IIB 
115TH CONGRESS 
1ST SESSION 
H. R. 584 
IN THE SENATE OF THE UNITED STATES 
FEBRUARY 1, 2017 
Received; read twice and referred to the Committee on Homeland Security and 
Governmental Affairs 
AN ACT 
To amend the Homeland Security Act of 2002 to enhance 
preparedness and response capabilities for cyber attacks, 
bolster the dissemination of homeland security informa-
tion related to cyber threats, and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
VerDate Sep 11 2014 
02:57 Feb 02, 2017
Jkt 069200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H584.RFS
H584
smartinez on DSK3GLQ082PROD with BILLS
HR 584 RFS 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Cyber Preparedness 
Act of 2017’’. 
SEC. 2. INFORMATION SHARING. 
Title II of the Homeland Security Act of 2002 is 
amended— 
(1) in section 210A (6 U.S.C. 124h)— 
(A) in subsection (b)— 
(i) in paragraph (10), by inserting be-
fore the semicolon at the end the following: 
‘‘, including, in coordination with the na-
tional cybersecurity and communications 
integration center under section 227, ac-
cess to timely technical assistance, risk 
management support, and incident re-
sponse capabilities with respect to cyber 
threat indicators, defensive measures, cy-
bersecurity risks, and incidents (as such 
terms are defined in such section), which 
may include attribution, mitigation, and 
remediation, and the provision of informa-
tion and recommendations on security and 
resilience, including implications of cyber-
security risks to equipment and technology 
related to the electoral process’’; 
VerDate Sep 11 2014 
02:57 Feb 02, 2017
Jkt 069200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H584.RFS
H584
smartinez on DSK3GLQ082PROD with BILLS
HR 584 RFS 
(ii) in paragraph (11), by striking 
‘‘and’’ after the semicolon; 
(iii) by redesignating paragraph (12) 
as paragraph (14); and 
(iv) by inserting after paragraph (11) 
the following new paragraphs: 
‘‘(12) review information relating to cybersecu-
rity risks that is gathered by State, local, and re-
gional fusion centers, and incorporate such informa-
tion, as appropriate, into the Department’s own in-
formation relating to cybersecurity risks; 
‘‘(13) ensure the dissemination to State, local, 
and regional fusion centers of information relating 
to cybersecurity risks; and’’; 
(B) in subsection (c)(2)— 
(i) by redesignating subparagraphs 
(C) through (G) as subparagraphs (D) 
through (H), respectively; and 
(ii) by inserting after subparagraph 
(B) the following new subparagraph: 
‘‘(C) The national cybersecurity and com-
munications integration center under section 
227.’’; 
(C) in subsection (d)— 
VerDate Sep 11 2014 
02:57 Feb 02, 2017
Jkt 069200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H584.RFS
H584
smartinez on DSK3GLQ082PROD with BILLS
HR 584 RFS 
(i) in paragraph (3), by striking 
‘‘and’’ after the semicolon; 
(ii) by redesignating paragraph (4) as 
paragraph (5); and 
(iii) by inserting after paragraph (3) 
the following new paragraph: 
‘‘(4) assist, in coordination with the national 
cybersecurity and communications integration center 
under section 227, fusion centers in using informa-
tion relating to cybersecurity risks to develop a com-
prehensive and accurate threat picture; and’’; and 
(D) in subsection (j)— 
(i) by redesignating paragraphs (1) 
through (5) as paragraphs (2) through (6), 
respectively; and 
(ii) by inserting before paragraph (2), 
as so redesignated, the following new para-
graph: 
‘‘(1) the term ‘cybersecurity risk’ has the mean-
ing given that term in section 227;’’; and 
(2) in section 227 (6 U.S.C. 148)— 
(A) in subsection (c)— 
(i) in paragraph (5)(B), by inserting 
‘‘, including State and major urban area 
VerDate Sep 11 2014 
02:57 Feb 02, 2017
Jkt 069200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H584.RFS
H584
smartinez on DSK3GLQ082PROD with BILLS
HR 584 RFS 
fusion centers, as appropriate’’ before the 
semicolon at the end; 
(ii) in paragraph (7), in the matter 
preceding subparagraph (A), by striking 
‘‘information and recommendations’’ each 
place it appears and inserting ‘‘informa-
tion, recommendations, and best prac-
tices’’; and 
(iii) in paragraph (9), by inserting 
‘‘best practices,’’ after ‘‘defensive meas-
ures,’’; and 
(B) in subsection (d)(1)(B)(ii), by insert-
ing ‘‘and State and major urban area fusion 
centers, as appropriate’’ before the semicolon at 
the end. 
SEC. 3. HOMELAND SECURITY GRANTS. 
Subsection (a) of section 2008 of the Homeland Secu-
rity Act of 2002 (6 U.S.C. 609) is amended— 
(1) by redesignating paragraphs (4) through 
(14) as paragraphs (5) through (15), respectively; 
and 
(2) by inserting after paragraph (3) the fol-
lowing new paragraph: 
‘‘(4) enhancing cybersecurity, including pre-
paring for and responding to cybersecurity risks and 
VerDate Sep 11 2014 
02:57 Feb 02, 2017
Jkt 069200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H584.RFS
H584
smartinez on DSK3GLQ082PROD with BILLS
HR 584 RFS 
incidents (as such terms are defined in section 227) 
and developing statewide cyber threat information 
analysis and dissemination activities;’’. 
SEC. 4. SENSE OF CONGRESS. 
It is the sense of Congress that to facilitate the timely 
dissemination to appropriate State, local, and private sec-
tor stakeholders of homeland security information related 
to cyber threats, the Secretary of Homeland Security 
should, to the greatest extent practicable, work to share 
actionable information related to cyber threats in an un-
classified form. 
Passed the House of Representatives January 31, 
2017. 
Attest: 
KAREN L. HAAS, 
Clerk. 
VerDate Sep 11 2014 
02:57 Feb 02, 2017
Jkt 069200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H584.RFS
H584
smartinez on DSK3GLQ082PROD with BILLS