CISA is a vehicle for the distribution of Indications of Compromise and other standard infosec threat intelligence between Government entities as well as the public and large corporations. The liability protections are completely reasonable if private companies were going to participate at all. The privacy protections built in are also much more thorough than I was expecting in a bill of this nature.
Really the only thing that really worries me about is that the things that the Government is allowed to do with shared information includes "identifying the use of an information system by a foreign adversary or terrorist". Which seems a little too broad for my tastes.
In fact, I was on the CISA hate train but after reading it I feel that it's an entirely inoffensive law and my outrage has fizzled into indifference. I'm not going to lose sleep if this passed nor if it isn't but likening it to a Letter of Marque is not warranted.
Here's the text for anyone interested: https://www.congress.gov/bill/114th-congress/senate-bill/754