The Cybersecurity Information Sharing Act of 2015 (CISA 2015), enacted to facilitate the voluntary exchange of cyber threat information between private entities and the federal government, is set to expire on September 30, 2025. This impending lapse has prompted a concerted effort among industry leaders and policymakers to advocate for its reauthorization, emphasizing the law’s critical role in bolstering national cybersecurity defenses.
CISA 2015 provides legal protections that encourage organizations to share cyber threat indicators without fear of liability, thereby enhancing collective security. The Protecting America’s Cyber Networks Coalition, representing a broad spectrum of industry sectors, has urged Congress to extend the act, highlighting that its expiration would expose the nation to increased cyber threats targeting critical infrastructure and economic stability. ([uschamber.com](https://www.uschamber.com/security/coalition-letter-supporting-reauthorization-of-the-cybersecurity-information-sharing-act-of-2015-cisa-2015?utm_source=openai))
In response to these concerns, Senators Mike Rounds (R-SD) and Gary Peters (D-MI) have introduced bipartisan legislation to extend CISA 2015 for an additional ten years. Senator Rounds emphasized that allowing the legislation to lapse would significantly weaken the nation’s cybersecurity ecosystem, removing vital liability protections and hampering defensive operations across both the defense industrial base and critical infrastructure sectors. ([rounds.senate.gov](https://www.rounds.senate.gov/newsroom/press-releases/rounds-introduces-bill-to-extend-cybersecurity-information-sharing-act-to-prevent-cyber-security-threats?utm_source=openai))
The House Homeland Security Committee has also taken steps to address the reauthorization. Chairman Andrew Garbarino (R-NY) announced a hearing to evaluate the act’s renewal and discuss potential reforms, underscoring the importance of maintaining robust information-sharing frameworks to counter evolving cyber threats. ([homeland.house.gov](https://homeland.house.gov/2025/05/09/media-advisory-chairman-garbarino-announces-hearing-to-weigh-reauthorization-reforms-of-cybersecurity-information-sharing-act-of-2015/?utm_source=openai))
Industry representatives have echoed these sentiments, stressing that a lapse in CISA 2015 would disrupt established communication channels essential for rapid and effective responses to security incidents. John Miller, Senior Vice President of Policy and General Counsel at the Information Technology Industry Council, warned that such a lapse could be interpreted by malicious actors as the U.S. “dropping its guard,” potentially encouraging future attacks on critical infrastructure. ([nextgov.com](https://www.nextgov.com/cybersecurity/2025/05/industry-reps-urge-congress-renew-backbone-cyber-information-sharing-law/405363/?utm_source=openai))
As the expiration date approaches, the consensus among stakeholders is clear: reauthorizing CISA 2015 is imperative to sustain and enhance the collaborative efforts that underpin the nation’s cybersecurity posture. Failure to do so could result in diminished information sharing, leaving both public and private sectors more vulnerable to the increasingly sophisticated landscape of cyber threats.
The Cybersecurity Information Sharing Act of 2015 (CISA 2015), enacted to facilitate the voluntary exchange of cyber threat information between private entities and the federal government, is set to expire on September 30, 2025. This impending lapse has prompted a concerted effort among industry leaders and policymakers to advocate for its reauthorization, emphasizing the law’s critical role in bolstering national cybersecurity defenses.
CISA 2015 provides legal protections that encourage organizations to share cyber threat indicators without fear of liability, thereby enhancing collective security. The Protecting America’s Cyber Networks Coalition, representing a broad spectrum of industry sectors, has urged Congress to extend the act, highlighting that its expiration would expose the nation to increased cyber threats targeting critical infrastructure and economic stability. ([uschamber.com](https://www.uschamber.com/security/coalition-letter-supporting-reauthorization-of-the-cybersecurity-information-sharing-act-of-2015-cisa-2015?utm_source=openai))
In response to these concerns, Senators Mike Rounds (R-SD) and Gary Peters (D-MI) have introduced bipartisan legislation to extend CISA 2015 for an additional ten years. Senator Rounds emphasized that allowing the legislation to lapse would significantly weaken the nation’s cybersecurity ecosystem, removing vital liability protections and hampering defensive operations across both the defense industrial base and critical infrastructure sectors. ([rounds.senate.gov](https://www.rounds.senate.gov/newsroom/press-releases/rounds-introduces-bill-to-extend-cybersecurity-information-sharing-act-to-prevent-cyber-security-threats?utm_source=openai))
The House Homeland Security Committee has also taken steps to address the reauthorization. Chairman Andrew Garbarino (R-NY) announced a hearing to evaluate the act’s renewal and discuss potential reforms, underscoring the importance of maintaining robust information-sharing frameworks to counter evolving cyber threats. ([homeland.house.gov](https://homeland.house.gov/2025/05/09/media-advisory-chairman-garbarino-announces-hearing-to-weigh-reauthorization-reforms-of-cybersecurity-information-sharing-act-of-2015/?utm_source=openai))
Industry representatives have echoed these sentiments, stressing that a lapse in CISA 2015 would disrupt established communication channels essential for rapid and effective responses to security incidents. John Miller, Senior Vice President of Policy and General Counsel at the Information Technology Industry Council, warned that such a lapse could be interpreted by malicious actors as the U.S. “dropping its guard,” potentially encouraging future attacks on critical infrastructure. ([nextgov.com](https://www.nextgov.com/cybersecurity/2025/05/industry-reps-urge-congress-renew-backbone-cyber-information-sharing-law/405363/?utm_source=openai))
As the expiration date approaches, the consensus among stakeholders is clear: reauthorizing CISA 2015 is imperative to sustain and enhance the collaborative efforts that underpin the nation’s cybersecurity posture. Failure to do so could result in diminished information sharing, leaving both public and private sectors more vulnerable to the increasingly sophisticated landscape of cyber threats.