I 
119TH CONGRESS 
1ST SESSION H. R. 5079 
To reauthorize the Cybersecurity Act of 2015, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
SEPTEMBER 2, 2025 
Mr. GARBARINO (for himself and Mr. MCCAUL) introduced the following bill; 
which was referred to the Committee on Homeland Security, and in addi-
tion to the Committees on Oversight and Government Reform, Intel-
ligence (Permanent Select), Energy and Commerce, Armed Services, and 
the Judiciary, for a period to be subsequently determined by the Speaker, 
in each case for consideration of such provisions as fall within the juris-
diction of the committee concerned 
A BILL 
To reauthorize the Cybersecurity Act of 2015, and for other 
purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Widespread Informa-
tion Management for the Welfare of Infrastructure and 
Government Act’’. 
VerDate Sep 11 2014 
01:35 Sep 03, 2025
Jkt 059200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H5079.IH
H5079
ssavage on LAPJG3WLY3PROD with BILLS
SEC. 2. REAUTHORIZATION OF CYBERSECURITY ACT OF 
2015. 
(a) IN GENERAL.—The Cybersecurity Act of 2015 (6 
U.S.C. 1501 et seq.; enacted as division N of the Consoli-
dated Appropriations Act, 2016; Public Law 114–113) is 
amended— 
(1) in section 102 (6 U.S.C. 1501; relating to 
definitions)— 
(A) by redesignating paragraphs (4), (5), 
(6), (7), (8), (9), (10), (11), (12), (13), (14), 
(15), (16), (17), and (18) as paragraphs (6), 
(7), (8), (9), (10), (11), (12), (13), (14), (15), 
(16), (17), (19), (20), and (21), respectively; 
(B) by inserting after paragraph (3) the 
following new paragraphs: 
‘‘(4) ARTIFICIAL
INTELLIGENCE.—The term 
‘artificial intelligence’ has the meaning given such 
term in section 5002 of the National Artificial Intel-
ligence Initiative Act of 2020 (15 U.S.C. 9401). 
‘‘(5) CRITICAL
INFRASTRUCTURE.—The term 
‘critical infrastructure’ has the meaning given such 
term in section 1016(e) of Public Law 107–56 (42 
U.S.C. 5195c(e)).’’; and 
(C) by inserting after paragraph (17), as 
so redesignated, the following new paragraph: 
VerDate Sep 11 2014 
01:35 Sep 03, 2025
Jkt 059200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H5079.IH
H5079
ssavage on LAPJG3WLY3PROD with BILLS
‘‘(18) SECTOR RISK MANAGEMENT AGENCY.— 
The term ‘Sector Risk Management Agency’ has the 
meaning given such term in section 2200 of the 
Homeland Security Act of 2002 (6 U.S.C. 650).’’; 
(2) in section 103 (6 U.S.C. 1502; relating to 
sharing of information by the Federal Govern-
ment)— 
(A) in subsection (a), in the matter pre-
ceding paragraph (1), by striking ‘‘develop and 
issue’’ and inserting ‘‘develop, issue, and, as ap-
propriate, update’’; 
(B) in subsection (b)— 
(i) in paragraph (1)— 
(I) in the matter preceding sub-
paragraph (A), by inserting ‘‘and, as 
appropriate, updated,’’ after ‘‘devel-
oped’’; 
(II) by amending subparagraph 
(A) to read as follows: 
‘‘(A) ensure the Federal Government main-
tains the capability to provide technical assist-
ance, on a voluntary basis, to non-Federal enti-
ties in utilizing cyber threat indicators and de-
fensive measures for cybersecurity purposes;’’; 
VerDate Sep 11 2014 
01:35 Sep 03, 2025
Jkt 059200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H5079.IH
H5079
ssavage on LAPJG3WLY3PROD with BILLS