CISA 2015: Congress Faces Sept. 30 Deadline To Reauthorize Vital Cybersecurity Law

A vital cyber defense law known as the Cybersecurity Information Sharing Act of 2015 (CISA 2015) is poised to expire at the end of the month, and leaders in the House and Senate are working to negotiate a replacement within the next 26 days. The House Committee on Homeland Security unanimously approved legislation on September 3, 2025 – titled the Widespread Information Management for the Welfare of Infrastructure and Government Act (WIMWIG) – to reauthorize CISA 2015, and Congress is also considering other proposals.

CISA 2015 was enacted 10 years ago, reflecting a bipartisan decision to provide much-needed clarity about the lawfulness of information sharing, deployment of defensive measures, and vital monitoring activities. In short, CISA 2015 made clear that beneficial cyber activities – sharing of threat indicators, deployment of defensive measures, and network monitoring for cyber purposes – were lawful and to be encouraged. The law has been critically