I 

118TH CONGRESS 

1ST SESSION H. R. 5786 

To establish in the National Nuclear Security Administration a Cybersecurity 

Risk Inventory, Assessment, and Mitigation Working Group. 

IN THE HOUSE OF REPRESENTATIVES 

SEPTEMBER 28, 2023 

Mr. CARBAJAL (for himself, Mr. BACON, and Mr. GALLAGHER) introduced the 

following bill; which was referred to the Committee on Armed Services 

A BILL 

To establish in the National Nuclear Security Administration 

a Cybersecurity Risk Inventory, Assessment, and Mitigation Working Group. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. CYBERSECURITY RISK INVENTORY, ASSESS4 MENT, AND MITIGATION WORKING GROUP. 

5 Subtitle A of title XXXII of the National Defense Au6 thorization Act for Fiscal Year 2000 (Public Law 106– 

7 65) is amended by adding at the end the following new 

8 section: 


kjohnson on DSK7ZCZBW3PROD with $$_JOB
2 

•HR 5786 IH

1 ‘‘SEC. 3222. CYBERSECURITY RISK INVENTORY, ASSESS2 MENT, AND MITIGATION WORKING GROUP. 

3 ‘‘(a) ESTABLISHMENT.—There is in the Administra4 tion a working group, to be known as the ‘Cybersecurity 

5 Risk Inventory, Assessment, and Mitigation Working 

6 Group’. 

7 ‘‘(b) MEMBERSHIP.—Members of the working group 

8 shall include the Deputy Administrator for Defense Pro9 grams, the Associate Administrator for Information Man10 agement and Chief Information Officer, and staff from 

11 other offices as determined appropriate by the Deputy Ad12 ministrator and Associate Administrator. 

13 ‘‘(c) COMPREHENSIVE STRATEGY.—The working 

14 group shall prepare a comprehensive strategy for 

15 inventorying the range of National Nuclear Security Ad16 ministration systems that are potentially at risk in the 

17 operational technology and nuclear weapons information 

18 technology environments, assessing the systems at risk, 

19 and implementing risk mitigation actions. Such strategy 

20 shall incorporate key elements of effective cybersecurity 

21 risk management strategies, as identified by the Govern22 ment Accountability Office, including the specification 

23 of— 

24 ‘‘(1) goals, objectives, activities, and perform25 ance measures; 


kjohnson on DSK7ZCZBW3PROD with $$_JOB
3 

•HR 5786 IH

1 ‘‘(2) organizational roles, responsibilities, and 

2 coordination; 

3 ‘‘(3) necessary resources needed to implement 

4 the strategy over the next ten years; and 

5 ‘‘(4) detailed milestones and schedules for com6 pletion of tasks. 

7 ‘‘(d) SUBMISSION TO CONGRESS.— 

8 ‘‘(1) BRIEFING.—Not later than 120 days after 

9 the date of the enactment of this Act, the members 

10 of the working group shall provide to the congres11 sional defense committees a briefing on the plan of 

12 the working group plan to develop the strategy re13 quired under subsection (c). 

14 ‘‘(2) SUBMISSION OF STRATEGY.—Not later 

15 than April 1, 2025, the working group shall submit 

16 the congressional defense committees a copy of the 

17 completed strategy. 

18 ‘‘(e) TERMINATION.—The working group shall termi19 nate on the date that is five years after the date of the 

20 enactment of this section.’’. 

Æ 


kjohnson on DSK7ZCZBW3PROD with $$_JOB