Electric utilities join industries urging renewal of cybersecurity information-sharing law

Utility Dive · Eric Geller · 2026-11-04 10:24 UTC

CISA 2015, as the law is often called, provides liability protections for companies sharing cyber threat indicators amongst themselves and with federal agencies. It is set to expire next month.

Three dozen business groups, including organizations representing electric utilities and critical infrastructure sectors, are pressing Congress to renew a major cybersecurity information-sharing law before its expiration next month.

The 2015 Cybersecurity Information Sharing Act “has become a foundational component of the nation’s cybersecurity,” the groups wrote on Sunday to the chairs and ranking members of the congressional armed-services committees. Signatories included the Edison Electric Institute, which represents investor-owned utilities, and the National Rural Electric Cooperative Association.

CISA 2015, as the law is often called, provides liability protections for companies sharing cyber threat indicators amongst themselves and with federal agencies. Those sharing alliances underpin the vast constellation of public-private collaboration groups that have sprung up over the past decade as the federal government has streamlined its approach to cyber defense.

Read the full story at Utility Dive · All coverage of this story