House defense bill advances 10-year CISA 2015 extension
The practical effect is continuity: contractors keep the liability shield, but only if the NDAA survives the Senate and conference.
TL;DR
The House passed a fiscal 2027 defense authorization bill carrying a 10-year renewal of Cybersecurity Information Sharing Act of 2015 protections. Contractors, primes, subs and counsel keep statutory cover for threat-intelligence sharing with government and peers if the provision becomes law. The Senate still has to pass the bill, and conference could change or drop the language.
This is a defensive renewal, not a new compliance regime. The House version of the fiscal 2027 defense authorization bill carries a 10-year extension of Cybersecurity Information Sharing Act of 2015 protections for cyber threat-indicator and defensive-measure sharing. For contractors, the point is simple: the familiar liability shield remains available if the National Defense Authorization Act clears the Senate, survives conference and is signed. Until then, counsel should treat this as a live legislative provision, not settled authority.
Published ·Deep Fathom