I 

115TH CONGRESS 

1ST SESSION H. R. 584 

To amend the Homeland Security Act of 2002 to enhance preparedness 

and response capabilities for cyber attacks, bolster the dissemination 

of homeland security information related to cyber threats, and for other 

purposes. 

IN THE HOUSE OF REPRESENTATIVES 

JANUARY 17, 2017 

Mr. DONOVAN (for himself, Mr. PAYNE, Mr. MCCAUL, and Mr. RATCLIFFE) 

introduced the following bill; which was referred to the Committee on 

Homeland Security 

A BILL 

To amend the Homeland Security Act of 2002 to enhance 

preparedness and response capabilities for cyber attacks, 

bolster the dissemination of homeland security information related to cyber threats, and for other purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘Cyber Preparedness 

5 Act of 2017’’. 


asabaliauskas on DSK3SPTVN1PROD with BILLS
2 

•HR 584 IH

1 SEC. 2. INFORMATION SHARING. 

2 Title II of the Homeland Security Act of 2002 is 

3 amended— 

4 (1) in section 210A (6 U.S.C. 124h)— 

5 (A) in subsection (b)— 

6 (i) in paragraph (10), by inserting be7 fore the semicolon at the end the following: 

8 ‘‘, including, in coordination with the na9 tional cybersecurity and communications 

10 integration center under section 227, ac11 cess to timely technical assistance, risk 

12 management support, and incident re13 sponse capabilities with respect to cyber 

14 threat indicators, defensive measures, cy15 bersecurity risks, and incidents (as such 

16 terms are defined in such section), which 

17 may include attribution, mitigation, and 

18 remediation, and the provision of informa19 tion and recommendations on security and 

20 resilience, including implications of cyber21 security risks to equipment and technology 

22 related to the electoral process’’; 

23 (ii) in paragraph (11), by striking 

24 ‘‘and’’ after the semicolon; 

25 (iii) by redesignating paragraph (12) 

26 as paragraph (14); and 


asabaliauskas on DSK3SPTVN1PROD with BILLS
3 

•HR 584 IH

1 (iv) by inserting after paragraph (11) 

2 the following new paragraphs: 

3 ‘‘(12) review information relating to cybersecu4 rity risks that is gathered by State, local, and re5 gional fusion centers, and incorporate such informa6 tion, as appropriate, into the Department’s own in7 formation relating to cybersecurity risks; 

8 ‘‘(13) ensure the dissemination to State, local, 

9 and regional fusion centers of information relating 

10 to cybersecurity risks; and’’; 

11 (B) in subsection (c)(2)— 

12 (i) by redesignating subparagraphs 

13 (C) through (G) as subparagraphs (D) 

14 through (H), respectively; and 

15 (ii) by inserting after subparagraph 

16 (B) the following new subparagraph: 

17 ‘‘(C) The national cybersecurity and com18 munications integration center under section 

19 227.’’; 

20 (C) in subsection (d)— 

21 (i) in paragraph (3), by striking 

22 ‘‘and’’ after the semicolon; 

23 (ii) by redesignating paragraph (4) as 

24 paragraph (5); and 


asabaliauskas on DSK3SPTVN1PROD with BILLS
4 

•HR 584 IH

1 (iii) by inserting after paragraph (3) 

2 the following new paragraph: 

3 ‘‘(4) assist, in coordination with the national 

4 cybersecurity and communications integration center 

5 under section 227, fusion centers in using informa6 tion relating to cybersecurity risks to develop a com7 prehensive and accurate threat picture; and’’; and 

8 (D) in subsection (j)— 

9 (i) by redesignating paragraphs (1) 

10 through (5) as paragraphs (2) through (6), 

11 respectively; and 

12 (ii) by inserting before paragraph (2), 

13 as so redesignated, the following new para14 graph: 

15 ‘‘(1) the term ‘cybersecurity risk’ has the mean16 ing given that term in section 227;’’; and 

17 (2) in section 227 (6 U.S.C. 148)— 

18 (A) in subsection (c)— 

19 (i) in paragraph (5)(B), by inserting 

20 ‘‘, including State and major urban area 

21 fusion centers, as appropriate’’ before the 

22 semicolon at the end; 

23 (ii) in paragraph (7), in the matter 

24 preceding subparagraph (A), by striking 

25 ‘‘information and recommendations’’ each 


asabaliauskas on DSK3SPTVN1PROD with BILLS
5 

•HR 584 IH

1 place it appears and inserting ‘‘informa2 tion, recommendations, and best prac3 tices’’; and 

4 (iii) in paragraph (9), by inserting 

5 ‘‘best practices,’’ after ‘‘defensive meas6 ures,’’; and 

7 (B) in subsection (d)(1)(B)(ii), by insert8 ing ‘‘and State and major urban area fusion 

9 centers, as appropriate’’ before the semicolon at 

10 the end. 

11 SEC. 3. HOMELAND SECURITY GRANTS. 

12 Subsection (a) of section 2008 of the Homeland Secu13 rity Act of 2002 (6 U.S.C. 609) is amended— 

14 (1) by redesignating paragraphs (4) through 

15 (14) as paragraphs (5) through (15), respectively; 

16 and 

17 (2) by inserting after paragraph (3) the fol18 lowing new paragraph: 

19 ‘‘(4) enhancing cybersecurity, including pre20 paring for and responding to cybersecurity risks and 

21 incidents (as such terms are defined in section 227) 

22 and developing statewide cyber threat information 

23 analysis and dissemination activities;’’. 


asabaliauskas on DSK3SPTVN1PROD with BILLS
6 

•HR 584 IH

1 SEC. 4. SENSE OF CONGRESS. 

2 It is the sense of Congress that to facilitate the timely 

3 dissemination to appropriate State, local, and private sec4 tor stakeholders of homeland security information related 

5 to cyber threats, the Secretary of Homeland Security 

6 should, to the greatest extent practicable, work to share 

7 actionable information related to cyber threats in an un8 classified form. 

Æ 


asabaliauskas on DSK3SPTVN1PROD with BILLS