EIP and CISA - Unclear Legal Authorities