Timing Drivers

PPPs depend on the following assumptions

1) A clear champion/funder & burning platform exists​.

2) Early adopters (partners) are not identified nor confirmed at the beginning, though a champion has a good idea who to initially convene​.

3) Some existing trust exists among stakeholders and the Trusted Third Party upon which to build​.

4) Some proprietary data must be shared with a Trusted Third Party to collaboratively solve the problem.

5) Data-sharing agreements must be executed prior to sharing data.

Drivers of PPP Timing

The primary factors that either lengthen or shorten the timeline are:

• A PPP will be established faster if a burning platform exists with significant top-down (C-Suite) energy, passion, and support, because the effort will be prioritized and partner time and expertise more easily provided. It will be slower when a strong case must be developed to secure buy-in and resourcing.

• A PPP will be established faster when the initial problem can be made bite-sized with a small subset of partners within the stakeholder ecosystem, starting with a coalition of the willing. It will be slower if the initial prototype requires the meaningful collaboration of a large set of stakeholders, some of which may be initially resistant, or a more complex solution.

• A PPP will be established faster if the community of stakeholders already has good working relationships and some trust exists among them and with MITRE. It will be slower when distrust must be overcome (e.g., industry working with their regulator, competitors who have never collaborated before).

• A PPP will be established faster if a well-respected and passionate federal government champion is highly engaged in catalyzing and launching the PPP in collaboration. It will be slower when USG is not seen as a capable, co-equal partner by industry (e.g., because USG provides suboptimal resources or has unilateral expectations for timing/scope).

• A data-sharing PPP will be established faster  when the data or information to be shared is lower-sensitivity (at least to start with), and when legally-binding data sharing agreements are not required. It will be slowerwhen proprietary data is considered high-risk for partners to share.