Cyber Vulnerability Disclosure Reporting Act

Bill: 115-hr-3202
Sponsor: full_name: Rep. Jackson Lee, Sheila [D-TX-18]
Introduced: 2017-07-12
Policy area: Science, Technology, Communications
Subjects: Computer security and identity theft

Congressional oversight

Infrastructure development
Latest action: action_date: 2018-01-10
text: Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

Summaries:
action_date: 2017-07-12
action_desc: Introduced in House
text: <p><strong>Cyber Vulnerability Disclosure Reporting Act</strong></p> <p>This bill requires the Department of Homeland Security to provide a public report to Congress about the policies and procedures developed for coordinating disclosures about cyber vulnerabilities. The report may contain a classified portion about cyber vulnerability disclosures made in the past year and those outcomes.</p> <p><strong></strong></p>

tv_txt: I 115th CONGRESS 1st Session H. R. 3202 IN THE HOUSE OF REPRESENTATIVES July 12, 2017 Ms. Jackson Lee introduced the following bill; which was referred to the Committee on Homeland Security A BILL To require the Secretary of Homeland Security to submit a report on cyber vulnerability disclosures, and for other purposes.

1. Short title This Act may be cited as the Cyber Vulnerability Disclosure Reporting Act . 2. Report on cyber vulnerabilities (a) Report Not later than 240 days after the date of the enactment of this Act, the Secretary of Homeland Security shall submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that contains a description of the policies and procedures developed for coordinating cyber vulnerability disclosures, in accordance with section 227(m) of the Homeland Security Act of 2002 ( 6 U.S.C. 148(m) ). To the extent possible, such report shall include an annex with information on instances in which such policies and procedures were used to disclose cyber vulnerabilities in the year prior to the date such report is required and, where available, information on the degree to which such information was acted upon by industry and other stakeholders. Such report may also contain a description of how the Secretary is working with other Federal entities and critical infrastructure owners and operators to prevent, detect, and mitigate cyber vulnerabilities. (b) Form The report required under subsection (b) shall be submitted in unclassified form but may contain a classified annex.

tv_txt: IB Union Calendar No. 203 115th CONGRESS 1st Session H. R. 3202 [Report No. 115–283] IN THE HOUSE OF REPRESENTATIVES July 12, 2017 Ms. Jackson Lee introduced the following bill; which was referred to the Committee on Homeland Security September 1, 2017 Committed to the Committee of the Whole House on the State of the Union and ordered to be printed A BILL To require the Secretary of Homeland Security to submit a report on cyber vulnerability disclosures, and for other purposes.

1. Short title This Act may be cited as the Cyber Vulnerability Disclosure Reporting Act . 2. Report on cyber vulnerabilities (a) Report Not later than 240 days after the date of the enactment of this Act, the Secretary of Homeland Security shall submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that contains a description of the policies and procedures developed for coordinating cyber vulnerability disclosures, in accordance with section 227(m) of the Homeland Security Act of 2002 ( 6 U.S.C. 148(m) ). To the extent possible, such report shall include an annex with information on instances in which such policies and procedures were used to disclose cyber vulnerabilities in the year prior to the date such report is required and, where available, information on the degree to which such information was acted upon by industry and other stakeholders. Such report may also contain a description of how the Secretary is working with other Federal entities and critical infrastructure owners and operators to prevent, detect, and mitigate cyber vulnerabilities. (b) Form The report required under subsection (b) shall be submitted in unclassified form but may contain a classified annex.

September 1, 2017 Committed to the Committee of the Whole House on the State of the Union and ordered to be printed

tv_txt: IB 115th CONGRESS 2d Session H. R. 3202 IN THE HOUSE OF REPRESENTATIVES AN ACT To require the Secretary of Homeland Security to submit a report on cyber vulnerability disclosures, and for other purposes.

1. Short title This Act may be cited as the Cyber Vulnerability Disclosure Reporting Act . 2. Report on cyber vulnerabilities (a) Report Not later than 240 days after the date of the enactment of this Act, the Secretary of Homeland Security shall submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that contains a description of the policies and procedures developed for coordinating cyber vulnerability disclosures, in accordance with section 227(m) of the Homeland Security Act of 2002 ( 6 U.S.C. 148(m) ). To the extent possible, such report shall include an annex with information on instances in which such policies and procedures were used to disclose cyber vulnerabilities in the year prior to the date such report is required and, where available, information on the degree to which such information was acted upon by industry and other stakeholders. Such report may also contain a description of how the Secretary is working with other Federal entities and critical infrastructure owners and operators to prevent, detect, and mitigate cyber vulnerabilities. (b) Form The report required under subsection (b) shall be submitted in unclassified form but may contain a classified annex.

Passed the House of Representatives January 9, 2018. Karen L. Haas, Clerk.

tv_txt: IIB 115th CONGRESS 2d Session H. R. 3202 IN THE SENATE OF THE UNITED STATES January 10, 2018 Received; read twice and referred to the Committee on Homeland Security and Governmental Affairs AN ACT To require the Secretary of Homeland Security to submit a report on cyber vulnerability disclosures, and for other purposes.

1. Short title This Act may be cited as the Cyber Vulnerability Disclosure Reporting Act . 2. Report on cyber vulnerabilities (a) Report Not later than 240 days after the date of the enactment of this Act, the Secretary of Homeland Security shall submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that contains a description of the policies and procedures developed for coordinating cyber vulnerability disclosures, in accordance with section 227(m) of the Homeland Security Act of 2002 ( 6 U.S.C. 148(m) ). To the extent possible, such report shall include an annex with information on instances in which such policies and procedures were used to disclose cyber vulnerabilities in the year prior to the date such report is required and, where available, information on the degree to which such information was acted upon by industry and other stakeholders. Such report may also contain a description of how the Secretary is working with other Federal entities and critical infrastructure owners and operators to prevent, detect, and mitigate cyber vulnerabilities. (b) Form The report required under subsection (b) shall be submitted in unclassified form but may contain a classified annex.

Passed the House of Representatives January 9, 2018. Karen L. Haas, Clerk.