News & Analysis as of September 8, 2025

Cybersecurity Information Sharing Act (CISA)

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

House Advances Key Cybersecurity Measures Ahead of September Deadline

Nossaman LLP on 9/5/2025

On September 3, 2025, just weeks before key cybersecurity authorities are set to lapse, the House Homeland Security Committee voted to advance two expiring measures aimed at keeping cyber threat information flowing between...more

CISA 2015: Congress Faces Sept. 30 Deadline to Reauthorize Vital Cybersecurity Law

Wiley Rein LLP on 9/5/2025

A vital cyber defense law known as the Cybersecurity Information Sharing Act of 2015 (CISA 2015) is poised to expire at the end of the month, and leaders in the House and Senate are working to negotiate a replacement within...more

‘We Cannot Do It Alone’: Cutbacks in Federal Funds, Engagement Spur Cries for HIPAA Help, New Laws

Health Care Compliance Association (HCCA) on 8/18/2025

At the very top of Fisher-Titus Medical Center’s website is a link to the Change Healthcare HIPAA notice informing visitors of the last day to register for credit monitoring related to the world’s largest breach, which...more

CISA 2015: Congress Faces Fast-Approaching Deadline to Reauthorize a Critical Cybersecurity Law

Husch Blackwell LLP on 8/14/2025

Key point: With the Cybersecurity Information Sharing Act of 2015 (CISA 2015) scheduled to sunset on September 30, 2025, Congress will need to act quickly to renew the law and maintain, if not improve, the liability...more

Cyber Regulatory Harmonization: The Prospects and Potential Impacts of Current Efforts

Wiley Rein LLP on 8/8/2025

Companies in virtually every critical infrastructure sector have to navigate the maze of duplicative, inconsistent, and fragmented cybersecurity regulations imposed by federal and state governments. For example, as we have...more

Right To Know - July 2025, Vol. 31

Clark Hill PLC on 7/18/2025

Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed. State Action: Texas Limits Punitive Damage Liability For Data Security Breach...more

CIPAC Disbandment and CISA 2015 Reauthorization: Recent Developments in the U.S. Cybersecurity Landscape

Ropes & Gray LLP on 5/5/2025

On March 7, 2025, the Department of Homeland Security (“DHS,” “the agency”) disbanded the Critical Infrastructure Partnership Advisory Council (“CIPAC,” “the Council”), originally established in 2006 to facilitate...more

Client Alert: White House Releases Report on US Cybersecurity Posture

Jenner & Block on 5/15/2024

On May 7, 2024, the White House Office of the National Cyber Director (ONCD) released several reports on the United States’ cybersecurity posture and strategic plan. These documents implement the 2023 National Cybersecurity...more

Proposed Federal Cyber Incident Reporting Rule Adds Hefty Federal Reporting Requirements to Critical Infrastructure Sector and...

Woods Rogers on 3/28/2024

The federal Cybersecurity and Infrastructure Security Agency (CISA) released a draft of its proposed rule detailing how covered entities operating in critical infrastructure sectors report cyberattacks and ransomware payments...more

Cybersecurity Labeling Program to Increase Transparency of IoT Device Security

Sheppard Mullin Richter & Hampton LLP on 8/4/2023

In response to a constantly-evolving cyber threat landscape, the Biden Administration recently announced the launch of a new cybersecurity labeling program – the U.S. Cyber Trust Mark program – in an effort to enhance...more

CISA Seeks Input on New Cybersecurity Reporting Requirements

Perkins Coie on 9/13/2022

President Biden signed into law the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) on March 15, 2022. The background and contours of CIRCIA are discussed in a previous update. CIRCIA authorizes and...more

New Cyber Incident Reporting Requirements on the Horizon in the US

Latham & Watkins LLP on 4/11/2022

Companies should take steps now to prepare for the new rules and expectations. The US government continues to expand regulatory requirements around notification and disclosure of major cyberattacks or incidents. ...more

Increase in Cyber-Attacks Leads to Influx of New Reporting Obligations

Fisher Phillips on 4/1/2022

In the wake of Russia’s invasion of Ukraine, and amid growing concerns regarding the threat of increased cyberattacks targeting infrastructure and other critical industries, there has been a flurry of federal activity to...more

The Cyber Incident Reporting for Critical Infrastructure Act of 2022

Eversheds Sutherland (US) LLP on 3/30/2022

The Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA), passed as part of the omnibus spending bill on March 15, 2022, will require critical infrastructure companies - which could include financial...more

Cybersecurity Act Signed Into Law Creates New Reporting Obligations

Sheppard Mullin Richter & Hampton LLP on 3/29/2022

President Biden recently signed into law the Cyber Incident Reporting for Critical Infrastructure Act of 2022 as a part of a larger omnibus appropriations bill. The new law sets out mandatory reporting requirements for...more

Cybersecurity Protocols Emerge for the Transportation Industry

Benesch on 3/28/2022

Cybersecurity has emerged as a tangible risk for transportation service providers over the course of the last year. Ransomware attacks on domestic industry and critical infrastructure, and tensions associated with the Russian...more

New Critical Infrastructure Cybersecurity Implementing New Breach Notification Requirements Signed into Law

Benesch on 3/23/2022

The new law will require critical infrastructure entities to report certain covered cybersecurity incidents to government agencies within 72 hours; ransomware payments within 24 hours. On March 15, President Biden signed...more

Congress Passes New Cyber Incident and Ransomware Payment Reporting Legislation

Faegre Drinker Biddle & Reath LLP on 3/23/2022

The United States Congress recently passed legislation that includes new cybersecurity provisions requiring critical infrastructure providers to report cyber security incidents, including the payment of ransom, to the...more

New Legislation Will Require Critical Sector Entities to Report Certain Cyber Incidents

Baker Donelson on 3/22/2022

On March 15, 2022, President Biden signed into law the Cyber Incident Reporting for Critical Infrastructure Act (the Act) as part of the Consolidated Appropriations Act of 2022. The Act requires "critical sector" entities to...more

Sounding the Alarm: New Federal Law Will Mandate the Reporting of Cybersecurity Incidents Involving Critical Infrastructure - What...

BakerHostetler on 3/18/2022

In response to increased and persistent cybersecurity threats to American infrastructure, Congress passed the Strengthening American Cybersecurity Act (SACA), which President Joe Biden signed into law on March 15. SACA is...more

New Cybersecurity Law Will Require Cyber-Incident Reporting for Critical Infrastructure

Alston & Bird on 3/18/2022

On March 1, the Senate unanimously passed the Strengthening American Cybersecurity Act of 2022, which will require critical infrastructure companies to report significant cyber-incidents and all ransom payments to the...more

Cyber Incident Reporting Requirements for Critical Infrastructure Sectors Signed into Law

Holland & Knight LLP on 3/17/2022

After years of debate, Congress has passed bipartisan legislation requiring owners and operators of critical infrastructure to report cyber incidents to the U.S. Department of Homeland Security (DHS) Cybersecurity and...more

What you should know about the K-12 Cybersecurity Act of 2021

Bricker Graydon LLP on 10/13/2021

On October 8, 2021, President Biden signed the bipartisan K-12 Cybersecurity Act of 2021 into law. While the act offers little in the way of concrete reform, it represents both an important first step into the K-12 cyber...more

Biden Administration Issues National Security Memorandum Shortly after the House Passes Three Bills Aimed at Cybersecurity in the...

McDermott Will & Schulte on 8/2/2021

The federal government is seeking to increase cybersecurity in critical infrastructure industries through the implementation of a voluntary Industrial Control Systems Cybersecurity Initiative (Initiative), while the US House...more

Cybersecurity Information Sharing Act of 2014: What does it allow?

Lowndes on 3/18/2016

The Cybersecurity Information Sharing Act of 2014 was created to identify and share cyber threat indicators, which are pieces of information necessary to describe or identify “malicious reconnaissance;” a method of defeating...more

32 Results

View per page

Page: of 2

Cybersecurity › New Legislation › Cybersecurity Information Sharing Act (CISA)

"My best business intelligence, in one easy email…"