Senator Mike Rounds, US Senator for South Dakota | Official U.S. Senate headshot
Senator Mike Rounds, US Senator for South Dakota | Official U.S. Senate headshot
U.S. Senators Mike Rounds and Gary Peters have introduced a bipartisan bill aimed at extending the Cybersecurity Information Sharing Act (CISA) of 2015 for an additional decade. This legislation, originally enacted in 2015, encourages companies to share cybersecurity threat indicators with the Department of Homeland Security. The act's objective is to protect personal information and facilitate collaborative efforts between the federal government and private sector to prevent cyberattacks.
Senator Rounds emphasized the importance of CISA, stating, “The Cybersecurity Information Sharing Act of 2015 has been instrumental in strengthening our nation's cyber defenses by enabling critical information sharing between the private sector and government.” He warned that allowing this legislation to lapse could weaken national cybersecurity defenses.
Senator Peters highlighted the necessity of continued information sharing in light of evolving threats. He noted, “As cybersecurity threats grow increasingly sophisticated, information sharing is not just valuable—it remains essential for our national security.”
Since its enactment ten years ago, CISA has played a significant role in fostering cooperation between industry leaders and federal agencies. It provides legal protections that encourage private organizations to share threat-related data without fear of regulatory repercussions. These insights help identify malicious activities and enhance responses to cyberattacks.
In recent years, these protections have been crucial in addressing significant incidents such as the SolarWinds attack and operations like Volt Typhoon and Salt Typhoon. They also aid in alerting agencies about ongoing threats from countries like Russia, China, Iran, and North Korea. Through initiatives like the Joint Cyber Defense Collaborative and various Information Sharing and Analysis Centers (ISACs), this threat information reaches state governments, local communities, and businesses across multiple sectors.