The critical success factors and challenges described by organizations experienced in sharing sensitive and time-critical information and the lessons they have learned provide useful insights for other entities who are also trying to develop means of appropriately sharing information on computer-based vulnerabilities and the related risks.