Nine of the 14 selected federal agencies identified limited voluntary sharing as a challenge to effective cyber threat information sharing. Specifically, critical infrastructure owners and operators are not always required to share information on cyber incidents and may have other reasons for not voluntarily sharing information on cyber incidents. For example, CISA officials stated that, although the agency operates a system that allows critical infrastructure owners and operators to provide cyber incident reports to the agency, it receives very few reports.
National Cybersecurity Strategy Needs to Address Information Sharing Performance Measures and Methods GAO - USA 2023

Institutions that manage and investigate cyber incidents (…) do not in all cases ex-change information about cyber incidents that are relevant to them according to the nature of their activities, so these institutions do not make assumptions to quickly recognize different types cyber incidents and transfer the information to the competent authorities so that the latter can act in a timely manner. Prevention of criminal acts or violations, cyber security entities and society may suffer as a result.
Cyber Security Assurance VK - Lithuania 2022

Departments still find it difficult to understand the roles and responsibilities of the cyber organisations at the centre of government.
Government cyber resilience NAO - UK 2025

Finansinspektionen’s management has strongly emphasised that it is important for the staff in their daily work to discuss and reflect on the role of government officials and the risk of conflicts of interest. This is highlighted as one of the authority’s most important instruments for combating conflicts of interest. At the same time, every third case officer points out that their immediate manager does not initiate such discussions, and every fourth case officer does not think that the issues are discussed sufficiently.
Finansinspektionen’s work to combat conflicts of interest RiR - Sweden 2020

Ten organizations, seven federal agencies and three nonfederal entities, identified a lack of timely sharing of cyber threat information as a challenge to effective sharing of this information. Specifically, these organizations stated that federal agencies do not always share such information with critical infrastructure owners and operators in a timely manner. For example, officials at a sector coordinating council pointed out that in March 2022 the FBI shared information about the October 2021 cyberattacks targeting election officials. These officials explained that it would have been more valuable to share this information near the time of the attack.
National Cybersecurity Strategy Needs to Address Information Sharing Performance Measures and Methods GAO - USA 2023

To meet the household saving target, the Minister is seeking a change in behaviour and greater water-awareness in construction projects. He is working on a national water awareness campaign. It is difficult to predict how effective measures to change behaviour will be.
Drinking water under pressure NCA - Netherlands 2025