IIB 

115TH CONGRESS 

1ST SESSION H. R. 584 

IN THE SENATE OF THE UNITED STATES 

FEBRUARY 1, 2017 

Received; read twice and referred to the Committee on Homeland Security and 

Governmental Affairs 

AN ACT 

To amend the Homeland Security Act of 2002 to enhance 

preparedness and response capabilities for cyber attacks, 

bolster the dissemination of homeland security information related to cyber threats, and for other purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 


smartinez on DSK3GLQ082PROD with BILLS
2 

HR 584 RFS 

1 SECTION 1. SHORT TITLE. 

2 This Act may be cited as the ‘‘Cyber Preparedness 

3 Act of 2017’’. 

4 SEC. 2. INFORMATION SHARING. 

5 Title II of the Homeland Security Act of 2002 is 

6 amended— 

7 (1) in section 210A (6 U.S.C. 124h)— 

8 (A) in subsection (b)— 

9 (i) in paragraph (10), by inserting be10 fore the semicolon at the end the following: 

11 ‘‘, including, in coordination with the na12 tional cybersecurity and communications 

13 integration center under section 227, ac14 cess to timely technical assistance, risk 

15 management support, and incident re16 sponse capabilities with respect to cyber 

17 threat indicators, defensive measures, cy18 bersecurity risks, and incidents (as such 

19 terms are defined in such section), which 

20 may include attribution, mitigation, and 

21 remediation, and the provision of informa22 tion and recommendations on security and 

23 resilience, including implications of cyber24 security risks to equipment and technology 

25 related to the electoral process’’; 


smartinez on DSK3GLQ082PROD with BILLS
3 

HR 584 RFS 

1 (ii) in paragraph (11), by striking 

2 ‘‘and’’ after the semicolon; 

3 (iii) by redesignating paragraph (12) 

4 as paragraph (14); and 

5 (iv) by inserting after paragraph (11) 

6 the following new paragraphs: 

7 ‘‘(12) review information relating to cybersecu8 rity risks that is gathered by State, local, and re9 gional fusion centers, and incorporate such informa10 tion, as appropriate, into the Department’s own in11 formation relating to cybersecurity risks; 

12 ‘‘(13) ensure the dissemination to State, local, 

13 and regional fusion centers of information relating 

14 to cybersecurity risks; and’’; 

15 (B) in subsection (c)(2)— 

16 (i) by redesignating subparagraphs 

17 (C) through (G) as subparagraphs (D) 

18 through (H), respectively; and 

19 (ii) by inserting after subparagraph 

20 (B) the following new subparagraph: 

21 ‘‘(C) The national cybersecurity and com22 munications integration center under section 

23 227.’’; 

24 (C) in subsection (d)— 


smartinez on DSK3GLQ082PROD with BILLS
4 

HR 584 RFS 

1 (i) in paragraph (3), by striking 

2 ‘‘and’’ after the semicolon; 

3 (ii) by redesignating paragraph (4) as 

4 paragraph (5); and 

5 (iii) by inserting after paragraph (3) 

6 the following new paragraph: 

7 ‘‘(4) assist, in coordination with the national 

8 cybersecurity and communications integration center 

9 under section 227, fusion centers in using informa10 tion relating to cybersecurity risks to develop a com11 prehensive and accurate threat picture; and’’; and 

12 (D) in subsection (j)— 

13 (i) by redesignating paragraphs (1) 

14 through (5) as paragraphs (2) through (6), 

15 respectively; and 

16 (ii) by inserting before paragraph (2), 

17 as so redesignated, the following new para18 graph: 

19 ‘‘(1) the term ‘cybersecurity risk’ has the mean20 ing given that term in section 227;’’; and 

21 (2) in section 227 (6 U.S.C. 148)— 

22 (A) in subsection (c)— 

23 (i) in paragraph (5)(B), by inserting 

24 ‘‘, including State and major urban area 


smartinez on DSK3GLQ082PROD with BILLS
5 

HR 584 RFS 

1 fusion centers, as appropriate’’ before the 

2 semicolon at the end; 

3 (ii) in paragraph (7), in the matter 

4 preceding subparagraph (A), by striking 

5 ‘‘information and recommendations’’ each 

6 place it appears and inserting ‘‘informa7 tion, recommendations, and best prac8 tices’’; and 

9 (iii) in paragraph (9), by inserting 

10 ‘‘best practices,’’ after ‘‘defensive meas11 ures,’’; and 

12 (B) in subsection (d)(1)(B)(ii), by insert13 ing ‘‘and State and major urban area fusion 

14 centers, as appropriate’’ before the semicolon at 

15 the end. 

16 SEC. 3. HOMELAND SECURITY GRANTS. 

17 Subsection (a) of section 2008 of the Homeland Secu18 rity Act of 2002 (6 U.S.C. 609) is amended— 

19 (1) by redesignating paragraphs (4) through 

20 (14) as paragraphs (5) through (15), respectively; 

21 and 

22 (2) by inserting after paragraph (3) the fol23 lowing new paragraph: 

24 ‘‘(4) enhancing cybersecurity, including pre25 paring for and responding to cybersecurity risks and 


smartinez on DSK3GLQ082PROD with BILLS
6 

HR 584 RFS 

1 incidents (as such terms are defined in section 227) 

2 and developing statewide cyber threat information 

3 analysis and dissemination activities;’’. 

4 SEC. 4. SENSE OF CONGRESS. 

5 It is the sense of Congress that to facilitate the timely 

6 dissemination to appropriate State, local, and private sec7 tor stakeholders of homeland security information related 

8 to cyber threats, the Secretary of Homeland Security 

9 should, to the greatest extent practicable, work to share 

10 actionable information related to cyber threats in an un11 classified form. 

Passed the House of Representatives January 31, 

2017. 

Attest: KAREN L. HAAS, 

Clerk. 


smartinez on DSK3GLQ082PROD with BILLS