IB 
Union Calendar No. 151 
116TH CONGRESS 
1ST SESSION H. R. 3710 
[Report No. 116–193] 
To amend the Homeland Security Act of 2002 to provide for the remediation 
of cybersecurity vulnerabilities, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
JULY 11, 2019 
Ms. JACKSON LEE (for herself, Mr. PAYNE, and Mr. LANGEVIN) introduced 
the following bill; which was referred to the Committee on Homeland Security 
AUGUST 30, 2019 
Committed to the Committee of the Whole House on the State of the Union 
and ordered to be printed 
VerDate Sep 11 2014 
21:31 Aug 30, 2019
Jkt 089200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6652
E:\BILLS\H3710.RH
H3710
kjohnson on DSK79L0C42 with BILLS
software or hardware is no longer supported by a ven-
dor.’’. 
SEC. 3. REPORT ON CYBERSECURITY VULNERABILITIES. 
(a) REPORT.—Not later than one year after the date 
of the enactment of this Act, the Director of the Cyberse-
curity and Infrastructure Security Agency of the Depart-
ment of Homeland Security shall submit to the Committee 
on Homeland Security of the House of Representatives 
and the Committee on Homeland Security and Govern-
mental Affairs of the Senate a report on how the Agency 
carries out subsection (m) of section 2209 of the Home-
land Security Act of 2002 to coordinate vulnerability dis-
closures, 
including 
disclosures 
of 
cybersecurity 
vulnerabilities (as such term is defined in such section), 
and subsection (n) of such section (as added by section 
2) to disseminate actionable protocols to mitigate cyberse-
curity vulnerabilities, that includes the following: 
(1) A description of the policies and procedures 
relating to the coordination of vulnerability disclo-
sures. 
(2) A description of the levels of activity in fur-
therance of such subsections (m) and (n) of such 
section 2209. 
(3) Any plans to make further improvements to 
how information provided pursuant to such sub-
VerDate Sep 11 2014 
21:31 Aug 30, 2019
Jkt 089200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H3710.RH
H3710
kjohnson on DSK79L0C42 with BILLS
sections can be shared (as such term is defined in 
such section 2209) between the Department and in-
dustry and other stakeholders. 
(4) Any available information on the degree to 
which such information was acted upon by industry 
and other stakeholders. 
(5) A description of how privacy and civil lib-
erties are preserved in the collection, retention, use, 
and sharing of vulnerability disclosures. 
(b) FORM.—The report required under subsection (b) 
shall be submitted in unclassified form but may contain 
a classified annex. 
SEC. 4. COMPETITION RELATING TO CYBERSECURITY 
VULNERABILITIES. 
The Under Secretary for Science and Technology of 
the Department of Homeland Security, in consultation 
with the Director of the Cybersecurity and Infrastructure 
Security Agency of the Department, may establish an in-
centive-based program that allows industry, individuals, 
academia, and others to compete in providing remediation 
solutions for cybersecurity vulnerabilities (as such term is 
defined in section 2209 of the Homeland Security Act of 
2002, as amended by section 2). 
VerDate Sep 11 2014 
21:31 Aug 30, 2019
Jkt 089200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H3710.RH
H3710
kjohnson on DSK79L0C42 with BILLS
VerDate Sep 11 2014 
21:31 Aug 30, 2019
Jkt 089200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H3710.RH
H3710
kjohnson on DSK79L0C42 with BILLS
Union Calendar No. 151 
116TH CONGRESS 
1ST SESSION 
H. R. 3710 
[Report No. 116–193] 
A BILL 
To amend the Homeland Security Act of 2002 to 
provide for the remediation of cybersecurity 
vulnerabilities, and for other purposes. 
AUGUST 30, 2019 
Committed to the Committee of the Whole House on the 
State of the Union and ordered to be printed 
VerDate Sep 11 2014 
21:31 Aug 30, 2019
Jkt 089200
PO 00000
Frm 00008
Fmt 6651
Sfmt 6651
E:\BILLS\H3710.RH
H3710
kjohnson on DSK79L0C42 with BILLS