Does your organization voluntarily share cybersecurity incident information with external stakeholders to enhance broader cybersecurity situational awareness?

Voluntary information sharing with external stakeholders (such as industry peers, ISACs/ISAOs, government agencies, or supply chain partners) helps create a collective defense posture against cyber threats. By sharing threat intelligence, incident details, and mitigation strategies, organizations contribute to and benefit from improved threat visibility across their ecosystem. Evidence of fulfillment could include membership documentation in information sharing communities (like FS-ISAC or MS-ISAC), logs or records of information shared through platforms like MISP or STIX/TAXII implementations, formal information sharing agreements with partners, or documentation of participation in industry-specific threat intelligence sharing programs.