Cyber Info Sharing Holds Steady Despite Lapse of Landmark CISA Law

Federal–Private Collaboration Endures Without Statutory Shield as Shutdown Stalls Renewal

The federal government’s cybersecurity collaboration with private industry remains stable despite the expiration of the 2015 Cybersecurity Information Sharing Act (CISA) — a cornerstone law that once provided liability protections and antitrust exemptions for companies sharing digital threat intelligence with the government.

Nick Andersen, Executive Assistant Director for Cybersecurity at the Cybersecurity and Infrastructure Security Agency (CISA), confirmed that information sharing “is holding steady right now,” crediting CISA’s long-standing partnerships and trusted reputation within both the private and public sectors. His comments came during the Palo Alto Networks Public Sector Ignite 2025 Conference in Tysons Corner, Virginia.

That consistency, Andersen said, “is a testament to the relationships we’ve built and our ability to maintain collaboration even without formal legal incentives.”

The 2015 CISA statute, which expired last month, served as the framework for safe and structured cyber threat data exchange — allowing private entities to voluntarily share indicators of compromise, malicious IPs, and real-time attack data without fear of legal backlash. Its lapse has raised concerns that participation may erode over time, especially if companies grow wary of exposure or regulatory consequences.

Despite these fears, Andersen emphasized that the program’s durability lies in mutual trust, not just legislation. “The 2015 statute is core and critical to our ability to manage risk,” he said, “but the collaboration is built on relationships — and those don’t expire.”

Congress, meanwhile, remains at a standstill. The House Homeland Security Committee advanced a renewal bill last month, but a short-term extension tied to a stopgap spending measure failed in the Senate, contributing to the ongoing government shutdown. Earlier this month, a bipartisan Senate proposal sought to retroactively protect companies that continue sharing information during the lapse, but efforts to fast-track it have repeatedly been blocked by Sen. Rand Paul (R-KY).

Sen. Gary Peters (D-MI), chair of the Senate Homeland Security Committee, has continued pressing for a 10-year clean reauthorization, arguing that the law’s safeguards are vital to national security and business confidence.

At the same event, National Cyber Director Sean Cairncross echoed that view, calling the statute “common sense.” He stated:

“The White House supports a 10-year, clean reauthorization of this authority. It’s essential to national security and fosters the collaboration that keeps our critical infrastructure resilient.”

While operational sharing continues, experts warn that the absence of a legislative shield could deter smaller vendors and service providers from contributing to national threat intelligence efforts — especially those without the legal or financial resources to absorb potential liability.

As Andersen put it, “We need a clean reauthorization for the next decade to secure long-term mission success. Trust and cooperation may hold the line for now — but laws like CISA 2015 ensure that the foundation endures.”

Sponsored • TRJ Ads
Inquiries: contact@therealistjuggernaut.com

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE