A threat and vulnerability awareness program that includes a cross-organization information-sharing capability shall be implemented.
It shall be identified where automated mechanisms can be implemented to make security alert and advisory information available to relevant organization stakeholders.