I 
113TH CONGRESS 
1ST SESSION H. R. 3032 
To amend chapter 35 of title 44, United States Code, to create the National 
Office for Cyberspace, to revise requirements relating to Federal informa-
tion security, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
AUGUST 2, 2013 
Mr. LANGEVIN (for himself, Mr. CASTRO of Texas, Mr. RUPPERSBERGER, Ms. 
LORETTA SANCHEZ of California, Mr. POCAN, Mr. ANDREWS, Mr. LAR-
SEN of Washington, and Mrs. DAVIS of California) introduced the fol-
lowing bill; which was referred to the Committee on Oversight and Gov-
ernment Reform, and in addition to the Committee on Homeland Secu-
rity, for a period to be subsequently determined by the Speaker, in each 
case for consideration of such provisions as fall within the jurisdiction of 
the committee concerned 
A BILL 
To amend chapter 35 of title 44, United States Code, to 
create the National Office for Cyberspace, to revise re-
quirements relating to Federal information security, and 
for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
(a) SHORT TITLE.—This Act may be cited as the 
‘‘Executive Cyberspace Coordination Act of 2013’’. 
VerDate Mar 15 2010 
00:48 Aug 10, 2013
Jkt 029200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H3032.IH
H3032
jbell on DSK7SPTVN1PROD with BILLS
(b) TABLE OF CONTENTS.—The table of contents for 
this Act is as follows: 
Sec. 1. Short title. 
TITLE I—FEDERAL INFORMATION SECURITY AMENDMENTS 
Sec. 101. Coordination of Federal information policy. 
Sec. 102. Information security acquisition requirements. 
Sec. 103. Technical and conforming amendments. 
Sec. 104. Effective date. 
TITLE II—FEDERAL CHIEF TECHNOLOGY OFFICER 
Sec. 201. Office of the Chief Technology Officer. 
TITLE III—STRENGTHENING CYBERSECURITY FOR CRITICAL 
INFRASTRUCTURE 
Sec. 301. Definitions. 
Sec. 302. Authority of Secretary. 
TITLE 
I—FEDERAL 
INFORMA-
TION 
SECURITY 
AMEND-
MENTS 
SEC. 101. COORDINATION OF FEDERAL INFORMATION POL-
ICY. 
Chapter 35 of title 44, United States Code, is amend-
ed by striking subchapters II and III and inserting the 
following: 
‘‘SUBCHAPTER II—INFORMATION SECURITY 
‘‘§ 3551. Purposes 
‘‘The purposes of this subchapter are to— 
‘‘(1) provide a comprehensive framework for en-
suring the effectiveness of information security con-
trols over information resources that support Fed-
eral operations and assets; 
VerDate Mar 15 2010 
00:48 Aug 10, 2013
Jkt 029200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H3032.IH
H3032
jbell on DSK7SPTVN1PROD with BILLS
‘‘(2) recognize the highly networked nature of 
the current Federal computing environment and pro-
vide effective Governmentwide management and 
oversight of the related information security risks, 
including coordination of information security efforts 
throughout the civilian, national security, and law 
enforcement communities; 
‘‘(3) provide for development and maintenance 
of minimum controls required to protect Federal in-
formation and information infrastructure; 
‘‘(4) provide a mechanism for improved over-
sight of Federal agency information security pro-
grams; 
‘‘(5) acknowledge that commercially developed 
information security products offer advanced, dy-
namic, robust, and effective information security so-
lutions, reflecting market solutions for the protection 
of critical information infrastructures important to 
the national defense and economic security of the 
Nation that are designed, built, and operated by the 
private sector; and 
‘‘(6) recognize that the selection of specific 
technical hardware and software information secu-
rity solutions should be left to individual agencies 
from among commercially developed products. 
VerDate Mar 15 2010 
00:48 Aug 10, 2013
Jkt 029200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H3032.IH
H3032
jbell on DSK7SPTVN1PROD with BILLS
‘‘§ 3552. Definitions 
‘‘(a) SECTION 3502 DEFINITIONS.—Except as pro-
vided under subsection (b), the definitions under section 
3502 shall apply to this subchapter. 
‘‘(b) ADDITIONAL DEFINITIONS.—In this subchapter: 
‘‘(1) The term ‘adequate security’ means secu-
rity that complies with the regulations promulgated 
under section 3554 and the standards promulgated 
under section 3558. 
‘‘(2) The term ‘incident’ means an occurrence 
that actually or potentially jeopardizes the confiden-
tiality, integrity, or availability of an information 
system, information infrastructure, or the informa-
tion the system processes, stores, or transmits or 
that constitutes a violation or imminent threat of 
violation of security policies, security procedures, or 
acceptable use policies. 
‘‘(3) The term ‘information infrastructure’ 
means the underlying framework that information 
systems and assets rely on in processing, storing, or 
transmitting information electronically. 
‘‘(4) The term ‘information security’ means 
protecting information and information infrastruc-
ture from unauthorized access, use, disclosure, dis-
ruption, modification, or destruction in order to pro-
vide— 
VerDate Mar 15 2010 
00:48 Aug 10, 2013
Jkt 029200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H3032.IH
H3032
jbell on DSK7SPTVN1PROD with BILLS