Overview
- The Widespread Information Management for the Welfare of Infrastructure and Government (Wimwig) Act cleared the House Homeland Security Committee at the start of September with bipartisan backing, according to Chairman Andrew Garbarino.
- Wimwig is described as preserving CISA 2015’s liability and antitrust protections while clarifying ambiguous language, updating definitions to cover AI‑era tactics, and strengthening routes for private companies—especially SMEs—to receive federal threat intelligence.
- CISA 2015 is set to sunset at the end of September, and practitioners caution that even a brief lapse would slow timely federal bulletins and degrade joint advisories shared with allies, citing the recent Salt Typhoon advisory as an example.
- Cybersecurity experts say outside breach counsel are prepared to change their guidance to clients on contacting the federal government after incidents if statutory protections lapse.
- Commentary argues that, regardless of congressional action, companies should harden defenses by adopting zero‑trust architectures and other proactive controls.