Misplaced Pages

Cybersecurity Information Sharing Act

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.

The Cybersecurity Information Sharing Act ( CISA S. 2588 113th Congress , S. 754 114th Congress ) is a United States federal law designed to "improve cybersecurity in the United States through enhanced sharing of information about cybersecurity threats, and for other purposes". The law allows the sharing of Internet traffic information between the U.S. government and technology and manufacturing companies. The bill was introduced in the U.S. Senate on July 10, 2014, and passed in the Senate on October 27, 2015. Opponents question CISA's value, believing it will move responsibility from private businesses to the government, thereby increasing vulnerability of personal private information , as well as dispersing personal private information across seven government agencies, including the NSA and local police.

#918081

48-468: The text of the bill was incorporated by amendment into a consolidated spending bill in the U.S. House on December 15, 2015, which was signed into law by President Barack Obama on December 18, 2015. The Cybersecurity Information Sharing Act was introduced on July 10, 2014, during the 113th Congress, and passed the Senate Intelligence Committee by a vote of 12–3. The bill did not reach

96-568: A communications subcommittee; Representative Kevin McCarthy of California, the majority leader; and Speaker Paul D. Ryan of Wisconsin-who had voted to reverse broadband privacy laws enacted by the Obama FCC. The billboards included information on how much money the pictured lawmaker had received from the telecomm lobby. After whistleblower Chelsea Manning was jailed for disclosing to WikiLeaks nearly 750,000 military and diplomatic documents, she

144-493: A full senate vote before the end of the congressional session. The bill was reintroduced for the 114th Congress on March 12, 2015, and the bill passed the Senate Intelligence Committee by a vote of 14–1. Senate Majority Leader Mitch McConnell (R-KY) attempted to attach the bill as an amendment to the annual National Defense Authorization Act , but was blocked 56–40, not reaching the necessary 60 votes to include

192-477: A letter on July 21, 2015, urging the senate to bring the bill up for debate. On September 14, 2015, the BSA published a letter of support for amongst other things cyber threat information sharing legislation addressed to Congress, signed by board members Adobe , Apple Inc. , Altium , Autodesk , CA Technologies , DataStax , IBM , Microsoft , Minitab , Oracle , Salesforce.com , Siemens , and Symantec . This prompted

240-752: A mass boycott of then-supporter GoDaddy. Fight for the Future created the Internet Defense League as a means of coordinating possible future protests, similar to the ones it helped organize in January 2012. The League was focused on the passage of net neutrality at the Federal Communications Commission (FCC). Working with Free Press and Demand Progress , FFTF launched the Battle for the Net to serve as

288-623: A school for talented students in Worcester. Cheng was born in a Macau refugee camp to parents who fled the Vietnam War. Before starting FFTF, the two also formed Participatory Culture Foundation , a nonprofit that works to increase cultural collaboration, and built Miro; an open-source video and music sharing platform; Open Congress, a legislation website; and Amara, a tool for crowdsourced video subtitling. After Cheng and Holmes left FFTF in 2018, Sarah Roth-Gaudette, former Chief Operating Officer, became

336-656: A version of the Cybersecurity Information Sharing Act, passed by the Senate in October 2015, that left intact portions of the law they said made it more amenable to surveillance than actual security while quietly stripping out several of its remaining privacy protections. CISA has been criticized by advocates of Internet privacy and civil liberties , such as the Electronic Frontier Foundation and

384-563: Is both innovative and useful. But first, to ensure that NITS is trustworthy, private partners must be indemnified. Indemnification takes an act of Congress, literally. The underlying impediment to more fulsome cooperation among buyers, sellers, and peers within a supply chain is indemnification . Indemnification is needed to secure industry partners against legal responsibility for their actions. Unfortunately, congressional refusal to offer indemnification remains an impediment to real collaboration. At least qualified immunity should be accorded. This

432-817: Is immunity of individuals performing tasks as part of the government's actions. The CISA has received some support from advocacy groups, including the United States Chamber of Commerce , the National Cable & Telecommunications Association , and the Financial Services Roundtable . A number of business groups have also opposed the bill, including the Computer & Communications Industry Association , as well as individual companies such as Twitter , Yelp , Apple , and Reddit . BSA (The Software Alliance) appeared initially supportive of CISA, sending

480-585: Is incorporated in Boston, Massachusetts . There is no central office and all staff work remotely. Cheng and Wilson were previously involved in Participatory Culture Foundation , a nonprofit in the area of free culture . Initial funding for the organization was provided by Media Democracy Fund . Cheng and Wilson became friends when they attended the Massachusetts Academy of Math and Science,

528-462: The 2016 omnibus spending bill , is the United States appropriations legislation passed during the 114th Congress which provides spending permission to a number of federal agencies for the fiscal year of 2016. The bill authorizes $ 1.1 trillion in spending, as well as $ 700 billion in tax breaks. The bill provides funding to the federal government through September 30, 2016. The legislation contains

SECTION 10

#1732859360919

576-646: The American Civil Liberties Union . It has been compared to the criticized Cyber Intelligence Sharing and Protection Act proposals of 2012 and 2013, which passed the United States House of Representatives, but did not pass the Senate. United Kingdom government policy: cyber security The Scottish Government Information Sharing Consolidated Appropriations Act, 2016 The Consolidated Appropriations Act, 2016 ( H.R. 2029 , Pub. L.   114–113 (text) (PDF) ), also known as

624-590: The Protecting Americans from Tax Hikes (PATH) Act of 2015 . The bill began as a $ 78 billion spending bill for Military Construction, Veterans Affairs, and Related Agencies , one of the twelve subcommittees of the US Senate Committee on Appropriations . The bill first passed the US House of Representatives on April 30, 2015, by a vote of 255–163, largely along party lines. President Obama threatened to veto

672-569: The CRA. FFTF's DemsAgainstThe.net campaign targeted the 16 House Democrats who did not support the Act, listing the total donations that each official received from the telecommunications industry . The Congressional term ended before the House could act, preventing the CRA from going through. When Internet Service Providers (ISPs) made an estimated $ 1.3 million in donations to California lawmakers to try to weaken

720-549: The December 17, 2017 FCC order to repeal the 2015 Open Internet Order and codify it into law. FFTF's ‘The Whole Internet is Watching,’ protest provided a widget that let people and sites like Etsy, Tumblr, Twitter, Pornhub, BoingBoing, and GitHub embed the live stream of the House markup hearing on their home pages. The group said a record 300,000 tuned in to the event. When the full vote was held on April 10, FFTF reported registering six million views on their Twitch site. The bill passed

768-639: The FCC rolled back the rules. The protest drove millions of phone calls, emails, tweets, faxes, and comments to Congress and the FCC. Major participants included Twitter, Etsy, OkCupid, Vimeo, ACLU, Change.org, Greenpeace, Reddit, Netflix, Spotify, 4chan, Airbnb, Mozilla, Tinder, PornHub, Expedia, Imgur, and Yelp. On December 7, 2017, a week before the FCC Chair Ajit Pai (former Verizon counsel) moved to repeal net neutrality, FFTF and Free Press organized over 700 protests in front of Verizon stores in every state in

816-544: The FCC's net neutrality docket using stolen identities and helped spark major investigations from members of Congress, state Attorneys General, the Wall Street Journal , the Government Accountability Office , and others. Comcast tried to shut down the site, and sent FFTF a cease and desist order which it later rescinded. The Act, which was introduced into Congress on March 8, 2019, sought to reverse

864-489: The FCC. On March 12, 2015, the FCC released the specific details of its new net neutrality rules, and on April 13, 2015, the final rule was published. Fight for the Future organized the Day of Action to Save Net Neutrality on July 12, 2017, to advocate for net neutrality in which over 50,000 websites and apps that supported net neutrality displayed the dreaded "spinning wheel" of a stalled connection and mimic what could happen if

912-512: The Future Fight for the Future (often abbreviated fightfortheftr or FFTF ) is a nonprofit advocacy group in the area of digital rights founded in 2011. The group aims to promote causes related to copyright legislation, as well as online privacy and censorship through the use of the Internet . The organization was founded by Tiffiniy Cheng and Holmes Wilson in October 2011, and

960-489: The House on April 10, 2019. Along with AccessNow.org , the group has launched an online campaign opposing the changes proposed at the 2012 World Conference on International Telecommunications . The organization believes the changes would threaten the openness of the Internet. In response to reports of National Security Administration (NSA) mass surveillance , Fight for the Future called for increased privacy protections on

1008-404: The Internet protest. Major sites like Mozilla, Misplaced Pages, Google, Reddit, Tumblr, and Craigslist blacked out much of their homepage and directed visitors to links through which they could contact lawmakers. In addition to the online protests, there were simultaneous physical demonstrations in several U.S. cities, including New York City, San Francisco and Seattle, and separately during December 2011

SECTION 20

#1732859360919

1056-602: The US federal government. The bill included a larger than expected $ 19.3 billion in funding for NASA . Tax cuts included delaying implementation of taxes on premium health care plans, as well as upcoming taxes on medical devices. Unrelated policy riders included ending a 40-year-old ban on US exports of crude oil. The bill also included the provisions of the Cybersecurity Information Sharing Act , information sharing cyber-security legislation. Fight for

1104-455: The US to protest against NSA, PRISM, and government spying. On Feb 14, 2016, FFTF organized rallies in front of 40 Apple stores around the nation, putting the spotlight on how tech giants are under increasing pressure to share their data with the government. In August 2016, Fight for the Future crowdfunded "You Betrayed Us" billboards in the districts of three Republican House leaders—Representative Marsha Blackburn of Tennessee, who heads

1152-617: The action in which a number of websites displayed messages advocating against the proposed bills. Protests were based on concerns that the bills, intended to provide more robust responses to copyright infringement (also known as piracy) arising outside the United States, contained measures that could possibly infringe online freedom of speech, websites, and Internet communities. Protesters also argued that there were insufficient safeguards in place to protect sites based upon user-generated content. According to FFTF, more than 115,000 websites joined

1200-489: The amendment. Mitch McConnell hoped to bring the bill to senate-wide vote during the week of August 3–7, but was unable to take up the bill before the summer recess. The Senate tentatively agreed to limit debate to 21 particular amendments and a manager's amendment, but did not set time limits on debate. In October 2015, the US Senate took the bill back up following legislation concerning sanctuary cities . The main provisions of

1248-478: The bill make it easier for companies to share personal information with the government, especially in cases of cyber security threats. Without requiring such information sharing, the bill creates a system for federal agencies to receive threat information from private companies. With respect to privacy , the bill includes provisions for preventing the sharing of personal data that is irrelevant to cyber security. Any personal information that does not get removed during

1296-453: The bill, with Jeh Johnson , the secretary of the DHS, calling for the bill to move forward on September 15. However, in an August 3 letter to senator Al Franken (D-MN), the deputy secretary of the DHS, Alejandro Mayorkas , expressed a desire to have all connections be brokered by the DHS, given the department's charter to protect the executive branch networks. In the letter, the DHS found issue with

1344-552: The bill. Proponents of CISA include the bill's main cosponsors, senators Dianne Feinstein (D-CA) and Richard Burr (R-NC). Some senators have announced opposition to CISA, including Ron Wyden (D-OR), Rand Paul (R-KY), and Bernie Sanders (I-VT). Senator Ron Wyden (D-OR) has objected to the bill based on a classified legal opinion from the Justice Department written during the early George W Bush administration . The Obama administration states that it does not rely on

1392-476: The company cancel their contract with Border Patrol. A protest was held during the company's flagship Dreamforce convention in San Francisco , where more than 170,000 people were in attendance. Salesforce ultimately agreed to meet with a group representing frontline communities and has since hired its first Chief Ethical and Humane Use Officer. FFTF publicized an internal email leaked from Microsoft-owned GitHub,

1440-426: The country; nearly 300 people attended the rally in midtown Manhattan. A New York Times article highlighted the role of young people in these protests. After the FCC voted to repeal the 2015 Open Internet Order, FFTF applied pressure on Congress to pass the CRA which would undo the FCC's decision. On May 16, 2018, fifty United States senators including three Republican Senators, voted to restore net neutrality under

1488-432: The deadline, funding the government until December 11. Republican congressional leaders and President Obama on October 26 reached a tentative deal that would modestly increase spending over two years while cutting some social programs. The Senate voted on the bill on November 10, 2015, passing it unanimously, 93–0. As the new December 11 deadline approached, Congress actively negotiated a wider omnibus bill built on top of

Cybersecurity Information Sharing Act - Misplaced Pages Continue

1536-598: The digital rights advocacy group Fight for the Future to organize a protest against CISA. Following this opposition campaign, BSA stated that its letter expressed support for cyber threat sharing legislation in general, but did not endorse CISA, or any pending cyber threat sharing bill in particular. BSA later stated that it is opposed to CISA in its current form. The Computer & Communications Industry Association , another major trade group including members such as Google , Amazon.com , Cloudflare , Netflix , Facebook , Red Hat , and Yahoo! , also announced its opposition to

1584-464: The direct sharing of information with all government agencies, advocating instead that the DHS be the sole recipient of cyberthreat information, allowing it to scrub out private information. In addition, the Department of Homeland Security has published a Privacy Impact Assessment detailing its internal review of the proposed system for handling incoming indicators from Industry. Privacy advocates opposed

1632-475: The executive director. Roth-Gaudette previously managed campaigns for U.S. PIRG and MoveOn.org. Former Campaign Director Evan Greer is now deputy director. Greer is also an international punk folk musician and transgender activist. Fight for the Future was involved in the online protests against the Stop Online Piracy Act and PROTECT IP Act in January 2012. The group was involved in coordinating

1680-496: The hub for the campaign. FFTF, together with Demand Progress, Engine Advocacy , and Free Press organized this Internet-wide protest on September 10, 2014, during which thousands of sites across the web displayed an alert with a symbolic 'loading' symbol to promote a call to action for users to push comments to the FCC, Congress, and the White House. The tool was credited with breaking a 1-day submission record of 780,000 comments to

1728-471: The internet to decrease the efficiency of surveillance efforts. The organization participated in a day of action on June 5, 2014, to protest NSA surveillance, the anniversary of the date the first Edward Snowden story broke detailing the government's PRISM program , based on documents leaked by the former NSA contractor. On July 4, 2013, FFTF helped to organize ‘Restore the Fourth’ rallies in 100 cities across

1776-643: The legal justification laid out in the memo. Wyden has made repeated requests to the US Attorney General to declassify the memo, dating at least as far back as when a 2010 Office of Inspector General report cited the memo as a legal justification for the FBI's warrantless wire-tapping program. On August 4, 2015, White House spokesman Eric Schultz endorsed the legislation, calling for the senate to "take up this bill as soon as possible and pass it". The United States Department of Homeland Security initially supported

1824-512: The legislation as written, in line with his earlier statements opposing spending bills not preventing the automatic spending cuts due to budget sequestration . The bill remained in the US Senate for several months, deliberately stalled by Senate Democrats. Facing a possible government shutdown on September 30, 2015 (the end of fiscal year 2015), Congress passed the Continuing Appropriations Resolution, 2016 hours before

1872-456: The necessity of presenting a passport for boarding flights. In response to Amazon Ring 's practice of giving local law enforcement access to customers’ camera-enabled doorbells, FFTF launched a campaign which prompted Amazon to release the full list of 400+ cities where partnerships exist. More than 30 civil rights and immigration organizations participated in the campaign. FFTF's InvestigateAmazon.com campaign demanded that Congress investigate

1920-503: The original bill. Congress passed two additional temporary extensions, pushing the deadline back to December 16, and then to December 22. The bill entered into law on December 18, 2015. The bill ended up largely as a compromise between centrist Republicans and moderate Democrats; the scope of the bill's spending was heavily criticized by the conservative wing of the Republican Party. The bill provides general spending for most of

1968-754: The practice. In the summer of 2016, Fight for the Future teamed up with musician Tom Morello 's label Firebrand Records to launch a Rock Against the TPP multi-city tour, featuring concerts, teach-ins, and protests of the Trans-Pacific Partnership . After Blizzard Entertainment , a top video game company, sought to suspend Chung Ng Wai , a professional gamer in Hong Kong , for expressing his support for Hong Kong protesters and refused to award him his prize money, FFTF organized Gamers for Freedom. The campaign teamed up with gamers , redditors , and others to protest

Cybersecurity Information Sharing Act - Misplaced Pages Continue

2016-545: The public outcry for the turnaround. After the U.S. Department of Justice challenged the law in court, the state agreed to delay its implementation until a final ruling. On October 1, 2019, the D.C. Circuit Court of Appeals ruled to allow states to pass their own rules. FFTF challenged the FCC's claim that Distributed Denial of Service (DDoS) attacks prevented the filing of tens of thousands of pro-net neutrality comments. FFTF's Comcastroturf.com tool helped Internet users collectively investigate fraudulent comments submitted to

2064-462: The sharing procedure can be used in a variety of ways. These shared cyber threat indicators can be used to prosecute cyber crimes, but may also be used as evidence for crimes involving physical force. Sharing National Intelligence threat data among public and private partners is a hard problem, and one that many care about. The National Intelligence Threat Sharing (NITS) project is intended as an innovative solution to this hard problem. Altogether NITS

2112-516: The state's robust net neutrality bill, FFTF activists fought back through phone calls, texts, ad buys, lawmaker scoreboards, and crowdfunded billboards. Following reports that Verizon throttled service to firefighters battling the worst wildfire in the state's history, more than 1,000 firefighters and other first responders signed on to an open letter calling for the restoration of the rules. The California bill passed with bipartisan backing on August 31, 2018. The LA Times and other major outlets credited

2160-501: The threats the surveillance-based business model poses to security, privacy and civil liberties. After a Motherboard report found that a bounty hunter could purchase location data from Sprint, T-Mobile, and AT&T for as little as $ 300, FFTF organized a rapid response campaign calling on Congress and the FCC to investigate the dangers of the sale of sensitive personal information. Through this campaign, 20,000 people called for an investigation. By May 2019, all major carriers agreed to stop

2208-450: The world's largest software development platform, that disclosed the renewal of a $ 200,000 ICE contract. The email prompted hundreds of the company's employees to demand the company cancel the contract. In October 2019, the group's NoMusicForICE campaign prompted more than 1,000 independent artists to call for the boycott Amazon-backed events and partnerships over its contracts with ICE and other federal agencies. FFTF's BanFacialRecognition

2256-576: Was imprisoned from 2010 until 2017 when her sentence was commuted. FFTF laid the groundwork for her release and crowdraising $ 140,000 in post-prison support. When Manning was again jailed on March 8, 2019, for her continued refusal to testify before a grand jury against Julian Assange , FFTF called for her immediate release. She was released on March 12, 2019. After Salesforce signed a $ 40 million contract with ICE and U.S. Border Patrol , through NoTechForIce.com, FFTF brought together groups like Color of Change , RAICES , and Mijente , to demand that

2304-799: Was the first major national campaign calling for a federal ban on law enforcement use of facial recognition technology ; it has been endorsed by 30 major organizations. With the help of musicians including Rage Against the Machine's Tom Morello, Speedy Ortiz's Sadie Dupuis, Amanda Palmer, and rappers Atmosphere, the organization was able to get more than 40 of the world's largest music festivals to sign on, including SXSW , Coachella , Lollapalooza , and Bonarroo. Its AirlinePrivacy.com campaign called on airlines to drop facial recognition screening in partnership with U.S. border control and to book directly with companies that are not using it. Starting in 2023, US airlines have adopted facial recognition technology to eliminate

#918081