnerabilities are actually exploited. The Exploit Database (Exploit-DB), maintained by OffSec, is the primary archive of public exploits and corresponding vulnerable software. It serves as a repository for proof-of-concept (PoC) code rather than simple advisories, making it a valuable resource for penetration testers and researchers who need actionable data immediately.   
The Exploit-DB is often utilized through tools like SearchSploit, which allows users to carry a complete copy of the database for offline searches—a critical capability for security assessments on air-gapped networks. Other valuable repositories include GitHub Advisories, which focus on vulnerabilities within the open-source software ecosystem, and Vulners, which provides a comprehensive knowledge graph linking CVEs to exploitability signals and fix versions.   
RepositoryPrimary ContentKey Use Case
CVE / NVDIdentification and Severity ScoresCataloging vulnerabilities and prioritizing patches.
Exploit-DBActual Exploit and PoC CodeTesting defenses and verifying vulnerabilities.
GitHub AdvisoriesOpen Source FlawsSecuring the software supply chain.
Packet StormAdvisories and PoCsResearching newly discovered exploits.
VulnersEnriched Vulnerability IntelligencePrioritizing remediation based on real-world risk signals.
   
Collective Defense through Information Sharing EcosystemsThe complexity of modern cyber threats means that no single organization can defend itself in isolation. Collective defense, based on the rapid sharing of threat intelligence and best practices, has become a core requirement for resilience.
ISACs: The Hubs of Sectoral IntelligenceInformation Sharing and Analysis Centers (ISACs) are member-driven organizations that provide a central resource for gathering and disseminating threat intelligence within specific critical infrastructure sectors. The Financial Services ISAC (FS-ISAC) is the global leader in this space, facilitating "trusted, real-time visibility" for its 5,000 member firms.   
FS-ISAC operates through specialized communities such as the Securities Industry Risk Group (SIRG) and the Business Resilience Committee (BRC), which focus on specific sub-sectors or functional interests. Its IntelEx (Intelligence Exchange) platform allows for the rapid sharing of actionable intelligence, compressing the time from threat detection to sector-wide notification from hours to minutes. This level of specialization ensures that a bank receives intelligence that is specifically relevant to the financial system, rather than the broad noise of general security news.   
Public-Private Partnerships: The InfraGard ModelInfraGard represents the primary mechanism for direct collaboration between the FBI and the private sector stakeholders who own and operate most of the nation’s critical infrastructure. With over 37,000 members, InfraGard provides access to a secure web portal featuring FBI intelligence bulletins, analytical reports, and vulnerability assessments.   
The value of InfraGard lies in its regional structure. Each of the 77+ local InfraGard Member Alliances (IMAs) is affiliated with an FBI Field Office, fostering direct relationships between local security leaders and federal law enforcement. This allows for a two-way exchange: the FBI provides high-level threat warnings, while private sector experts offer industry-specific insights that can help prevent terrorism, cybercrime, and espionage.   
Threat Intelligence Platforms (TIPs) and Peer SharingTo manage the volume of intelligence from these various sources, organizations increasingly rely on specialized platforms. Open-source tools like MISP and OpenCTI are widely used by national agencies and sectorial CERTs to store, correlate, and share threat intelligence. Commercial TIPs, such as Recorded Future and Mandiant, offer integrated solutions that enrich security events with data from the open, deep, and dark web, providing a more comprehensive view of the threat landscape.   
PlatformCategoryCore Strength
MISPOpen SourceStandard for sharing IOCs and technical correlation.
OpenCTIOpen SourceKnowledge management and attack pattern visualization.
Recorded FutureCommercialMassive data coverage and AI-driven analysis.
MandiantCommercialDeep expertise in APT tracking and incident response.
CrowdStrike Falcon XIntegratedDirect integration of intelligence into endpoint security.
   
State-Level Governance: The Texas Cybersecurity ArchitectureTexas has developed a sophisticated model for regional cybersecurity governance that serves as a blueprint for other states. This model integrates central policy oversight with localized operational support.
DIR Standards and Tactical ComplianceThe Texas Department of Information Resources (DIR) sets the strategic direction for IT statewide, managing the 2024-2029 Texas Cybersecurity Strategic Plan. This plan aligns organizational efforts with five key goals: risk management, governance, education, resilience, and workforce development.   
Compliance is enforced through Texas Administrative Code (TAC) Chapter 202, which provides a baseline of security standards for state agencies and higher education institutions. The DIR also oversees the certification of cybersecurity training programs, ensuring that state and local government employees complete annual training focused on identifying and addressing threats.   
Regional Security Operations Centers (RSOCs)One of the most innovative components of the Texas model is the Regional Security Operations Center (RSOC) network. Funded by the state and operated by universities, RSOCs provide cybersecurity services to local and regional government entities that might otherwise lack the resources for advanced monitoring.   
The RSOCs at UT Austin, Angelo State University, and UTRGV offer real-time network monitoring, incident response, and guidance on implementing robust security policies. This initiative also serves as a workforce development tool, providing ASU and UT students with paid internships where they gain hands-on experience investigations, monitoring event logs, and using industry-leading SIEM and EDR tools.   
Texas RSOC LocationOperating PartnerPrimary Services
AustinUniversity of TexasMDBR+, GRC services, and real-time monitoring.
San AngeloAngelo State University24/7 SIEM/EDR monitoring, training, and ASU internships.
Edinburg/BrownsvilleUTRGVIncident response, policy planning, and awareness training.
   
Media, Investigative Journalism, and Professional InsightIn addition to official sources, the cybersecurity community relies on a diverse ecosystem of investigative journalists, news outlets, and audio content for deep-dive analysis and narrative context.
Investigative Security Journalism: The Krebs and Schneier StyleInvestigative outlets provide the narrative depth that technical feeds often lack. Krebs on Security, produced by Brian Krebs, is a hallmark of this genre, focusing on in-depth investigations into cybercrime syndicates. Krebs is known for identifying specific threat actors through OSINT and direct inquiry, such as his analysis of the "Kimwolf" botnet and the psychological extortion tactics of groups like SLSH.   
Bruce Schneier's Schneier on Security offers a different but equally vital perspective, focusing on the intersection of security, cryptography, and public policy. These sources are essential for security leaders who need to understand the underlying trends and sociological factors that drive the threat landscape.   
News Outlets, Newsletters, and AggregatorsFor daily operational awareness, outlets like The Hacker News (THN) and Dark Reading provide a steady stream of reporting on vulnerabilities and breaches. CSO Online focuses more on security leadership and governance, providing advice on communicating risk to board-level executives.   
For the time-constrained professional, newsletters like TL;DR Security condense information from over 100 sources into concise summaries, while the SANS @RISK newsletter provides code snippets for vulnerability mitigation, bridging the gap between theoretical knowledge and practical application.   
Publication / NewsletterFrequencyBest For
The Hacker NewsDailyBreaking news and technical malware analysis.
Dark ReadingDailyDeep APT analysis and enterprise policy trends.
Krebs on SecurityWeeklyInvestigating emerging threats and dark web activity.
TL;DR SecurityDailyQuick insights and headlines for busy executives.
SANS @RISKWeeklyTactical mitigation code for new vulnerabilities.
   
Podcasts and the Rise of Narrative IntelligencePodcasts have become a preferred medium for professionals to consume high-quality intelligence during non-desk time. Darknet Diaries offers an immersive, narrative look at real-world cybercrime, while Risky Business provides a weekly, high-level commentary on security economics and global policy. For technical clarity, Security Now remains a long-standing favorite, offering detailed breakdowns of patch behavior and protocol vulnerabilities.   
Professional Development and Certification NetworksContinuous education is a core component of staying current. Professional associations not only provide certifications but also act as intelligence sources through their research reports and webinars.
ISC2 and ISACA: Certification as an Intelligence FeedISC2, known for the CISSP, and ISACA, known for CISA and CISM, maintain massive global communities of practitioners. ISC2’s "Security Briefings" offer expert-led deep dives into emerging threats like AI-driven attacks and API security. ISACA’s training ecosystem includes on-demand courses in threat hunting and vulnerability analysis, providing hands-on experience in simulated real-world environments.   
The SANS Institute remains the leader in technical cybersecurity training. Its "Reading Room" is an extensive library of whitepapers and research, while its faculty provide regular insights on trending topics via the SANS blog.   
Community Forums and Open Source Intelligence (OSINT)In the absence of official intelligence, peer-to-peer sharing in digital communities provides a raw, ground-level view of the landscape. Subreddits like r/cybersecurity and r/netsec are popular for discussing the latest trends and mistakes to avoid. More specialized Discord servers, such as NahamSec for bug hunters or ProjectOwl for OSINT enthusiasts, offer real-time collaboration that official channels cannot match.   
Community PlatformFocus AreaEngagement Style
Reddit (r/cybersecurity)Broad Industry NewsDiscussion and peer advice.
Discord (NahamSec)Hacking and PentestingReal-time chat and collaboration.
LinkedIn GroupsProfessional NetworkingCISO perspectives and hiring trends.
Local Meetups (BSides)Technical SkillsIn-person networking and local research.
OWASP ChaptersWeb Application SecurityPeer review and collaborative standards.
   
Strategic Synthesis and Future OutlookStaying current on cybersecurity standards and threats requires a holistic intelligence strategy that synthesizes diverse information streams. For a CISO or security leader, the architecture of this strategy should ideally include three distinct layers:
Strategic Layer: Monitoring NIST CSF 2.0 and ISO 27001 for governance trends; reading Schneier on Security and CSO Online for policy and ethical perspectives; engaging with ISC2 and ISACA for executive briefings.
Tactical Layer: Utilizing the CISA KEV catalog for patching prioritization; participating in sector-specific ISACs (like FS-ISAC) for actionable threat data; leveraging InfraGard for direct collaboration with federal law enforcement.
Operational Layer: Monitoring the CVE/NVD for specific flaw identification; using Exploit-DB and GitHub Advisories to understand offensive techniques; subscribing to The Hacker News or SANS @RISK for daily technical updates.
As we look toward 2027 and beyond, the intelligence landscape will be increasingly defined by the integration of AI in both threat generation and defensive analysis. The emergence of autonomous agents and the persistent threat of quantum computing will necessitate even faster information sharing and the adoption of more resilient cryptographic standards. Organizations that can effectively navigate these varied sources of intelligence—from the tactical code snippets of Exploit-DB to the strategic governance of NIST CSF 2.0—will be the best positioned to survive and thrive in an increasingly volatile digital world.

CSF 2.0 Function	Strategic Objective	Core Implementation Focus
Govern	Strategic Oversight	Strategy, policies, roles, and oversight mechanisms.
Identify	Risk Awareness	Asset management, risk assessment, and supply chain visibility.
Protect	Defensive Safeguards	Identity management, data security, and awareness training.
Detect	Event Visibility	Monitoring and detection of anomalies or potential breaches.
Respond	Incident Action	Response planning, communications, and mitigation strategies.
Recover	Resilience Restoration	Execution of recovery plans and continuous improvement.

Requirement Context	Recommended Framework	Strategic Rationale
Initial Security Posture	CIS Controls	Prioritized, actionable, and low barrier to entry.
International Operations	ISO/IEC 27001	Globally recognized certification for trust-building.
Comprehensive U.S. Governance	NIST CSF 2.0	Flexible guidance that bridges technical and executive tiers.
Multi-Regulatory Compliance	HITRUST CSF	Consolidates HIPAA, PCI, ISO, and NIST into one audit.
IT Governance Focus	COBIT	Aligns IT risk with high-level enterprise performance.
Distributed Team Security	NIST CSF or ISO 27001	Strong emphasis on access control and remote monitoring.

CISA Notification Type	Primary Function	Intended Use Case
Alert	Immediate Warning	High-impact threats, newly disclosed exploits, or DDoS events.
Advisory (CSA)	Technical Intelligence	Detailed documentation of TTPs, IOCs, and mitigations.
Malware Analysis (MAR)	Functional Analysis	Deep dive into specific malware samples and signatures.
KEV Catalog	Prioritization Tool	Mandatory patching list based on active exploitation.

Regional Agency	Primary Geography	Strategic Focus
CISA	United States	Infrastructure resilience and vulnerability management.
ENISA	European Union	NIS2 implementation and regional threat landscaping.
JPCERT/CC	Japan	Incident coordination and APAC regional secretariat.
ASD (ACSC)	Australia	Collaborative threat alerts and cyber defense operations.
CERT-In	India	National incident response and situational awareness.

Repository	Primary Content	Key Use Case
CVE / NVD	Identification and Severity Scores	Cataloging vulnerabilities and prioritizing patches.
Exploit-DB	Actual Exploit and PoC Code	Testing defenses and verifying vulnerabilities.
GitHub Advisories	Open Source Flaws	Securing the software supply chain.
Packet Storm	Advisories and PoCs	Researching newly discovered exploits.
Vulners	Enriched Vulnerability Intelligence	Prioritizing remediation based on real-world risk signals.

Platform	Category	Core Strength
MISP	Open Source	Standard for sharing IOCs and technical correlation.
OpenCTI	Open Source	Knowledge management and attack pattern visualization.
Recorded Future	Commercial	Massive data coverage and AI-driven analysis.
Mandiant	Commercial	Deep expertise in APT tracking and incident response.
CrowdStrike Falcon X	Integrated	Direct integration of intelligence into endpoint security.

Texas RSOC Location	Operating Partner	Primary Services
Austin	University of Texas	MDBR+, GRC services, and real-time monitoring.
San Angelo	Angelo State University	24/7 SIEM/EDR monitoring, training, and ASU internships.
Edinburg/Brownsville	UTRGV	Incident response, policy planning, and awareness training.

Publication / Newsletter	Frequency	Best For
The Hacker News	Daily	Breaking news and technical malware analysis.
Dark Reading	Daily	Deep APT analysis and enterprise policy trends.
Krebs on Security	Weekly	Investigating emerging threats and dark web activity.
TL;DR Security	Daily	Quick insights and headlines for busy executives.
SANS @RISK	Weekly	Tactical mitigation code for new vulnerabilities.

Community Platform	Focus Area	Engagement Style
Reddit (r/cybersecurity)	Broad Industry News	Discussion and peer advice.
Discord (NahamSec)	Hacking and Pentesting	Real-time chat and collaboration.
LinkedIn Groups	Professional Networking	CISO perspectives and hiring trends.
Local Meetups (BSides)	Technical Skills	In-person networking and local research.
OWASP Chapters	Web Application Security	Peer review and collaborative standards.