A computer implemented method for a trusted third party broker to collect information concerning successful computer security practices from a plurality of source organizations, and to share the collected information at an inter-organizational level privately, the method comprising the steps of: receiving, by a central computer linked to the trusted third party broker, information concerning empirically successful computer security practices, from a plurality of remote computers associated with the plurality of source organizations, wherein different ones of the empirically successful computer security practices are being used at different ones of the plurality of source organizations; amalgamating the information concerning empirically successful computer security practices received from the plurality of remote computers associated with the plurality of source organizations, further comprising gleaning implicitly determined information about at least one of the plurality of source organizations; analyzing the amalgamated information concerning the empirically successful computer security practices received from the plurality of remote computers associated with the plurality of source organizations, further comprising categorizing the amalgamated information based on the implicitly determined information about the at least one source organization; identifying specific information concerning the empirically successful computer security practices to share with at least one specific target organization, based on analyzing category granularity of the amalgamated information, the category granularity including one or more of industry of source organization, source organization type, and source organization size; removing source information from the identified specific information concerning empirically successful computer security practices to share with the at least one specific target organization; and providing the identified specific information concerning empirically successful computer security practices to share with the at least one specific target organization, with the source information removed, wherein the at least one target organization does not receive information identifying the source organization of the provided information concerning empirically successful computer security practices. receiving, by a central computer linked to the trusted third party broker, information concerning empirically successful computer security practices, from a plurality of remote computers associated with the plurality of source organizations, wherein different ones of the empirically successful computer security practices are being used at different ones of the plurality of source organizations; amalgamating the information concerning empirically successful computer security practices received from the plurality of remote computers associated with the plurality of source organizations, further comprising gleaning implicitly determined information about at least one of the plurality of source organizations; analyzing the amalgamated information concerning the empirically successful computer security practices received from the plurality of remote computers associated with the plurality of source organizations, further comprising categorizing the amalgamated information based on the implicitly determined information about the at least one source organization; identifying specific information concerning the empirically successful computer security practices to share with at least one specific target organization, based on analyzing category granularity of the amalgamated information, the category granularity including one or more of industry of source organization, source organization type, and source organization size; removing source information from the identified specific information concerning empirically successful computer security practices to share with the at least one specific target organization; and providing the identified specific information concerning empirically successful computer security practices to share with the at least one specific target organization, with the source information removed, wherein the at least one target organization does not receive information identifying the source organization of the provided information concerning empirically successful computer security practices.