Federal Information Security Amendments Act of 2010

Bill: 111-hr-4900
Sponsor: Rep. Watson, Diane E. [D-CA-33]
Introduced: 2010-03-22 in the House
Policy area: Government Operations and Politics
Subjects: Administrative law and regulatory procedures
Computer security and identity theft
Computers and information technology
Executive Office of the President
Executive agency funding and structure
Government information and archives
Intelligence activities, surveillance, classified information
Internet and video services
Internet, web applications, social media
Performance measurement
Public contracts and procurement
Technology assessment

Summary:
action_date: 2010-03-22
text: 
Federal Information Security Amendments Act of 2010 - Revises provisions of federal law concerning government information security. Establishes: (1) in the Executive Office of the President the National Office for Cyberspace to serve as the principle office for coordinating an assured, reliable, secure, and survivable information infrastructure and related capabilities; and (2) within such Office the Federal Cybersecurity Practice Board, which shall be responsible for developing and periodically updating information security policies and procedures.
 
Requires the Director of such Office to: (1) develop and oversee the implementation of policies, standards, and guidelines on information security; and (2) require agencies to identify and provide protections commensurate with the risk and magnitude of harm resulting from unauthorized access, use, disclosure, disruption, modification, or destruction of information collected by or maintained for an agency or of information systems used by or operated for an agency. Makes the head of each agency responsible for providing appropriate information security protections.
 
Requires: (1) each agency to have an annual independent information security effectiveness evaluation; and (2) the Director of the Office of Management and Budget (OMB), on the basis of proposed standards developed by the National Institute of Standards and Technology (NIST), to promulgate information security standards pertaining to federal information systems. Allows an agency to employ more stringent standards. 
 
Requires the Director of the National Office for Cyberspace to: (1) ensure the operation of a central federal information security incident center; and (2) oversee the development and implementation of policies, standards, and guidance to cost effectively enhance agency information security. 
 
Prohibits an agency from entering into a contract or interagency agreement for information technology without including requirements to provide effective information security. Provides for vulnerability assessments of major systems.


Legislative actions:
action_date: 2010-05-20
text: Ordered to be Reported (Amended) by Voice Vote.
action_date: 2010-05-20
text: Committee Consideration and Mark-up Session Held.
action_date: 2010-05-05
text: Forwarded by Subcommittee to Full Committee (Amended) by Voice Vote .
action_date: 2010-05-05
text: Subcommittee Consideration and Mark-up Session Held.
action_date: 2010-05-05
text: Ordered to be Reported (Amended) by Voice Vote.
action_date: 2010-05-05
text: Committee Consideration and Mark-up Session Held.
action_date: 2010-05-04
text: Referred to the Subcommittee on Government Management, Organization, and Procurement.
action_date: 2010-03-22
text: Referred to the House Committee on Oversight and Government Reform.
action_date: 2010-03-22
text: Introduced in House
action_date: 2010-03-22
text: Introduced in House