Cyber Security Information Act

Cyber Security Information Act - Prohibits the disclosure of "cyber security information" (defined to include information related to the ability of any protected system, or critical infrastructure, to resist intentional interference or incapacitation through the misuse of or unauthorized access to or use of the Internet, telecommunications systems, or similar conduct that violates Federal, State, or international law, harms U.S. interstate commerce, or threatens public health or safety) that is voluntarily provided to a Federal entity.

Provides that (with exceptions) any such information voluntarily provided directly to the Government about its own cyber security, a third party's cyber security, or to an Information Sharing Organization which is subsequently provided to the Government in identifiable form shall: (1) be exempt from disclosure under the Freedom of Information Act; (2) not be disclosed to any third party; and (3) not be used by any Federal or State entity or by any third party in any civil action.

Makes the antitrust laws inapplicable (with an exception) to conduct engaged in solely for the purpose of and limited to: (1) facilitating the correction or avoidance of a cyber security-related problem; or (2) communication of or disclosing information to help correct or avoid the effects of a cyber security-related program.

Authorizes the President to establish and terminate working groups composed of Federal employees who will engage outside organizations in discussions to address or share information related to cyber security, and otherwise to serve the purposes of this Act.