Voluntary information sharing occurs with external stakeholders to achieve broader cybersecurity situational awareness.

Organization should share threat intelligence information actively with other organizations to improve its own threat awareness.

The organization shall actively maintain contacts with stakeholders relevant to the organization's operations and other relevant actors related to the organization's operations and security.

The goal is especially to:

• increase knowledge of best practices and keep up to date with relevant security information
• ensure that organisation's understanding of the security environment is up-to-date and complete