House Defense Bill Calls for Public-Private Cyber Threat Information-Sharing Program

The House of Representatives’ version of the annual defense bill would create a new avenue for the private and public sectors to share cyber threat information.

If enacted, the bill would direct the heads of the Department of Homeland Security, Department of Defense and the Intelligence Community to develop a Cyber Threat Information Collaboration Environment Program.

Participants in the program would be given limited access to data operationally relevant to their cybersecurity requirements, according to language under Section 1504 of the draft legislation.

A similar program was recommended by the congressionally chartered Cyberspace Solarium Commission, The Record reported Tuesday. Dubbed the joint collaborative environment in CSC’s March 2020 report, the original recommendation would have been used for fusing threat information and other data.

Members of the House Armed Services Committee are expected to mark up the $802.4 billion bill this Wednesday.

A summary of the House Armed Services Committee’s version of the bill does not have a provision for the creation of the collaborative environment. 

HASC’s version would also direct the secretary of defense to convene military and civilian education institutions in a consortium that would facilitate the sharing of cybersecurity information.

In addition, Section 1531 of the House bill would require the chief of the U.S. Cyber Command to deliver annual reports on the military departments’ performance in supporting cyberspace operations. The full House could vote on the bill as early as July.