Department of Homeland Security Cybersecurity Strategy Act of 2015

Bill: 114-hr-3510
Sponsor: Rep. Richmond, Cedric L. [D-LA-2]
Introduced: 2015-09-15 in the House
Policy area: Immigration
Subjects: Armed Forces and National Security
Computer security and identity theft
Congressional oversight
Department of Homeland Security
Executive agency funding and structure
Government studies and investigations
Homeland security
Intergovernmental relations
International organizations and cooperation
Research administration and funding
Research and development
State and local government operations

Summary:
action_date: 2015-09-15
text: 

Department of Homeland Security Cybersecurity Strategy Act of 2015

 
This bill requires the Department of Homeland Security (DHS) to develop a cybersecurity strategy that includes: (1) strategic and operational goals and priorities to execute the full range of DHS's cybersecurity responsibilities; and (2) information on programs, policies, and activities in furtherance of the cybersecurity functions of the national cybersecurity and communications integration center (NCCIC), investigations capabilities, research and development, and engagement with international partners.
 
The strategy must include the roles and responsibilities of DHS components and offices. 
 
Congressional authorization is required for any reorganization of such components or offices.
 
For purposes of the NCCIC, the bill redefines &quot;incident&quot; to include occurrences that actually or imminently jeopardize, without lawful authority, an information system, thereby replacing a standard that currently includes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.

action_date: 2015-10-06
text: 

Department of Homeland Security Cybersecurity Strategy Act of 2015

 
(Sec. 2) This bill amends the Homeland Security Act of 2002 to require the Department of Homeland Security (DHS) to develop a cybersecurity strategy that includes: (1) strategic and operational goals and priorities to execute the full range of DHS's cybersecurity responsibilities; and (2) information on programs, policies, and activities in furtherance of the cybersecurity functions of the national cybersecurity and communications integration center (NCCIC), investigations capabilities, research and development, and engagement with international partners.
 
In developing the strategy, DHS must consider: (1) the cybersecurity strategy published in November 2011 for governmental and nongovernmental entities involved in homeland security, including federal, state, local, and tribal government officials, private sector representatives, academics, and other policy experts; (2) the Department of Homeland Security Fiscal Years 2014-2018 Strategic Plan; and (3) the most recent Quadrennial Homeland Security Review.
 
The strategy must include the roles and responsibilities of DHS components and offices.
 
DHS must also issue an implementation plan that includes strategic objectives, projected timelines, costs for tasks, and evaluation metrics. 
 
DHS must submit the strategy and implementation plan to Congress. Congressional authorization is required for any reorganization of DHS components or offices.
 
The bill prohibits the strategy from being construed as permitting DHS to engage in monitoring, surveillance, exfiltration, or other collection activities to track an individual's personally identifiable information.
 
For purposes of the NCCIC, the bill redefines &quot;incident&quot; to include occurrences that actually or imminently jeopardize, without lawful authority, an information system, thereby replacing a standard that currently includes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.

action_date: 2015-10-06
text: 

Department of Homeland Security Cybersecurity Strategy Act of 2015

 
(Sec. 2) This bill amends the Homeland Security Act of 2002 to require the Department of Homeland Security (DHS) to develop a cybersecurity strategy that includes: (1) strategic and operational goals and priorities to execute the full range of DHS's cybersecurity responsibilities; and (2) information on programs, policies, and activities in furtherance of the cybersecurity functions of the national cybersecurity and communications integration center (NCCIC), investigations capabilities, research and development, and engagement with international partners.
 
In developing the strategy, DHS must consider: (1) the cybersecurity strategy published in November 2011 for governmental and nongovernmental entities involved in homeland security, including federal, state, local, and tribal government officials, private sector representatives, academics, and other policy experts; (2) the Department of Homeland Security Fiscal Years 2014-2018 Strategic Plan; and (3) the most recent Quadrennial Homeland Security Review.
 
The strategy must include the roles and responsibilities of DHS components and offices.
 
DHS must also issue an implementation plan that includes strategic objectives, projected timelines, costs for tasks, and evaluation metrics. 
 
DHS must submit the strategy and implementation plan to Congress. 
 
The bill prohibits the strategy from being construed as permitting DHS to engage in monitoring, surveillance, exfiltration, or other collection activities to track an individual's personally identifiable information.
 
The bill also prohibits DHS from changing the location or reporting structure of the National Protection and Programs Directorate without prior authorization from Congress.
 
For purposes of the NCCIC, the bill redefines "incident" to include occurrences that actually or imminently jeopardize, without lawful authority, an information system, thereby replacing a standard that currently includes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.


Legislative actions:
action_date: 2015-10-07
text: Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
action_date: 2015-10-06
text: Motion to reconsider laid on the table Agreed to without objection.
action_date: 2015-10-06
text: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H6813-6814)
action_date: 2015-10-06
text: Passed/agreed to in House: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote.(text: CR H6813-6814)
action_date: 2015-10-06
text: DEBATE - The House proceeded with forty minutes of debate on H.R. 3510.
action_date: 2015-10-06
text: Considered under suspension of the rules. (consideration: CR H6813-6815)
action_date: 2015-10-06
text: Mr. Ratcliffe moved to suspend the rules and pass the bill, as amended.
action_date: 2015-10-06
text: Placed on the Union Calendar, Calendar No. 216.
action_date: 2015-10-06
text: Reported (Amended) by the Committee on Homeland Security. H. Rept. 114-284.
action_date: 2015-10-06
text: Reported (Amended) by the Committee on Homeland Security. H. Rept. 114-284.
action_date: 2015-09-30
text: Ordered to be Reported (Amended) by Voice Vote.
action_date: 2015-09-30
text: Committee Consideration and Mark-up Session Held.
action_date: 2015-09-17
text: Forwarded by Subcommittee to Full Committee by Voice Vote .
action_date: 2015-09-17
text: Subcommittee Consideration and Mark-up Session Held.
action_date: 2015-09-16
text: Referred to the Subcommittee on Cybersecurity, Infrastructure Protection, and Security Technologies.
action_date: 2015-09-15
text: Referred to the House Committee on Homeland Security.
action_date: 2015-09-15
text: Introduced in House
action_date: 2015-09-15
text: Introduced in House