I 
114TH CONGRESS 
2D SESSION 
H. R. 6473 
To express the sense of Congress that information security is critical to 
the economic security of the United States and to direct the Assistant 
Secretary of Commerce for Communications and Information to submit 
to Congress a report on the costs of information security. 
IN THE HOUSE OF REPRESENTATIVES 
DECEMBER 7, 2016 
Mr. UPTON introduced the following bill; which was referred to the Committee 
on Energy and Commerce 
A BILL 
To express the sense of Congress that information security 
is critical to the economic security of the United States 
and to direct the Assistant Secretary of Commerce for 
Communications and Information to submit to Congress 
a report on the costs of information security. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SENSE OF CONGRESS ON INFORMATION SECU-
RITY. 
It is the sense of Congress that— 
VerDate Sep 11 2014 
02:31 Dec 10, 2016
Jkt 069200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H6473.IH
H6473
smartinez on DSK3GLQ082PROD with BILLS
(1) information is vital to all industries of the 
United States for domestic and international com-
merce; 
(2) the modern United States economy relies 
increasingly on digital information systems; and 
(3) information security is therefore critical to 
the economic security of the United States and 
should be protected in a manner that continues to 
promote economic growth. 
SEC. 2. NTIA REPORT ON COSTS OF INFORMATION SECU-
RITY TO UNITED STATES ECONOMY. 
(a) IN GENERAL.—Not later than 2 years after the 
date of the enactment of this Act, the Assistant Secretary 
of Commerce for Communications and Information shall 
submit to Congress a report on the direct and indirect 
costs of information security to the economy of the United 
States. In preparing such report, the Assistant Secretary 
shall use existing commercial indices and other publicly 
available information. 
(b) REQUIRED CONSIDERATIONS.—The report re-
quired by subsection (a) shall contain an estimate of the 
costs described in such subsection. In preparing such esti-
mate, the Assistant Secretary shall consider costs that in-
clude the cost of— 
(1) keeping information systems secure; 
VerDate Sep 11 2014 
02:31 Dec 10, 2016
Jkt 069200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H6473.IH
H6473
smartinez on DSK3GLQ082PROD with BILLS
(2) actions necessary to mitigate compromise of 
information systems; 
(3) measures used to hedge against such com-
promise; and 
(4) economic loss or harm caused by such com-
promise. 
SEC. 3. DEFINITIONS. 
In this Act: 
(1) INFORMATION SECURITY.—The term ‘‘infor-
mation security’’ means protecting information and 
information systems from unauthorized access, use, 
disclosure, disruption, modification, or destruction in 
order to provide— 
(A) 
integrity, 
which 
means 
guarding 
against improper information modification or 
destruction, and includes ensuring information 
nonrepudiation and authenticity; 
(B) confidentiality, which means pre-
serving authorized restrictions on access and 
disclosure, including means for protecting per-
sonal privacy and proprietary information; 
(C) availability, which means ensuring 
timely and reliable access to and use of infor-
mation; and 
VerDate Sep 11 2014 
02:31 Dec 10, 2016
Jkt 069200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H6473.IH
H6473
smartinez on DSK3GLQ082PROD with BILLS
(D) authentication, which means utilizing 
digital credentials to assure the identity of 
users and validate their access. 
(2) INFORMATION SYSTEM.—The term ‘‘infor-
mation system’’ means any equipment or inter-
connected system or subsystems of equipment that is 
used in the automatic acquisition, storage, manipula-
tion, management, movement, control, display, 
switching, interchange, transmission, or reception of 
data or information, and includes— 
(A) networks and computers and other 
network-enabled devices; 
(B) ancillary equipment; 
(C) software, firmware, and related proce-
dures; 
(D) services, including support services; 
and 
(E) related resources. 
Æ 
VerDate Sep 11 2014 
02:31 Dec 10, 2016
Jkt 069200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6301
E:\BILLS\H6473.IH
H6473
smartinez on DSK3GLQ082PROD with BILLS