Title: STB Information Security Improvement Act
Policy area: Transportation and Public Works

Summary:
STB Information Security Improvement Act
This bill requires the Surface Transportation Board to develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002 concerning information security.

[Congressional Bills 115th Congress]
[From the U.S. Government Publishing Office]
[H.R. 4921 Introduced in House (IH)]

<DOC>






115th CONGRESS
  2d Session
                                H. R. 4921

  To require the Surface Board of Transportation to implement certain 
     recommendations of the Inspector General of the Department of 
                            Transportation.


_______________________________________________________________________


                    IN THE HOUSE OF REPRESENTATIVES

                            February 5, 2018

Mr. Mitchell (for himself and Mr. Gottheimer) introduced the following 
    bill; which was referred to the Committee on Transportation and 
                             Infrastructure

_______________________________________________________________________

                                 A BILL


 
  To require the Surface Board of Transportation to implement certain 
     recommendations of the Inspector General of the Department of 
                            Transportation.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``STB Information Security Improvement 
Act''.

SEC. 2. REQUIREMENTS.

    (a) In General.--The Surface Transportation Board (in this section 
referred to as the ``STB'') shall develop a timeline and plan to 
implement the recommendations of the Inspector General of the 
Department of Transportation in Report No. FI2018002, including 
improvements--
            (1) to identify controls, including risk management, 
        weakness remediation, and security authorization;
            (2) to protect controls, including configuration 
        management, user identity management, and security training;
            (3) to respond controls, including incident handling and 
        reporting;
            (4) to recover controls for contingency planning; and
            (5) any additional tools that will improve the 
        implementation of the recommendations.
    (b) Implementation.--
            (1) In general.--Not later than 180 days after the date of 
        enactment of this Act, the STB shall submit the plan and 
        timeline developed under subsection (a) to the Committee on 
        Transportation and Infrastructure of the House of 
        Representatives and the Committee on Commerce of the Senate.
            (2) Report.--The STB shall report annually to such 
        Committees on the progress on implementation of the 
        recommendations until the implementation is complete.
            (3) Plan implementation.--The STB shall designate an 
        individual to implement the plan developed under subsection 
        (a).

SEC. 3. NO ADDITIONAL FUNDS AUTHORIZED.

    No additional funds are authorized to carry out the requirements of 
this Act. Such requirements shall be carried out using amounts 
otherwise authorized.
                                 <all>