II 

Calendar No. 113 

116TH CONGRESS 

1ST SESSION H. R. 1158 

IN THE SENATE OF THE UNITED STATES 

JUNE 11, 2019 

Received; read twice and placed on the calendar 

AN ACT 

To authorize cyber incident response teams at the 

Department of Homeland Security, and for other purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘DHS Cyber Incident 

5 Response Teams Act of 2019’’. 

6 SEC. 2. DEPARTMENT OF HOMELAND SECURITY CYBER IN7 CIDENT RESPONSE TEAMS. 

8 (a) IN GENERAL.—Section 2209 of the Homeland 

9 Security Act of 2002 (6 U.S.C. 148) is amended— 

10 (1) in subsection (d)(1)(B)(iv), by inserting ‘‘, 

11 including cybersecurity specialists’’ after ‘‘entities’’; 


kjohnson on DSK79L0C42 with BILLS
2 

HR 1158 PCS

1 (2) by redesignating subsections (f) through 

2 (m) as subsections (g) through (n), respectively; 

3 (3) by inserting after subsection (e) the fol4 lowing new subsection (f): 

5 ‘‘(f) CYBER INCIDENT RESPONSE TEAMS.— 

6 ‘‘(1) IN GENERAL.—The Center shall maintain 

7 cyber hunt and incident response teams for the pur8 pose of providing, as appropriate and upon request, 

9 assistance, including the following: 

10 ‘‘(A) Assistance to asset owners and opera11 tors in restoring services following a cyber inci12 dent. 

13 ‘‘(B) The identification of cybersecurity 

14 risk and unauthorized cyber activity. 

15 ‘‘(C) Mitigation strategies to prevent, 

16 deter, and protect against cybersecurity risks. 

17 ‘‘(D) Recommendations to asset owners 

18 and operators for improving overall network 

19 and control systems security to lower cybersecu20 rity risks, and other recommendations, as ap21 propriate. 

22 ‘‘(E) Such other capabilities as the Under 

23 Secretary appointed under section 103(a)(1)(H) 

24 determines appropriate. 


kjohnson on DSK79L0C42 with BILLS
3 

HR 1158 PCS

1 ‘‘(2) CYBERSECURITY SPECIALISTS.—The Sec2 retary may include cybersecurity specialists from the 

3 private sector on cyber hunt and incident response 

4 teams. 

5 ‘‘(3) ASSOCIATED METRICS.—The Center shall 

6 continually assess and evaluate the cyber incident re7 sponse teams and their operations using robust 

8 metrics. 

9 ‘‘(4) SUBMITTAL OF INFORMATION TO CON10 GRESS.—Upon the conclusion of each of the first 4 

11 fiscal years ending after the date of the enactment 

12 of this subsection, the Center shall submit to the 

13 Committee on Homeland Security of the House of 

14 Representatives and the Homeland Security and 

15 Governmental Affairs Committee of the Senate, in16 formation on the metrics used for evaluation and as17 sessment of the cyber incident response teams and 

18 operations pursuant to paragraph (3), including the 

19 resources and staffing of such cyber incident re20 sponse teams. Such information shall include each of 

21 the following for the period covered by the report: 

22 ‘‘(A) The total number of incident re23 sponse requests received. 

24 ‘‘(B) The number of incident response 

25 tickets opened. 


kjohnson on DSK79L0C42 with BILLS
4 

HR 1158 PCS

1 ‘‘(C) All interagency staffing of incident 

2 response teams. 

3 ‘‘(D) The interagency collaborations estab4 lished to support incident response teams.’’; and 

5 (4) in subsection (g), as redesignated by para6 graph (2)— 

7 (A) in paragraph (1), by inserting ‘‘, or 

8 any team or activity of the Center,’’ after ‘‘Cen9 ter’’; and 

10 (B) in paragraph (2), by inserting ‘‘, or 

11 any team or activity of the Center,’’ after ‘‘Cen12 ter’’. 

13 (b) NO ADDITIONAL FUNDS AUTHORIZED.—No ad14 ditional funds are authorized to be appropriated to carry 

15 out the requirements of this Act and the amendments 

16 made by this Act. Such requirements shall be carried out 

17 using amounts otherwise authorized to be appropriated. 

Passed the House of Representatives June 10, 2019. 

Attest: CHERYL L. JOHNSON, 

Clerk. 


kjohnson on DSK79L0C42 with BILLS

kjohnson on DSK79L0C42 with BILLS
Calendar No. 113 

116TH CONGRESS 

1ST SESSION H. R. 1158 

AN ACT 

To authorize cyber incident response teams at the 

purposes. Department of Homeland Security, and for other 

JUNE 11, 2019 

Received; read twice and placed on the calendar 


kjohnson on DSK79L0C42 with BILLS