Cybersecurity Information Sharing Act of 2014

Summary

Cybersecurity Information Sharing Act of 2014 - Requires the Director of National Intelligence (DNI), the Secretary of Homeland Security (DHS), the Secretary of Defense (DOD), and the Attorney General (DOJ) to develop and promulgate procedures for classified and declassified cyber threat indicators in possession of the federal government to be shared in real time with private entities; non-federal government agencies; or state, tribal, or local governments. Provides for the public availability of unclassified indicators. Permits private entities to monitor and operate countermeasures to prevent or mitigate cybersecurity threats or security vulnerabilities on their own information systems and, with written consent, the information systems of other entities and federal entities. Authorizes such entities to monitor information that is stored on, processed by, or transiting such monitored systems. Allows entities to share and receive indicators and countermeasures with other entities or the federal government. Permits state, tribal, or local agencies to use shared indicators (with the consent of the agency sharing the indicators) to prevent, investigate, or prosecute computer crimes. Directs the Attorney General to: (1) promulgate procedures relating to the receipt of indicators and countermeasures by the federal government; and (2) develop privacy and civil liberties guidelines to limit receipt, retention, use, and dissemination of personal or identifying information. Directs the DHS Secretary to develop a process for the federal government to: (1) accept cyber threat indicators and countermeasures from entities in an electronic format; and (2) distribute such indicators and countermeasures to appropriate federal entities in real time, simultaneous with receipt. Requires the DHS Secretary to certify to Congress that such capability is fully operational before the process is implemented. Requires the Federal Bureau of Investigation (FBI) and the DHS Secretary to report to Congress regarding implementation of an automated malware analysis capability, including an assessment of the advisability of transferring the operation of such capability to DHS. Authorizes indicators and countermeasures to be disclosed to, retained by, and used by, consistent with otherwise applicable federal law, any federal agency or federal government agent solely for: (1) protecting an information system or information that is stored on, processed by, or transiting an information system from a cybersecurity threat or security vulnerability; (2) responding to, or otherwise preventing or mitigating, an imminent threat of death or serious bodily harm or threat to a minor; or (3) investigating or prosecuting an offense arising out of a threat of death or serious bodily harm, as well as offenses relating to fraud and identity theft, espionage and censorship, and trade secrets. Prohibits government agencies from using indicators and countermeasures provided to the federal government to regulate the lawful activities of an entity. Provides liability protections to entities acting in accordance with this Act that: (1) monitor information systems, and (2) share and receive indicators and countermeasures. Makes an entity's good faith reliance that conduct was permitted under this Act a complete defense to a cause of action based on such monitoring and sharing activities.

This text is taken from the official record. PoliticalRepo does not editorialize.

Timeline

No timeline events have been ingested for this record yet.

Votes

No vote records are attached yet.

Versions

No version snapshots stored. Document URLs remain at the source.

Documents

4 official files

• Placed on Calendar Senate (text)

  Placed on Calendar Senate · EN · 10 July 2014

  ViewDownloadOpen at official source

• Placed on Calendar Senate (PDF)

  Placed on Calendar Senate · EN · 10 July 2014

  ViewDownloadOpen at official source

• Reported to Senate without amendment

  summary · EN · 10 July 2014

  Open at official source

• Introduced in Senate

  summary · EN · 10 July 2014

  Open at official source

Sponsors

No sponsors or actors listed by the source.

Related records

No cross-record relationships stored yet.