35 business groups urge 10-year renewal of CISA 2015 information-sharing law in FY2027 NDAA ahead of Dec. 11 expiry
35 business groups, led by the Business Roundtable and including the Chamber of Commerce, sent a letter on Sunday to House and Senate Armed Services leaders. They want a 10-year renewal of the Cybersecurity Information Sharing Act of 2015 (CISA 2015) included in the fiscal 2027 National Defense Authorization Act. The law provides legal protections for threat data sharing between government and industry and among companies. It has alternated between short-term extensions and lapses since its original sunset last year, and it is now set to expire on Dec. 11, 2026. The groups argue that AI systems that find and exploit vulnerabilities at machine speed make legal certainty for information sharing more urgent. The House NDAA version includes a 10-year extension, but the Senate version does not. Senate Homeland Security chairman Rand Paul has conditioned long-term support on provisions curbing past practices at the Cybersecurity and Infrastructure Security Agency that he says threaten free speech. Top Trump administration cyber officials want a straightforward extension.
Remediação
No technical remediation applies. Organizations that depend on CISA 2015 liability protections should plan for the Dec. 11 expiry and watch the final NDAA negotiations.
Linha do tempo
-
35 business groups urge 10-year renewal of CISA 2015 information-sharing law in FY2027 NDAA ahead of Dec. 11 expiry
ler a análise desta fonte ocultar
35 business groups, led by the Business Roundtable and including the Chamber of Commerce, sent a letter on Sunday to House and Senate Armed Services leaders. They want a 10-year renewal of the Cybersecurity Information Sharing Act of 2015 (CISA 2015) included in the fiscal 2027 National Defense Authorization Act. The law provides legal protections for threat data sharing between government and industry and among companies. It has alternated between short-term extensions and lapses since its original sunset last year, and it is now set to expire on Dec. 11, 2026. The groups argue that AI systems that find and exploit vulnerabilities at machine speed make legal certainty for information sharing more urgent. The House NDAA version includes a 10-year extension, but the Senate version does not. Senate Homeland Security chairman Rand Paul has conditioned long-term support on provisions curbing past practices at the Cybersecurity and Infrastructure Security Agency that he says threaten free speech. Top Trump administration cyber officials want a straightforward extension.
Remediation
No technical remediation applies. Organizations that depend on CISA 2015 liability protections should plan for the Dec. 11 expiry and watch the final NDAA negotiations.