Congress Urged to Extend Cybersecurity Information Sharing Act Amid AI Threats

• •35 industry groups are advocating for a 10-year extension of CISA 2015.
• •The current authorization for CISA 2015 expires on December 11, 2026.
• •AI technologies are increasing the urgency for the law's renewal due to faster exploitation of vulnerabilities.

A coalition of 35 business associations is pressing Congress to extend the Cybersecurity Information Sharing Act of 2015 (CISA 2015) through 2035, as the current authorization expires on December 11, 2026. The law facilitates voluntary sharing of cyber threat information between private entities and the federal government, providing essential legal protections that encourage such cooperation. Industry leaders warn that the rise of AI-enabled cyber threats has increased the urgency for reauthorization, as these technologies can exploit vulnerabilities at speeds. The House version of the National Defense Authorization Act (NDAA) includes a provision for a 10-year extension, but the Senate's version does not. Without the law's protections, companies may hesitate to share critical threat data, potentially hindering national cybersecurity efforts. The lobbying groups emphasize that maintaining legal certainty is vital for effective information sharing in the face of evolving cyber threats.