cyber.hendryadrian.com
Security News · cyberscoop.com

Business Groups Urge 10-Year Extension of CISA 2015

· Original article ↗

Summary

Thirty-five business groups urged Congress to extend CISA 2015 for 10 years through the fiscal 2027 defense bill. The law, which provides legal protections for cyber threat-information sharing, is set to expire Dec. 11, 2026.

Key points

  • Thirty-five business groups asked House and Senate Armed Services leaders to include a 10-year extension of CISA 2015 in final negotiations over the fiscal 2027 National Defense Authorization Act.
  • CISA 2015 provides legal protections for threat-information sharing between government and private-sector entities and among companies.
  • The law is set to expire on Dec. 11, 2026, following prior short-term renewals and lapses.
  • The House bill includes a 10-year extension; the Senate version does not.
  • Sen. Rand Paul has tied his support for a long-term extension to provisions addressing practices by the Cybersecurity and Infrastructure Security Agency that he says threaten free speech.
  • The groups cited AI-enabled identification and exploitation of software vulnerabilities as a reason defenders need to share information quickly.

Article Details

Event Type
Business groups’ campaign for a 10-year extension of the Cybersecurity Information Sharing Act of 2015 (CISA 2015) through the fiscal year 2027 National Defense Authorization Act.
Impact
CISA 2015 provides legal protections for cyber threat information sharing between government and private-sector entities and among companies. The law is scheduled to expire on December 11, 2026; the House bill includes a 10-year extension, while the Senate version does not.

People

Rand PaulThe article identifies Paul as Senate Homeland Security and Governmental Affairs Chairman and says he has opposed past efforts to include a long-term CISA 2015 extension unless provisions addressing practices at the Cybersecurity and Infrastructure Security Agency are adopted.

Industries

Aviationlatter of which led the letter, as well as groups representing critical infrastructure sectors such as aviation, telecommunications and technology.Technologyas well as groups representing critical infrastructure sectors such as aviation, telecommunications and technology.Telecommunicationsled the letter, as well as groups representing critical infrastructure sectors such as aviation, telecommunications and technology.