Management approval was needed before individuals could share information about incidents and vulnerabilities 
For example, management approval was needed before individuals could share information about potentially sensitive incidents and vulnerabilities.