IoT Cybersecurity Improvement Act of 2019

Bill: 116-s-734
Sponsor: Sen. Warner, Mark R. [D-VA]
Introduced: 2019-03-11 in the Senate
Policy area: Government Operations and Politics
Subjects: Administrative law and regulatory procedures
Computer security and identity theft
Computers and information technology
Government information and archives
Government studies and investigations
Internet and video services
Internet, web applications, social media
Office of Management and Budget (OMB)
Public contracts and procurement

Summary:
action_date: 2019-03-11
text: 

Internet of Things Cybersecurity Improvement Act of 2019 or the IoT Cybersecurity Improvement Act of 2019

 
This bill requires the National Institute of Standards and Technology (NIST) and the Office of Management and Budget (OMB) to take specified steps to increase cybersecurity for Internet of Things (IoT) devices. IoT is the extension of internet connectivity into physical devices and everyday objects.
 
The bill establishes September 30, 2019, as the deadline for the completion of NIST's efforts regarding considerations for managing IoT cybersecurity risks, especially regarding examples of possible cybersecurity capabilities of IoT devices. By March 31, 2020, NIST must develop recommendations for the appropriate use and management of IoT devices owned or controlled by the government, including minimum information security requirements for managing cybersecurity risks.
 
The OMB shall then issue guidelines for each agency that are consistent with such recommendations.
 
NIST and the OMB shall publish guidance on policies and procedures for the reporting, coordinating, publishing, and receiving of information about a security vulnerability relating to an IoT device used by the government and the resolution of such security vulnerability.

action_date: 2019-09-23
text: 

Internet of Things Cybersecurity Improvement Act of 2019 or the IoT Cybersecurity Improvement Act of 2019

 
This bill requires the National Institute of Standards and Technology (NIST) and the Office of Management and Budget (OMB) to take specified steps to increase cybersecurity for Internet of Things (IoT) devices. IoT is the extension of internet connectivity into physical devices and everyday objects.
 
By March 31, 2020, NIST must develop standards and guidelines for the appropriate use and management of IoT devices owned or controlled by the government, including minimum information security requirements for managing cybersecurity risks. The OMB shall then issue policies and principles for each agency that are consistent with such guidelines.
 
NIST shall publish guidelines for the reporting, coordinating, publishing, and receiving of information about a security vulnerability relating to agency information systems, including IoT devices, and the resolution of such security vulnerability. The OMB shall oversee the implementation of the guidelines.


Legislative actions:
action_date: 2019-09-23
text: Placed on Senate Legislative Calendar under General Orders. Calendar No. 215.
action_date: 2019-09-23
text: Committee on Homeland Security and Governmental Affairs. Reported by Senator Johnson with an amendment in the nature of a substitute. With written report No. 116-112.
action_date: 2019-09-23
text: Committee on Homeland Security and Governmental Affairs. Reported by Senator Johnson with an amendment in the nature of a substitute. With written report No. 116-112.
action_date: 2019-06-19
text: Committee on Homeland Security and Governmental Affairs. Ordered to be reported with an amendment in the nature of a substitute favorably.
action_date: 2019-03-11
text: Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
action_date: 2019-03-11
text: Introduced in Senate