ICBA and other groups urged Congress to reauthorize the Cybersecurity Information Sharing Act (CISA 2015) before it expires on Sept. 30, warning that failure to act could eliminate a valuable tool used to protect U.S. critical infrastructure sectors.

Background: The bipartisan CISA legislation—enacted after an Office of Personnel Management breach in 2015—provides private-sector entities with information and liability protections for sharing cyber threats. It also includes an antitrust exemption that provides similar protections for sharing between private companies.

Details: In a letter to congressional leaders, ICBA and the other groups said:

  • This voluntary information-sharing framework has been instrumental in strengthening the country’s collective defense against cybersecurity threats.

  • The expiration of these protections would leave the U.S. vulnerable to nation-state attacks and cybercriminals.

ICBA Resources: Cyber and data security resources for community bankers are available on the ICBA website.