CISA 2015 Closes in on Expiration, Security Leaders Share Concerns

"The timing is especially critical, as adversaries now leverage AI, ransomware-as-a-service, and state-backed resources to disrupt both critical infrastructure and private enterprises. Losing the protections of CISA would force defenders to operate in silos, causing them to be blind to patterns that could otherwise be mitigated if knowledge were shared openly. Our adversaries thrive on information asymmetry, and any gap in coordination works to their advantage."

"Our adversaries thrive on information asymmetry, and any gap in coordination works to their advantage. Beyond the immediate tactical risks, the expiration of CISA risks undermining long-term national security resilience. The act has been a cornerstone in fostering public-private partnerships, and if that framework dissolves, it will take years to rebuild trust and momentum. Policymakers must recognize that cybersecurity is a team sport, and"

CISA 2015 is set to expire on Sept. 30 and has not been renewed by policymakers. The law created a cybersecurity information-sharing structure enabling the federal government to collect and share threat intelligence while allowing private companies to share intelligence with government and each other. Security leaders warn that expiration may cause companies to hesitate to report indicators of compromise and attack vectors, creating a chilling effect on trust and collaboration. Adversaries have grown more sophisticated, leveraging AI, ransomware-as-a-service, and state-backed resources. Loss of CISA protections risks defenders operating in silos, blind to patterns, and undermines long-term national security resilience and public-private partnerships.

Read at Securitymagazine