Our overall objective was to identify information-sharing practices that federal organizations and others can adopt to improve their ability to understand, anticipate, and address computer-based vulnerabilities and incidents.