S.Amdt. 6213

This amendment aims to reauthorize and update the Cybersecurity Information Sharing Act of 2015. Its primary purpose is to extend the law's expiration date from September 30, 2026, to September 30, 2036.

The amendment adds or changes the following:

• New Definitions: It introduces official definitions for artificial intelligence and critical infrastructure.

• Updated Capabilities: It allows the Federal Government to update its policies and procedures for sharing cyber threat indicators and defensive measures. It also enables one-time read-ins for specific individuals from non-Federal entities that operate artificial intelligence or critical infrastructure.

• Artificial Intelligence Integration: The text allows for the use of artificial intelligence that is strictly deployed for cybersecurity purposes in several activities, including the prevention, detection, analysis, and mitigation of threats.

• Expanded Protections and Reporting:

  • It changes "trade secret protection" to "intellectual property protection."
  • It requires reports on cybersecurity threats to be submitted every two years and specifically includes ransomware and prepositioning activities in those reports.

• Technical Adjustments: It updates the Homeland Security Act of 2002 to include language regarding compromising security vulnerabilities in software or hardware supply chains, specifically mentioning artificial intelligence.