This Recommendation describes the information model for the incident object description exchange format (IODEF) and provides an associated data model specified with XML Schema. The IODEF specifies a data model representation for sharing commonly exchanged information about computer security or other incident types. This is achieved by listing the relevant clauses of IETF RFC 5070 and showing whether they are normative or informative.