After a number of delays, amendment shuffles and even a little floor debate, the Cybersecurity Information Sharing Act (CISA) is now on track for a Senate vote as early as Oct. 27.
The bill would codify the provisions of an executive order issued earlier this year to facilitate information sharing between the private sector and government on known cybersecurity threats.
CYBERCON 2015: Sign up now for CyberCon 2015 to learn how best to protect your agency’s networks
The sharing and dissemination of that information would be coordinated by the Department of Homeland Security, which has already begun developing standards and reorganizing for the task.
Referencing hearings held by the Senate Committee on Homeland Security and Governmental Affairs, which he chairs, Johnson pointed to recent high-profile breaches of government networks that might have been prevented, in part, by information sharing.
“Our committee’s oversight hearings on the IRS and OPM data breaches revealed that basic cybersecurity hygiene and best practices would have stopped attackers in their tracks had they been in place at these agencies,” Johnson said.
Some of the amendments scheduled for debate on Tuesday before the vote — including those submitted by Sens. Ron Wyden, D-Ore., Dean Heller, R-Nev., Patrick Leahy, D-Vt., and Chris Coons, D-Del. — include language that would prevent the collection of personally identifiable information or at least limit its dissemination.
After debate on several outstanding amendments on Tuesday, the Senate will consider a motion to invoke cloture (giving the body 30 hours to hold a vote) or might just take up a vote that evening.
If CISA passes, the bill would have to be merged with two House bills that passed earlier this year before undergoing a conference vote.
CYBERCON 2015: Sign up now for CyberCon 2015 to learn how best to protect your agency’s networks
