Strengthening and Enhancing Cyber-capabilities by Utilizing Risk Exposure Technology Act

Bill: 115-hr-7327
Sponsor: Rep. Hurd, Will [R-TX-23]
Introduced: 2018-12-19 in the House
Policy area: Emergency Management
Subjects: Computers and information technology
Congressional oversight
Executive agency funding and structure
Government information and archives
Public contracts and procurement
Telephone and wireless communication

Summary:
action_date: 2018-12-19
text: 

Strengthening and Enhancing Cyber-capabilities by Utilizing Risk Exposure Technology Act or the SECURE Technology Act

 
This bill directs the Department of Homeland Security (DHS) to:
 
 
 establish a policy applicable to individuals, organizations, and companies to report security vulnerabilities on DHS information systems;
 
 develop a process to address the mitigation or remediation of the vulnerabilities reported; and
 
 establish, within the Office of the Chief Information Officer, a bug bounty pilot program to minimize such vulnerabilities.
 
 

Federal Acquisition Supply Chain Security Act of 2018

 
This bill establishes a Federal Acquisition Security Council. The council shall: (1) identify and recommend development of supply chain risk management standards, guidelines, and practices for assessing and developing mitigation strategies to address supply chain risks; and (2) develop a strategic plan for addressing supply chain risks posed by the acquisition of certain technology and equipment (covered articles). 
 
The bill sets forth standards for executive agencies in assessing supply chain risks and extends to such agencies authorities for mitigating supply chain risks in the procurement of covered articles. 

action_date: 2018-12-21
text: 

Strengthening and Enhancing Cyber-capabilities by Utilizing Risk Exposure Technology Act or the SECURE Technology Act

 
TITLE I--DEPARTMENT OF HOMELAND SECURITY INFORMATION SECURITY AND OTHER MATTERS
 
(Sec. 101) This bill directs the Department of Homeland Security (DHS) to: (1) establish a policy applicable to individuals, organizations, and companies to report security vulnerabilities on DHS information systems; and (2) develop a process to address the mitigation or remediation of the vulnerabilities reported. DHS shall make such policy publicly available and submit a copy to Congress with the required remediation process.
 
(Sec. 102) DHS shall establish, within the Office of the Chief Information Officer, a bug bounty pilot program to minimize security vulnerabilities.
 
 &quot;Bug bounty program&quot; means a program under which: (1) individuals, organizations, and companies are temporarily authorized to identify and report vulnerabilities of DHS information systems; and (2) eligible individuals, organizations, and companies receive compensation in exchange for such reports. 
 
TITLE II--FEDERAL ACQUISITION SUPPLY CHAIN SECURITY
 

Federal Acquisition Supply Chain Security Act of 2018

 
(Sec. 202) This bill establishes a Federal Acquisition Security Council. The council shall: (1) identify and recommend development of supply chain risk management standards, guidelines, and practices for assessing and developing mitigation strategies to address supply chain risks; and (2) develop a strategic plan for addressing supply chain risks posed by the acquisition of certain technology and equipment (covered articles). 
 
(Sec. 203) The bill sets forth standards for executive agencies in assessing supply chain risks and extends to such agencies authorities for mitigating supply chain risks in the procurement of covered articles. 
 
(Sec. 204) The bill adds agency responsibilities relating to assessing and avoiding, mitigating, transferring, or accepting supply chain risks and complying with exclusion and removal orders.


Legislative actions:
action_date: 2018-12-21
text: Became Public Law No: 115-390.
action_date: 2018-12-21
text: Became Public Law No: 115-390.
action_date: 2018-12-21
text: Signed by President.
action_date: 2018-12-21
text: Signed by President.
action_date: 2018-12-21
text: Presented to President.
action_date: 2018-12-21
text: Presented to President.
action_date: 2018-12-20
text: Message on Senate action sent to the House.
action_date: 2018-12-20
text: Passed Senate without amendment by Unanimous Consent. (consideration: CR S7950)
action_date: 2018-12-20
text: Passed/agreed to in Senate: Passed Senate without amendment by Unanimous Consent.(consideration: CR S7950)
action_date: 2018-12-19
text: Received in the Senate, read twice.
action_date: 2018-12-19
text: Motion to reconsider laid on the table Agreed to without objection.
action_date: 2018-12-19
text: On motion to suspend the rules and pass the bill Agreed to by recorded vote (2/3 required): 362 - 1 (Roll no. 440). (text: CR H10291-10296)
action_date: 2018-12-19
text: Passed/agreed to in House: On motion to suspend the rules and pass the bill Agreed to by recorded vote (2/3 required): 362 - 1 (Roll no. 440).(text: CR H10291-10296)
action_date: 2018-12-19
text: Considered as unfinished business. (consideration: CR H10316-10317)
action_date: 2018-12-19
text: At the conclusion of debate, the chair put the question on the motion to suspend the rules. Mr. Massie objected to the Yea - Nay vote on the grounds that a quorum was not present. Further proceedings on the motion were postponed. The point of no quorum was considered as withdrawn.
action_date: 2018-12-19
text: DEBATE - The House proceeded with forty minutes of debate on H.R. 7327.
action_date: 2018-12-19
text: Considered under suspension of the rules. (consideration: CR H10291-10297)
action_date: 2018-12-19
text: Mr. Hurd moved to suspend the rules and pass the bill.
action_date: 2018-12-19
text: Referred to the Committee on Oversight and Government Reform, and in addition to the Committee on Homeland Security, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
action_date: 2018-12-19
text: Referred to the Committee on Oversight and Government Reform, and in addition to the Committee on Homeland Security, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
action_date: 2018-12-19
text: Introduced in House
action_date: 2018-12-19
text: Introduced in House

Enacted as: number: 115-390