Andrew Garbarino on Reauthorizing CISA 2015 as the WIMWIG Act

Reauthorizing CISA 2015

• 💡 The Widespread Information Management of the Welfare of Infrastructure and Government Act (WIMWIG) is a reauthorization bill for the Cyber Security Information Sharing Act of 2015 (CISA 2015).
• 🎯 CISA 2015 established a privacy-protecting framework for real-time cyber threat information sharing, fostering collaboration between public and private sectors.
• ⚠️ A lapse in CISA 2015 would significantly slow down or halt critical information sharing among cyber defenders.

Updates in the WIMWIG Act

• 🔑 The WIMWIG Act updates definitions to include new tactics and attack services, and encourages the use of secure artificial intelligence for information sharing.
• 🤝 It improves actionable, bidirectional information sharing between public and private sectors and enhances accountability for DHS's technical capabilities.
• 🔒 Importantly, the bill preserves existing privacy protections while extending the authorization for another 10 years.

Legislative Process and Concerns

• 🗣️ Concerns were raised about the truncated vetting process for the bill, with the text being made public only 48 hours prior to the markup.
• ⚖️ There is a commitment to working with colleagues in both the House and Senate to ensure the reauthorization remains relevant and effective, aiming to get the bill signed into law.
• 💬 Discussions included the need to seek input from experts on privacy, civil rights, and civil liberties to avoid unintended consequences.

Addressing Censorship Concerns

• 🚫 Explicit anti-censorship language was requested to prevent CISA from being used to moderate political speech.
• 🎯 The focus of the agency and the bill is on protecting critical infrastructure and cybersecurity, not on censoring speech.
• ✅ Commitment was given to work with Senator Paul and the new Director of CISA to ensure the agency stays focused on its core mission.