; (ii) an indicator of how the intruder gained initial access, accessed agency data or systems, and undertook additional actions on the network of the agency; and (iii) information that would support enabling defensive measures; and (iv) other information that may assist in identifying other victims; (B) information to help prevent similar incidents, such as information about relevant safeguards in place when the incident occurred and the effectiveness of those safeguards; and (C) information to aid in incident response, such as— (i) a description of the affected systems or networks; (ii) the estimated dates of when the incident occurred; and (iii) information that could reasonably help identify any malicious actor that may have conducted or caused the incident, subject to appropriate privacy protections. (3) Information sharing The Director of the Cybersecurity and Infrastructure Security Agency shall— (A) make incident information provided under paragraph (1) available to the Director and the National Cyber Director; (B) to the greatest extent practicable, share information relating to an incident with— (i) the head of any agency that may be— (I) impacted by the incident; (II) particularly susceptible to the incident; or (III) similarly targeted by the incident; and (ii) appropriate Federal law enforcement agencies to facilitate any necessary threat response activities, as requested; (C) coordinate any necessary information sharing efforts relating to a major incident with the private sector