I 

114TH CONGRESS 

2D SESSION H. R. 6473 

To express the sense of Congress that information security is critical to 

the economic security of the United States and to direct the Assistant 

Secretary of Commerce for Communications and Information to submit 

to Congress a report on the costs of information security. 

IN THE HOUSE OF REPRESENTATIVES 

DECEMBER 7, 2016 

Mr. UPTON introduced the following bill; which was referred to the Committee 

on Energy and Commerce 

A BILL 

To express the sense of Congress that information security 

is critical to the economic security of the United States 

and to direct the Assistant Secretary of Commerce for 

Communications and Information to submit to Congress 

a report on the costs of information security. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SENSE OF CONGRESS ON INFORMATION SECU4 RITY. 

5 It is the sense of Congress that— 


smartinez on DSK3GLQ082PROD with BILLS
2 

•HR 6473 IH

1 (1) information is vital to all industries of the 

2 United States for domestic and international com3 merce; 

4 (2) the modern United States economy relies 

5 increasingly on digital information systems; and 

6 (3) information security is therefore critical to 

7 the economic security of the United States and 

8 should be protected in a manner that continues to 

9 promote economic growth. 

10 SEC. 2. NTIA REPORT ON COSTS OF INFORMATION SECU11 RITY TO UNITED STATES ECONOMY. 

12 (a) IN GENERAL.—Not later than 2 years after the 

13 date of the enactment of this Act, the Assistant Secretary 

14 of Commerce for Communications and Information shall 

15 submit to Congress a report on the direct and indirect 

16 costs of information security to the economy of the United 

17 States. In preparing such report, the Assistant Secretary 

18 shall use existing commercial indices and other publicly 

19 available information. 

20 (b) REQUIRED CONSIDERATIONS.—The report re21 quired by subsection (a) shall contain an estimate of the 

22 costs described in such subsection. In preparing such esti23 mate, the Assistant Secretary shall consider costs that in24 clude the cost of— 

25 (1) keeping information systems secure; 


smartinez on DSK3GLQ082PROD with BILLS
3 

•HR 6473 IH

1 (2) actions necessary to mitigate compromise of 

2 information systems; 

3 (3) measures used to hedge against such com4 promise; and 

5 (4) economic loss or harm caused by such com6 promise. 

7 SEC. 3. DEFINITIONS. 

8 In this Act: 

9 (1) INFORMATION SECURITY.—The term ‘‘infor10 mation security’’ means protecting information and 

11 information systems from unauthorized access, use, 

12 disclosure, disruption, modification, or destruction in 

13 order to provide— 

14 (A) integrity, which means guarding 

15 against improper information modification or 

16 destruction, and includes ensuring information 

17 nonrepudiation and authenticity; 

18 (B) confidentiality, which means pre19 serving authorized restrictions on access and 

20 disclosure, including means for protecting per21 sonal privacy and proprietary information; 

22 (C) availability, which means ensuring 

23 timely and reliable access to and use of infor24 mation; and 


smartinez on DSK3GLQ082PROD with BILLS
4 

•HR 6473 IH

1 (D) authentication, which means utilizing 

2 digital credentials to assure the identity of 

3 users and validate their access. 

4 (2) INFORMATION SYSTEM.—The term ‘‘infor5 mation system’’ means any equipment or inter6 connected system or subsystems of equipment that is 

7 used in the automatic acquisition, storage, manipula8 tion, management, movement, control, display, 

9 switching, interchange, transmission, or reception of 

10 data or information, and includes— 

11 (A) networks and computers and other 

12 network-enabled devices; 

13 (B) ancillary equipment; 

14 (C) software, firmware, and related proce15 dures; 

16 (D) services, including support services; 

17 and 

18 (E) related resources. 

Æ 


smartinez on DSK3GLQ082PROD with BILLS