Rec. 1: The DoD OIG recommended that the DoD Chief Information Officer, in coordination with the Under Secretary of Defense for Policy, issue DoD-wide policy implementing the Cybersecurity Information Sharing Act of 2015 requirements, including a requirement for the DoD Components to document barriers to sharing cyber threat indicators and defensive measures and take appropriate actions to mitigate the identified barriers.