Despite the objections of many privacy advocates and security professionals, the Cybersecurity Information Sharing Act (CISA) is now the law of the land. Slipped into the 2016 federal omnibus spending bill, CISA permits private entities to share information about cyberthreat indicators (CTIs) and defensive measures against cyber attacks, both with each other and with the federal government.