# Congress Considers Expanding AI Security Information Sharing

Congress is evaluating extending the Cybersecurity Information Sharing Act of 2015 (CISA 2015) beyond its current focus on cyber threats to include AI-related security risks as the statute nears expiration in September 2026. This legislative consideration aims to provide enhanced legal protections and clearer antitrust guidance to encourage AI developers to share critical threat information. Federal agencies such as the FTC, DOJ, and CISA are involved in shaping policies that would facilitate secure and cooperative AI threat information exchange among industry stakeholders, which is essential for national security and risk mitigation in emerging AI technologies.

- **Why this matters:** Procurement professionals should anticipate potential new requirements or incentives for contractors developing AI technologies to participate in threat information sharing frameworks.
- The expansion could influence contract terms related to cybersecurity and compliance for AI vendors including major developers like OpenAI, Microsoft, and Google DeepMind.
- Organizations involved in AI development or integration with federal systems may benefit from understanding evolving legal protections and antitrust clarifications that reduce barriers to collaboration.
- Agencies and contractors should prepare for possible updates to cybersecurity policies that incorporate AI-specific threat intelligence sharing, impacting procurement planning and risk management strategies.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity
**Published:** September 11, 2026

### Government Entities
- Congress
- Federal Trade Commission (FTC)
- Department of Justice (DOJ)
- Cybersecurity and Infrastructure Security Agency (CISA)
- White House

### Vendors
- OpenAI (AI developer)
- Anthropic (AI developer)
- Google DeepMind (AI developer)
- Meta (AI developer)
- Microsoft (AI developer)

### Key Quotes
> The FTC and DOJ should clarify that sharing AI threat information beyond cyber-specific threat information is unlikely to raise antitrust concerns.
> — Mark Reddish, Senior Research Scholar

> If the developers are willing to share what they know about AI threats, along with how those threats can be mitigated, we should make it easier for them to do so.
> — Matthew Mittelsteadt, Frontier Security Senior Researcher

### Sources
- [
        The time is now: Incentivize AI companies to share critical security information | Federal News Network](https://federalnewsnetwork.com/commentary/2026/09/the-time-is-now-incentivize-ai-companies-to-share-critical-security-information) - Federal News Network