I 

116TH CONGRESS 

2D SESSION H. R. 7588 

To require the Secretary of Homeland Security to conduct a review of the 

ability of the Cybersecurity and Infrastructure Security Agency of the 

Department of Homeland Security to fulfill its current mission requirements, and for other purposes. 

IN THE HOUSE OF REPRESENTATIVES 

JULY 13, 2020 

Mr. KATKO (for himself, Mr. RUPPERSBERGER, and Mr. GALLAGHER) introduced the following bill; which was referred to the Committee on Homeland Security, and in addition to the Committees on Oversight and Reform, Energy and Commerce, and Transportation and Infrastructure, for 

a period to be subsequently determined by the Speaker, in each case for 

consideration of such provisions as fall within the jurisdiction of the committee concerned 

A BILL 

To require the Secretary of Homeland Security to conduct 

a review of the ability of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security to fulfill its current mission requirements, 

and for other purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 


SSpencer on DSK126QN23PROD with BILLS
2 

•HR 7588 IH

1 SECTION 1. SHORT TITLE. 

2 This Act may be cited as the ‘‘Strengthening the Cy3 bersecurity and Infrastructure Security Agency Act of 

4 2020’’. 

5 SEC. 2. CYBERSECURITY AND INFRASTRUCTURE SECURITY 

6 AGENCY REVIEW. 

7 (a) IN GENERAL.—The Director of the Cybersecurity 

8 and Infrastructure Security Agency of the Department of 

9 Homeland Security shall conduct a review of the ability 

10 of the Cybersecurity and Infrastructure Security Agency 

11 to carry out its mission requirements, as well as the rec12 ommendations detailed in the U.S. Cyberspace Solarium 

13 Commission’s Report regarding the Agency. 

14 (b) ELEMENTS OF REVIEW.—The review conducted 

15 in accordance with subsection (a) shall include the fol16 lowing elements: 

17 (1) An assessment of how additional budget re18 sources could be used by the Cybersecurity and In19 frastructure Security Agency for projects and pro20 grams that— 

21 (A) support the national risk management 

22 mission; 

23 (B) support public and private-sector cy24 bersecurity; 

25 (C) promote public-private integration; and 


SSpencer on DSK126QN23PROD with BILLS
3 

•HR 7588 IH

1 (D) provide situational awareness of cyber2 security threats. 

3 (2) A force structure assessment of the Cyber4 security and Infrastructure Security Agency, includ5 ing— 

6 (A) a determination of the appropriate size 

7 and composition of personnel to carry out the 

8 mission requirements of the Agency, as well as 

9 the recommendations detailed in the U.S. 

10 Cyberspace Solarium Commission’s Report re11 garding the Agency; 

12 (B) as assessment of whether existing per13 sonnel are appropriately matched to the 

14 prioritization of threats in the cyber domain 

15 and risks to critical infrastructure; 

16 (C) an assessment of whether the Agency 

17 has the appropriate personnel and resources 

18 to— 

19 (i) perform risk assessments, threat 

20 hunting, and incident response to support 

21 both private and public cybersecurity; 

22 (ii) carry out its responsibilities re23 lated to the security of Federal information 

24 and Federal information systems (as such 


SSpencer on DSK126QN23PROD with BILLS
4 

•HR 7588 IH

1 term is defined in section 3502 of title 44, 

2 United States Code); and 

3 (iii) carry out its critical infrastruc4 ture responsibilities, including national risk 

5 management; 

6 (D) an assessment of whether current 

7 structure, personnel, and resources of regional 

8 field offices are sufficient to carry out Agency 

9 responsibilities and mission requirements; and 

10 (E) an assessment of current Cybersecu11 rity and Infrastructure Security Agency facili12 ties, including a review of the suitability of such 

13 facilities to fully support current and projected 

14 mission requirements nationally and regionally, 

15 and recommendations regarding future facility 

16 requirements. 

17 (c) SUBMISSION OF REVIEW.—Not later than one 

18 year after the date of the enactment of this Act, the Sec19 retary of Homeland Security shall submit to the Com20 mittee on Homeland Security of the House of Representa21 tives and the Committee on Homeland Security and Gov22 ernmental Affairs of the Senate a report detailing the re23 sult of the review conducted in accordance with subsection 

24 (a), including recommendations to address any identified 

25 gaps. 


SSpencer on DSK126QN23PROD with BILLS
5 

•HR 7588 IH

1 SEC. 3. GENERAL SERVICES ADMINISTRATION REVIEW. 

2 (a) SUBMISSION OF ASSESSMENT.—Upon submission 

3 to the Committee on Homeland Security of the House of 

4 Representatives and the Committee on Homeland Security 

5 and Governmental Affairs of the Senate of the report re6 quired under section 2(c), the Director of the Cybersecu7 rity and Infrastructure Security Agency of the Depart8 ment of Homeland Security shall submit to the Adminis9 trator of the General Services Administration the results 

10 of the assessment required under section (b)(2)(E). 

11 (b) REVIEW.—The Administrator of the General 

12 Services Administration shall— 

13 (1) conduct a review of Cybersecurity and In14 frastructure Security Agency assessment required 

15 under section 2(b)(2)(E); and 

16 (2) make recommendations regarding resources 

17 needed to procure or build a new facility or augment 

18 existing facilities to ensure sufficient size and ac19 commodations to fully support current and projected 

20 mission requirements, including the integration of 

21 personnel from the private sector and other Federal 

22 departments and agencies. 

23 (c) SUBMISSION OF REVIEW.—Not later than 30 

24 days after receipt of the assessment under subsection (a), 

25 the Administrator of the General Services Administration 

26 shall submit to the President, the Secretary of Homeland 


SSpencer on DSK126QN23PROD with BILLS
6 

•HR 7588 IH

1 Security, the Committee on Homeland Security and Gov2 ernmental Affairs of the Senate, and the Committee on 

3 Homeland Security of the House of Representatives the 

4 review required under subsection (b). 

Æ 


SSpencer on DSK126QN23PROD with BILLS