Adopt an 'obligation to share' policy with 48-hour cyber intelligence release

Not started

Printed page 222 7. Intelligence Community

“To continue improving the U.S. government’s ability to defend the country’s most vital networks, the IC must adopt an “obligation to share” policy process, including the capacity for “write to release” intelligence products whereby newly discovered technical indicators, targeting, and other intelligence relevant to cyber defense are automatically provided either to the public or to targeted entities within 48 hours of their collection.”

What has happened

Dec 18, 2025 Not started
No "obligation to share" or "write to release" policy exists on any allowlisted record: Federal Register full-text searches for both phrases since 2025-01-20 return nothing on point, and no presidential action creates one. The nearest enacted measure is section 6623 of the Intelligence Authorization Act for FY2026, which requires a strategy on intelligence coordination and sharing relating to critical and emerging technologies; that is a strategy document about a technology portfolio, not a default-release policy with a 48-hour clock for cyber indicators.
- Intelligence Authorization Act for Fiscal Year 2026 (Division F of P.L. 119-60, the FY2026 National Defense Authorization Act)
  Primary Congress Dec 18, 2025

Research log

What was searched, and what didn’t count as evidence

Research notes

One negative search covered the information-sharing asks on p. 222: #587, #588 and #589.

Action: create
Object: 'Obligation to share' / 'write to release' cyber intelligence policy
ID: 587