미국 사이버안보 정보공유법(Cybersecurity Information Sharing Act)에 대한 소고

As the Internet become more advanced and the networks more sophisticated, cyber security has risen as a national concern. CISA, also known as Cybersecurity Information Sharing Act, is designed to bolster the United States’ cyber security by limiting liability risks that may be inhibiting companies from sharing cybersecurity threat information with the government and taking measures to detect and deter attacks on information systems as well as critical infrastructure. This new cybersecurity law was designed to prevent cyber-attacks by encouraging private companies to share information. However, critics have pointed out from the beginning that the CISA poses serious threats to privacy, gives the government too much powers to collect information on individuals, and exempts those who control information from sunshine laws which is to ensure transparency in certain public activities. Korea, after a series of recent major cyber-attacks, is also in pursuit of implementing policies to manage cyber-attacks more systematically by forming an information sharing system between all government, military, and private sectors as CISA is attempting to do. While Korea is trying to establish a new cyber defense measures by studying CISA and comparing it with the domestic situation, there is less discussion on the issues CISA is facing in the United States such as privacy violations or legal uncertainties. This paper intends to analyze and evaluate the effectiveness of the CISA in order to induce further public debate addressing concerns raised by CISA.