; and (ii) system vulnerabilities, including zero days, unpatched systems, and information system misconfigurations; (B) the scope and scale of incidents at agencies; (C) common root causes of incidents across multiple agencies; (D) agency incident response, recovery, and remediation actions and the effectiveness of those actions, as applicable; (E) lessons learned and recommendations in responding to, recovering from, remediating, and mitigating future incidents; and (F) trends across multiple agencies to address intrusion detection and incident response capabilities using the metrics established under section 224(c) of the Cybersecurity Act of 2015 ( 6 U.S.C. 1522(c) ). (2) Automated analysis The analyses developed under paragraph (1) shall, to the greatest extent practicable, use machine readable data, automation, and machine learning processes. (3) Sharing of data and analysis (A) In general The Director of the Cybersecurity and Infrastructure Security Agency shall share on an ongoing basis the analyses and underlying data required under this subsection with agencies, the Director, and the National Cyber Director to— (i) improve the understanding of cybersecurity risk of agencies; and (ii) support the cybersecurity improvement efforts of agencies. (B) Format In carrying out subparagraph (A), the Director of the Cybersecurity and Infrastructure Security Agency shall share the analyses— (i) in human-readable written products