II 

Calendar No. 587 

117TH CONGRESS 

2D SESSION S. 4000 

[Report No. 117–228] 

To require the establishment of cybersecurity information sharing agreements 

between the Department of Homeland Security and Congress, and for 

other purposes. 

IN THE SENATE OF THE UNITED STATES 

APRIL 5, 2022 

Mr. PORTMAN (for himself, Ms. KLOBUCHAR, Mr. BLUNT, and Mr. PETERS) 

introduced the following bill; which was read twice and referred to the 

Committee on Homeland Security and Governmental Affairs 

DECEMBER 5, 2022 

Reported by Mr. PETERS, with an amendment 

[Strike out all after the enacting clause and insert the part printed in italic] 

A BILL 

To require the establishment of cybersecurity information 

sharing agreements between the Department of Homeland Security and Congress, and for other purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 


pbinns on DSKJLVW7X2PROD with $$_JOB
2 

•S 4000 RS

1 SECTION 1. SHORT TITLE. 

2 This Act may be cited as the ‘‘Intragovernmental Cy3 bersecurity Information Sharing Act’’. 

4 SEC. 2. REQUIREMENT FOR INFORMATION SHARING 

5 AGREEMENTS. 

6 (a) IN GENERAL.—Not later than 180 days after the 

7 date of enactment of this Act, the Secretary of Homeland 

8 Security, in consultation with other appropriate Executive 

9 agencies (as defined in section 105 of title 5, United 

10 States Code, including the Executive Office of the Presi11 dent) and officials, shall enter into 1 or more cybersecurity 

12 information sharing agreements with the Sergeant at 

13 Arms and Doorkeeper of the Senate and the Chief Admin14 istrative Officer of the House of Representatives to ensure 

15 robust collaboration between the executive branch and 

16 Congress on Federal cybersecurity. 

17 (b) ELEMENTS.—The parties to a cybersecurity in18 formation sharing agreement under subsection (a) shall 

19 jointly develop such elements of the agreement as the par20 ties find appropriate, which may include— 

21 (1) direct and timely sharing of technical indi22 cators and contextual information on cyber threats 

23 and vulnerabilities; 

24 (2) direct and timely sharing of classified and 

25 unclassified reports on cyber threats and activities; 

26 and 


pbinns on DSKJLVW7X2PROD with $$_JOB
3 

•S 4000 RS

1 (3) seating of cybersecurity personnel of the 

2 Senate or the House of Representatives at cyberse3 curity operations centers. 

4 (c) BRIEFING TO CONGRESS.—Not later than 210 

5 days after the date of enactment of this Act, and periodi6 cally thereafter, the Secretary of Homeland Security shall 

7 brief the Committee on Homeland Security and Govern8 mental Affairs and the Committee on Rules and Adminis9 tration of the Senate and the Committee on Homeland Se10 curity and the Committee on House Administration of the 

11 House of Representatives on the status of the implementa12 tion of the agreements required under subsection (a). 

13 SECTION 1. SHORT TITLE. 

14 This Act may be cited as the ‘‘Intragovernmental Cy15 bersecurity Information Sharing Act’’. 

16 SEC. 2. REQUIREMENT FOR INFORMATION SHARING 

17 AGREEMENTS. 

18 (a) REQUIREMENT.— 

19 (1) IN GENERAL.—Not later than 180 days after 

20 the date of enactment of this Act, the President, the 

21 Sergeant at Arms and Doorkeeper of the Senate, and 

22 the Chief Administrative Officer of the House of Rep23 resentatives shall enter into 1 or more cybersecurity 

24 information sharing agreements to enhance collabora25 tion between the executive branch and Congress on 


pbinns on DSKJLVW7X2PROD with $$_JOB
4 

•S 4000 RS

1 implementing cybersecurity measures to improve the 

2 protection of legislative branch information tech3 nology. 

4 (2) DELEGATION.—If the President delegates the 

5 duties under paragraph (1), the designee of the Presi6 dent shall coordinate with appropriate Executive 

7 agencies (as defined in section 105 of title 5, United 

8 States Code, including the Executive Office of the 

9 President) and appropriate officers in the executive 

10 branch in entering any agreement described in para11 graph (1). 

12 (b) ELEMENTS.—The parties to a cybersecurity infor13 mation sharing agreement under subsection (a) shall jointly 

14 develop such elements of the agreement as the parties find 

15 appropriate, which may include— 

16 (1) direct and timely sharing of technical indica17 tors and contextual information on cyber threats and 

18 vulnerabilities, and the means for such sharing; 

19 (2) direct and timely sharing of classified and 

20 unclassified reports on cyber threats and activities; 

21 (3) seating of cybersecurity personnel of the Of22 fice of the Sergeant at Arms and Doorkeeper of the 

23 Senate or the Office of the Chief Administrative Offi24 cer of the House of Representatives at cybersecurity 

25 operations centers; and 


pbinns on DSKJLVW7X2PROD with $$_JOB
5 

•S 4000 RS

1 (4) any other elements the parties find appro2 priate. 

3 (c) BRIEFING TO CONGRESS.—Not later than 210 days 

4 after the date of enactment of this Act, and periodically 

5 thereafter, the President shall brief the Committee on Home6 land Security and Governmental Affairs and the Committee 

7 on Rules and Administration of the Senate and the Com8 mittee on Homeland Security and the Committee on House 

9 Administration of the House of Representatives on the sta10 tus of the implementation of the agreements required under 

11 subsection (a). 


pbinns on DSKJLVW7X2PROD with $$_JOB
Calendar No. 587 

117TH CONGRESS 

2D SESSION S. 4000 

[Report No. 117–228] 

A BILL 

To require the establishment of cybersecurity inforfor other purposes. ment of Homeland Security and Congress, and mation sharing agreements between the DepartDECEMBER 5, 2022 

Reported with an amendment 


pbinns on DSKJLVW7X2PROD with $$_JOB