(2) an employee of a private technology com-
pany with demonstrated expertise and work experi-
ence in cybersecurity or related disciplines may elect 
to be temporarily detailed to an element of the intel-
ligence community that has elected to receive the 
detailee. 
(b) MATTERS INCLUDED.—The report under sub-
section (a) shall include the following: 
(1) The feasibility of establishing the exchange 
program described in such subsection. 
(2) Identification of any challenges in estab-
lishing the exchange program. 
(3) An evaluation of the benefits to the intel-
ligence community that would result from the ex-
change program. 
SEC. 607. REVIEW OF INTELLIGENCE COMMUNITY PARTICI-
PATION 
IN 
VULNERABILITIES 
EQUITIES 
PROCESS. 
(a) REVIEW.—Not later than 180 days after the date 
of the enactment of this Act, the Inspector General of the 
Intelligence Community shall review, with respect to the 
3-year period preceding the date of the review, the roles 
and responsibilities of the elements of the intelligence com-
munity in the process of the Federal Government for de-
termining whether, when, how, and to whom information
about a vulnerability that is not publicly known will be 
shared with or released to a non-Federal entity or the pub-
lic. 
(b) REPORT.— 
(1) SUBMISSION.—Not later than 240 days 
after the date of the enactment of this Act, the In-
spector General shall submit to the congressional in-
telligence committees a report on the results of the 
review under subsection (a). 
(2) ELEMENTS.—The report under paragraph 
(1) shall include the following: 
(A) A description of the roles and respon-
sibilities of the elements of the intelligence com-
munity in the process of determining whether, 
when, how, and to whom information about a 
vulnerability that is not publicly known will be 
shared or released to a non-Federal entity or 
the public. 
(B) The criteria used by the Federal Gov-
ernment, including elements of the intelligence 
community, in making such determination. 
(C) With respect to the period covered by 
the review— 
(i) 
a 
summary 
of 
vulnerabilities 
known to elements of the intelligence com-
munity that were reviewed by the Federal 
Government pursuant to such process, in-
cluding— 
(I) the number of vulnerabilities 
known to the intelligence community 
that were reviewed; and 
(II) of such number of reviewed 
vulnerabilities, the number for which 
information was shared with or re-
leased to a non-Federal entity or the 
public; 
(ii) an assessment of whether there 
were any vulnerabilities known to elements 
of the intelligence community that were 
not reviewed pursuant to such process, and 
if so, the basis and rationale for not con-
ducting such a review; and 
(iii) a summary of the most signifi-
cant incidents in which a vulnerability 
known to the intelligence community, but 
not shared with or released to a non-Fed-
eral entity or the public, was exploited by 
an individual, an entity, or a foreign coun-
try in the course of carrying out a cyber 
intrusion.
(D) A description of any current mecha-
nisms for overseeing such process. 
(E) Recommendations to improve the effi-
ciency, effectiveness, accountability, and, con-
sistent with national security, transparency of 
such process. 
(F) Any other matters the Inspector Gen-
eral determines appropriate. 
(3) FORM.—The report may be submitted in 
classified form. 
(c) VULNERABILITY DEFINED.—In this section, the 
term ‘‘vulnerability’’ means, with respect to information 
technology, a design, configuration, or implementation 
weakness in a technology, product, system, service, or ap-
plication that can be exploited or triggered to cause unex-
pected or unintended behavior. 
SEC. 608. REVIEW OF INTELLIGENCE COMMUNITY WHIS-
TLEBLOWER MATTERS. 
(a) REVIEW OF WHISTLEBLOWER MATTERS.—The 
Inspector General of the Intelligence Community, in con-
sultation with the inspectors general for the Central Intel-
ligence Agency, the National Security Agency, the Na-
tional Geospatial-Intelligence Agency, the Defense Intel-
ligence Agency, and the National Reconnaissance Office, 
shall conduct a review of the authorities, policies, inves-
tigatory standards, and other practices and procedures re-
lating to intelligence community whistleblower matters, 
with respect to such inspectors general. 
(b) OBJECTIVE OF REVIEW.—The objective of the re-
view required under subsection (a) is to identify any dis-
crepancies, inconsistencies, or other issues, which frustrate 
the timely and effective reporting of intelligence commu-
nity whistleblower matters to appropriate inspectors gen-
eral and to the congressional intelligence committees, and 
the fair and expeditious investigation and resolution of 
such matters. 
(c) CONDUCT OF REVIEW.—The Inspector General of 
the Intelligence Community shall take such measures as 
the Inspector General determines necessary in order to en-
sure that the review required by subsection (a) is con-
ducted in an independent and objective fashion. 
(d) REPORT.—Not later than 270 days after the date 
of the enactment of this Act, the Inspector General of the 
Intelligence Community shall submit to the congressional 
intelligence committees a written report containing the re-
sults of the review required under subsection (a), along 
with recommendations to improve the timely and effective 
reporting of Intelligence Community whistleblower mat-
ters to inspectors general and to the congressional intel-
ligence committees and the fair and expeditious investiga-
tion and resolution of such matters. 
SEC. 609. SENSE OF CONGRESS ON NOTIFICATIONS OF CER-
TAIN DISCLOSURES OF CLASSIFIED INFOR-
MATION. 
(a) FINDINGS.—Congress finds that section 502 of 
the National Security Act of 1947 (50 U.S.C. 3092) re-
quires elements of the intelligence community to keep the 
congressional intelligence committees ‘‘fully and currently 
informed’’ about all ‘‘intelligence activities’’ of the United 
States, and to ‘‘furnish to the congressional intelligence 
committees any information or material concerning intel-
ligence activities * * * which is requested by either of the 
congressional intelligence committees in order to carry out 
its authorized responsibilities.’’. 
(b) SENSE OF CONGRESS.—It is the sense of Con-
gress that— 
(1) the authorities described in subsection (a), 
together with other intelligence community authori-
ties, obligate an element of the intelligence commu-
nity to submit to the congressional intelligence com-
mittees written notification, by not later than 7 days 
after becoming aware, that an individual in the exec-
utive branch has disclosed covered classified infor-
mation to an official of an adversary foreign govern-
ment using methods other than established intel-
ligence channels; and 
(2) each such notification should include— 
(A) the date and place of the disclosure of 
classified information covered by the notifica-
tion; 
(B) a description of such classified infor-
mation; 
(C) identification of the individual who 
made such disclosure and the individual to 
whom such disclosure was made; and 
(D) a summary of the circumstances of 
such disclosure. 
(c) DEFINITIONS.—In this section: 
(1) The term ‘‘adversary foreign government’’ 
means the government of any of the following for-
eign countries: 
(A) North Korea. 
(B) Iran. 
(C) China. 
(D) Russia. 
(E) Cuba. 
(2) The term ‘‘covered classified information’’ 
means classified information that was—
(A) collected by an element of the intel-
ligence community; or 
(B) provided by the intelligence service or 
military of a foreign country to an element of 
the intelligence community. 
(3) The term ‘‘established intelligence chan-
nels’’ means methods to exchange intelligence to co-
ordinate foreign intelligence relationships, as estab-
lished pursuant to law by the Director of National 
Intelligence, the Director of the Central Intelligence 
Agency, the Director of the National Security Agen-
cy, or other head of an element of the intelligence 
community. 
(4) The term ‘‘individual in the executive 
branch’’ means any officer or employee of the execu-
tive branch, including individuals— 
(A) occupying a position specified in article 
II of the Constitution; 
(B) appointed to a position by an indi-
vidual described in subparagraph (A); or 
(C) serving in the civil service or the senior 
executive service (or similar service for senior
executives of particular departments or agen-
cies). 
Passed the House of Representatives July 28, 2017. 
Attest: 
Clerk.
115TH CONGRESS 
1ST SESSION 
H. R. 3180 
AN ACT 
To authorize appropriations for fiscal year 2018 for 
intelligence and intelligence-related activities of 
the United States Government, the Community 
Management Account, and the Central Intel-
ligence Agency Retirement and Disability Sys-
tem, and for other purposes.