Expert Warns of 'Information Sharing Cut Off' if CISA Funding Lapses

Critical Infrastructure Vulnerabilities

• 💡 The Cybersecurity and Infrastructure Security Agency (CISA) plays a crucial role in understanding infrastructure interdependencies and the cascading consequences of disruptions.
• ⚠️ A lapse in funding for CISA could lead to adversaries exploiting the "weak underbelly" of critical infrastructure, impacting national security capabilities, as seen with systems in Guam.
• 🎯 Understanding these interdependencies is vital for national defense, as adversaries are aware of them even if defense strategies are not.

The Importance of Reauthorizing CISA

• 📌 The Cyber Security Information Sharing Act of 2015 (CISA) is set to expire soon, and its prompt reauthorization is essential.
• 📉 If CISA funding lapses, an estimated 80% to 90% of information sharing with the federal government would be cut off.
• 🚀 This information sharing is critical for building a full threat picture, especially with potential contingencies like a China contingency in 2027.

National Security Implications of Lapse

• ⚠️ A lapse in CISA would significantly hinder the federal government's ability to receive threat intelligence from the private sector.
• 🛡️ Private sector companies would be hesitant to share information due to potential liability and fiduciary duty to shareholders without the protections provided by CISA.
• 🤝 Reauthorizing CISA is a baseline necessity to ensure continued information flow and allow focus on other critical national security issues.

Bureaucratic Fixes for National Security

• 🛠️ Simple bureaucratic fixes can immediately increase national security, such as improving identification processes for national guard responses to utility incidents.
• 🔑 Without proper identification and protocols, the national guard may be unable to assist utilities that have been hit, highlighting a critical gap.
• ✅ Addressing these bureaucratic hurdles is as important as addressing information sharing to bolster overall national security.