CISPA's immunity clause allows companies to use "cybersecurity systems." As discussed in our CISPA FAQ, the definition is critical to the bill yet littered with problems. It appears to be intended to protect a company's automated response to a network attack—a widely used action by network administrators. But the definition a "cybersecurity system" is broad enough to include aggressive countermeasures that some would consider offensive actions.