NAM, Allies: Reauthorize Cybersecurity Info Sharing in Defense Bill
The NAM and 34 allied organizations urged congressional leaders to include a 10-year reauthorization of the Cybersecurity Information Sharing Act of 2015 in the final fiscal year 2027 National Defense Authorization Act.
What’s going on: Section 1706 of the Senate version of the NDAA reauthorizes CISA 2015, and “we urge you to retain this provision in the final conference agreement,” the organizations told Senate and House Armed Services committee leaders on Sunday.
- “Over the past decade, CISA 2015 has become a foundational component of the nation’s cybersecurity … enabl[ing] the voluntary sharing of cyberthreat indicators and defensive measures between private entities and with the federal government, while providing the liability protections and legal certainty needed to encourage such sharing.”
- In February, CISA was reauthorized retroactively for one year following its original September 2025 expiration.
- The law’s information-sharing protections are set to expire in December with the lapse of the bipartisan continuing resolution passed over the summer.
Why it’s important: As artificial intelligence enables increasingly sophisticated cyberthreats, “it is more important than ever for the private sector and the government to quickly and securely share information about cyberthreats and defenses,” the organizations wrote.
- Recent incidents have shown that AI systems can exploit software vulnerabilities so quickly that there is virtually no time “between the discovery of a weakness and its use in an attack.”
The NAM acts: The NAM has urged Congress to reauthorize CISA 2015 since before the law’s original September 2025 expiration.
In the news: Punchbowl News AM (subscription) and Bloomberg Government covered the organizations’ recommendations to House and Senate Armed Services committee leaders.
