Forest Global Training Partners

Cyber Risks · Krebs on Security

Cybersecurity Information (Over)Sharing Act?

Summary: The U.S. Senate passed the Cybersecurity Information Sharing Act (CISA) by a vote of 74-21, a bill that shields companies from private lawsuits and antitrust laws if they share threat information with each other and the government. Critics including the Center for Democracy & Technology say the bill requires any user information a company volunteers to the Department of Homeland Security to be shared immediately with the NSA, FBI/DOJ and other agencies, and authorizes use of cyber threat indicators for law enforcement purposes unrelated to cybersecurity.

Bottom line: The bill's own critics argue the mandatory onward sharing with the NSA and intelligence community will discourage the voluntary company participation the program depends on, while a coalition of nearly two dozen academics called it a "let's do something law" that offloads responsibility to a secret information sharing network instead of raising companies' own security standards.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related