The new law establishes a voluntary framework for real-time information sharing of cyber threat indicators and defensive measures among owners and operators of critical infrastructure and the federal government.