It is indeed unfortunate that in you reply to the substance at little as possible, since this way neither I nor other readers can benefit from your knowledge. The bill is not very large, so it would not be hard for you to show that it does not apply to your company, if indeed it does not. I don't think this has anything to do with corruption, but it does have something to do with bias. However, since you clearly genuinely believe that this bill does not pertain to your company, this possibility for bias has already been eliminated whether or not the bill actually does apply to your company. Still, I think that's an interesting question.
As far as I can tell, these sections of the bill indicate that it does apply to your company:
‘‘(A) CYBERSECURITY PROVIDERS.— Not-
5 withstanding any other provision of law, a cy-
6 bersecurity provider, with the express consent
7 of a protected entity for which such cybersecu-
8 rity provider is providing goods or services for
9 cybersecurity purposes, may, for cybersecurity
10 purposes—
11 ‘‘(i) use cybersecurity systems to iden-
12 tify and obtain cyber threat information to
13 protect the rights and property of such
14 protected entity; and [...]
So, if the company your are investigating gives you consent, you may obtain cyber threat information. Note that this says nothing about the way the company is contracted.
What is cyber threat information?
1 ‘‘(2) CYBER THREAT INFORMATION.—The term
2 ‘cyber threat information’ means information di-
3 rectly pertaining to a vulnerability of, or threat to,
4 a system or network of a government or private enti-
5 ty, including [...]
So this means that you can get all information pertaining to a vulnerability, and CISPA will protect the company you're getting that information from. This is so vague that it could be virtually any data. But it gets better:
‘‘(4) EXEMPTION FROM LIABILITY.—No civil or
12 criminal cause of action shall lie or be maintained in
13 Federal or State court against a protected entity,
14 self-protected entity, cybersecurity provider, or an
15 officer, employee, or agent of a protected entity, self-
16 protected entity, or cybersecurity provider, acting in
17 good faith—
18 ‘‘(A) for using cybersecurity systems or
19 sharing information in accordance with this sec-
20 tion; or
21 ‘‘(B) for decisions made based on cyber
22 threat information identified, obtained, or
23 shared under this section
So even if a company managed to share data that would not be allowed, as long as it's acting "in good faith" everything is A-OK. Given this I fail to see how your company is not a consumer of cyber threat information as defined in this bill.
If you are so easily offended, you may wish to review your own writing style, since your comments are far from the least argumentative on HN (and I do not just mean this thread).
Thanks for your blessing, you have mine as well.