Multi-Association CISA 2015 NDAA Conference Letter

Dear Chairman Wicker, Ranking Member Reed, Chairman Rogers and Ranking Member Smith:

We write to express our strong support for Section 1706 of H.R. 8800, which would reauthorize the Cybersecurity Information Sharing Act of 2015 (CISA 2015) for an additional 10 years. As you work to reconcile the House and Senate versions of the Fiscal Year 2027 National Defense Authorization Act (NDAA), we urge you to retain this provision in the final conference agreement. In an era of increasingly sophisticated AI-enabled cyber threats, it is more important than ever for the private sector and the government to quickly and securely share information about cyber threats and defenses.

Over the past decade, CISA 2015 has become a foundational component of the nation’s cybersecurity. The law enables the voluntary sharing of cyber threat indicators and defensive measures between private entities and with the federal government, while providing the liability protections and legal certainty needed to encourage such sharing. These authorities support the timely exchange of actionable threat intelligence and are central to the collective defense of public- and private-sector networks, particularly across critical infrastructure sectors.

The case for a long-term reauthorization has only grown more urgent. Recent incidents have demonstrated that advanced AI systems can identify and exploit software vulnerabilities at machine speed, collapsing the window between the discovery of a weakness and its use in an attack. AI tools are also making sophisticated cyber capabilities cheaper, faster and easier to use, allowing threats to spread and adapt in real time. In this environment, the speed and breadth with which defenders share information determines whether they keep pace with adversaries. That speed depends on the legal certainty CISA 2015 provides.

A long-term reauthorization of CISA 2015 is essential to our national security. We appreciate your leadership on this important issue and urge you to include these critical protections in the final conference agreement.

Sincerely,

Aerospace Industries Association

Airlines for America

Alliance for Automotive Innovation

Alliance for Critical Infrastructure

Alliance for Digital Innovation

American Bankers Association

American Chemistry Council

American Fintech Council

American Fuel and Petrochemical Manufacturers

American Hotel and Lodging Association

American Petroleum Institute

American Public Power Association (APPA)

Bank Policy Institute

Business Roundtable

Business Software Alliance

CTIA

Cybersecurity Coalition

Edison Electric Institute

Electronic Transactions Association

Equity Markets Association

Healthcare Leadership Council

Information Technology Industry Council

The Institute of International Bankers

Interstate Natural Gas Association of America

National Association of Manufacturers

National Retail Federation

National Rural Electric Cooperative Association

National Rural Water Association

National Technology Security Coalition (NTSC)

NCTA — The Internet & Television Association

Operational Technology Cybersecurity Coalition

Securities Industry and Financial Markets Association

TechNet

U.S. Chamber of Commerce

USTelecom — The Broadband Association

Cc:

Senate Majority Leader John Thune

Senate Democratic Leader Chuck Schumer

House Speaker Mike Johnson

House Democratic Leader Hakeem Jeffries