Title: Cyber Attack Standards of Measurement Study
Policy area: Armed Forces and National Security

Summary:
Cyber Attack Standards of Measurement Study
This bill requires the Office of the Director of National Intelligence (ODNI) to carry out a study to determine appropriate standards to: (1) measure the damage of cyber incidents to determine the response to such incidents; and (2) quantify the damage caused to affected computers, systems, and devices.
The ODNI must report to Congress regarding the findings of such study.

[Congressional Bills 115th Congress]
[From the U.S. Government Publishing Office]
[H.R. 1030 Introduced in House (IH)]

<DOC>






115th CONGRESS
  1st Session
                                H. R. 1030

 To direct the Director of National Intelligence to conduct a study on 
                 cyber attack standards of measurement.


_______________________________________________________________________


                    IN THE HOUSE OF REPRESENTATIVES

                           February 14, 2017

 Mr. Wilson of South Carolina introduced the following bill; which was 
       referred to the Permanent Select Committee on Intelligence

_______________________________________________________________________

                                 A BILL


 
 To direct the Director of National Intelligence to conduct a study on 
                 cyber attack standards of measurement.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Cyber Attack Standards of 
Measurement Study''.

SEC. 2. CYBER ATTACK STANDARDS OF MEASUREMENT STUDY.

    (a) Study Required.--The Director of National Intelligence, in 
consultation with the Secretary of Homeland Security, the Director of 
the Federal Bureau of Investigation, and the Secretary of Defense, 
shall carry out a study to determine appropriate standards that--
            (1) can be used to measure the damage of cyber incidents 
        for the purposes of determining the response to such incidents; 
        and
            (2) include a method for quantifying the damage caused to 
        affected computers, systems, and devices.
    (b) Reports to Congress.--
            (1) Preliminary findings.--Not later than 180 days after 
        the date of the enactment of this Act, the Director of National 
        Intelligence shall provide to the Committee on Armed Services, 
        the Committee on Homeland Security and Governmental Affairs, 
        and the Select Committee on Intelligence of the Senate and the 
        Committee on Armed Services, the Committee on Homeland 
        Security, and the Permanent Select Committee on Intelligence of 
        the House of Representatives the initial findings of the study 
        required under subsection (a).
            (2) Report.--Not later than 360 days after the date of the 
        enactment of this Act, the Director of National Intelligence 
        shall submit to the Committee on Armed Services, the Committee 
        on Homeland Security and Governmental Affairs, and the Select 
        Committee on Intelligence of the Senate and the Committee on 
        Armed Services, the Committee on Homeland Security, and the 
        Permanent Select Committee on Intelligence of the House of 
        Representatives a report containing the complete findings of 
        such study.
            (3) Form of report.--The report required by paragraph (2) 
        shall be submitted in unclassified form, but may contain a 
        classified annex.
                                 <all>