To identify practices that could be adopted by federal agencies and others to (1) promote successful sharing of information on computer-based vulnerabilities and incidents and (2) overcome related challenges, we studied 11 organizations experienced in developing pertinent informationsharing relationships and procedures.
The 11 organizations we studied were willing to share all of their information with us.