S.Amdt. 6035

This amendment, submitted by Mr. Peters and Mr. Rounds, aims to reauthorize and update the Cybersecurity Information Sharing Act of 2015. The primary purpose is to extend the act's effective period from September 30, 2026, to September 30, 2036.

The amendment adds and changes the following:

• New Definitions: It adds official definitions for artificial intelligence and critical infrastructure.

• AI Integration: It allows for the use of artificial intelligence that is strictly used for cybersecurity purposes. It also allows the government to provide "one-time read-ins" to specific individuals from non-Federal entities that operate artificial intelligence or critical infrastructure.

• Updating Procedures: It requires the Federal Government to not only develop and issue policies for sharing cyber threat indicators and defensive measures but also to update them as appropriate.

• Expanded Reporting: The Secretary of Homeland Security must now report on ransomware and prepositioning activities every two years.

• Legal Protections: It changes the phrase "trade secret protection" to intellectual property protection.

• Broadened Scope: It updates definitions within the Homeland Security Act of 2002 to include "compromising" or "compromised" systems and mentions security vulnerabilities in software or hardware supply chains, specifically citing artificial intelligence.