How the Cybersecurity Information Sharing Act of 2015 helps the food and agriculture sector defend against attacks

Cyberattacks on U.S. critical infrastructure are accelerating in both frequency and sophistication, threatening critical infrastructure that provides food, power, healthcare, and the technology systems that power our economy. Network defenders rely on a collective of trusted forums to share information about these attacks in near real-time. By working together, companies can better defend than they could individually. Companies share information on attacks they see, and receive information shared by others. This sharing has become a core aspect of our defense of our critical infrastructure.

This sharing is possible largely due to a legal framework established by Congress. For nearly a decade, this law, the Cybersecurity Information Sharing Act of 2015 (CISA 2015), has provided the legal foundation for trusted, voluntary information sharing across industry and between industry and government. It has enabled faster detection, coordinated response, and stronger national resilience against cyber adversaries. Unless Congress takes action, this law will expire on September 30, 2025.