The Critical Infrastructure Information Act (CIIA) has which purpose?

• A. Require sharing of information vital to protection; utilities must communicate with government to reduce vulnerability.
• B. Mandate private security contractors to disclose all internal policies publicly.
• C. Regulate critical infrastructure pricing.
• D. Prohibit government access to utility data.

Answer: (A)

The main idea being tested is how the act facilitates protective information flow between private infrastructure owners and the government to reduce risk. The Critical Infrastructure Information Act is designed to encourage the sharing of information that helps protect essential systems—like power, water, and other utilities—without forcing disclosure to the public. It creates a framework where sensitive details about threats, vulnerabilities, incidents, and protective measures can be shared with government agencies and, in return, are protected from broad public disclosure. This shared information helps the government and private sector coordinate more effectively to prevent or respond to risks.

This is why the option describing a purpose to require sharing of vital information and to have utilities communicate with the government to reduce vulnerability is the best fit. It captures the collaboration and protective intent: getting crucial information into a trusted channel so vulnerabilities can be addressed. The other choices don’t fit the intent—there’s no mandate for public disclosure of internal policies by private contractors, no pricing regulation, and the act does not prohibit government access; rather, it enables controlled sharing to strengthen protection.