STB Information Security Improvement Act

Bill: 115-hr-4921
Sponsor: full_name: Rep. Mitchell, Paul [R-MI-10]
Introduced: 2018-02-05
Policy area: Transportation and Public Works
Subjects: Computer security and identity theft

Computers and information technology

Congressional oversight

Government information and archives

Government studies and investigations

Surface Transportation Board
Latest action: action_date: 2018-10-16
text: Became Public Law No: 115-269.

Summaries:
action_date: 2018-02-05
action_desc: Introduced in House
text: <p> <b>STB Information Security Improvement Act</b></p> <p>This bill requires the Surface Transportation Board to develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002 concerning information security.</p>

action_date: 2018-04-05
action_desc: Reported to House with amendment(s)
text: <p><b>STB Information Security Improvement Act</b></p> <p>This bill requires the Surface Transportation Board to develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002 concerning information security. </p>

action_date: 2018-04-10
action_desc: Passed House amended
text: <p><b>STB Information Security Improvement Act</b></p> <p>(Sec. 2) This bill requires the Surface Transportation Board (STB) to develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002 concerning information security. The STB must report annually to the House Committee on Transportation and Infrastructure and the Senate Committee on Commerce on progress in implementing the recommendations until the implementation is complete. </p> <p>(Sec. 3) No additional funds are authorized to carry out the requirements of this bill.</p>

action_date: 2018-10-01
action_desc: Passed Senate without amendment
text: <p><strong>STB Information Security Improvement Act</strong></p> <p>This bill requires the Surface Transportation Board to develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002 concerning information security.</p>

action_date: 2018-10-16
action_desc: Public Law
text: <b><p /><strong>STB Information Security Improvement Act</strong></b> <p>(Sec. 2) This bill requires the Surface Transportation Board to develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002 concerning information security.</p>

tv_txt: I 115th CONGRESS 2d Session H. R. 4921 IN THE HOUSE OF REPRESENTATIVES February 5, 2018 Mr. Mitchell (for himself and Mr. Gottheimer ) introduced the following bill; which was referred to the Committee on Transportation and Infrastructure A BILL To require the Surface Board of Transportation to implement certain recommendations of the Inspector General of the Department of Transportation.

1. Short title This Act may be cited as the STB Information Security Improvement Act . 2. Requirements (a) In general The Surface Transportation Board (in this section referred to as the STB ) shall develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002, including improvements— (1) to identify controls, including risk management, weakness remediation, and security authorization; (2) to protect controls, including configuration management, user identity management, and security training; (3) to respond controls, including incident handling and reporting; (4) to recover controls for contingency planning; and (5) any additional tools that will improve the implementation of the recommendations. (b) Implementation (1) In general Not later than 180 days after the date of enactment of this Act, the STB shall submit the plan and timeline developed under subsection (a) to the Committee on Transportation and Infrastructure of the House of Representatives and the Committee on Commerce of the Senate. (2) Report The STB shall report annually to such Committees on the progress on implementation of the recommendations until the implementation is complete. (3) Plan implementation The STB shall designate an individual to implement the plan developed under subsection (a). 3. No additional funds authorized No additional funds are authorized to carry out the requirements of this Act. Such requirements shall be carried out using amounts otherwise authorized.

tv_txt: IIB 115th CONGRESS 2d Session H. R. 4921 IN THE SENATE OF THE UNITED STATES April 11, 2018 Received; read twice and referred to the Committee on Commerce, Science, and Transportation AN ACT To require the Surface Transportation Board to implement certain recommendations of the Inspector General of the Department of Transportation.

1. Short title This Act may be cited as the STB Information Security Improvement Act . 2. Requirements (a) In general The Surface Transportation Board (in this section referred to as the STB ) shall develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002, including improvements— (1) to identify controls, including risk management, weakness remediation, and security authorization; (2) to protect controls, including configuration management, user identity and access management, and security training; (3) to detect controls, including continuous monitoring; (4) to respond controls, including incident handling and reporting; (5) to recover controls for contingency planning; and (6) any additional tools that will improve the implementation of the recommendations. (b) Implementation (1) In general Not later than 180 days after the date of enactment of this Act, the STB shall submit the plan and timeline developed under subsection (a) to the Committee on Transportation and Infrastructure of the House of Representatives and the Committee on Commerce of the Senate. (2) Report The STB shall report annually to such Committees on the progress on implementation of the recommendations until the implementation is complete. (3) Plan implementation The STB shall designate an individual to implement the plan developed under subsection (a). 3. No additional funds authorized No additional funds are authorized to carry out the requirements of this Act. Such requirements shall be carried out using amounts otherwise authorized.

Passed the House of Representatives April 10, 2018. Karen L. Haas, Clerk.

tv_txt: IB 115th CONGRESS 2d Session H. R. 4921 IN THE HOUSE OF REPRESENTATIVES AN ACT To require the Surface Transportation Board to implement certain recommendations of the Inspector General of the Department of Transportation.

1. Short title This Act may be cited as the STB Information Security Improvement Act . 2. Requirements (a) In general The Surface Transportation Board (in this section referred to as the STB ) shall develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002, including improvements— (1) to identify controls, including risk management, weakness remediation, and security authorization; (2) to protect controls, including configuration management, user identity and access management, and security training; (3) to detect controls, including continuous monitoring; (4) to respond controls, including incident handling and reporting; (5) to recover controls for contingency planning; and (6) any additional tools that will improve the implementation of the recommendations. (b) Implementation (1) In general Not later than 180 days after the date of enactment of this Act, the STB shall submit the plan and timeline developed under subsection (a) to the Committee on Transportation and Infrastructure of the House of Representatives and the Committee on Commerce of the Senate. (2) Report The STB shall report annually to such Committees on the progress on implementation of the recommendations until the implementation is complete. (3) Plan implementation The STB shall designate an individual to implement the plan developed under subsection (a). 3. No additional funds authorized No additional funds are authorized to carry out the requirements of this Act. Such requirements shall be carried out using amounts otherwise authorized.

Passed the House of Representatives April 10, 2018. Karen L. Haas, Clerk.

tv_txt: IB Union Calendar No. 475 115th CONGRESS 2d Session H. R. 4921 [Report No. 115–622] IN THE HOUSE OF REPRESENTATIVES February 5, 2018 Mr. Mitchell (for himself and Mr. Gottheimer ) introduced the following bill; which was referred to the Committee on Transportation and Infrastructure April 5, 2018 Additional sponsor: Mr. Faso April 5, 2018 Reported with amendments, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed Strike out all after the enacting clause and insert the part printed in italic For text of introduced bill, see copy of bill as introduced on February 5, 2018 A BILL To require the Surface Board of Transportation to implement certain recommendations of the Inspector General of the Department of Transportation.

1. Short title This Act may be cited as the STB Information Security Improvement Act . 2. Requirements (a) In general The Surface Transportation Board (in this section referred to as the STB ) shall develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002, including improvements— (1) to identify controls, including risk management, weakness remediation, and security authorization; (2) to protect controls, including configuration management, user identity and access management, and security training; (3) to detect controls, including continuous monitoring; (4) to respond controls, including incident handling and reporting; (5) to recover controls for contingency planning; and (6) any additional tools that will improve the implementation of the recommendations. (b) Implementation (1) In general Not later than 180 days after the date of enactment of this Act, the STB shall submit the plan and timeline developed under subsection (a) to the Committee on Transportation and Infrastructure of the House of Representatives and the Committee on Commerce of the Senate. (2) Report The STB shall report annually to such Committees on the progress on implementation of the recommendations until the implementation is complete. (3) Plan implementation The STB shall designate an individual to implement the plan developed under subsection (a). 3. No additional funds authorized No additional funds are authorized to carry out the requirements of this Act. Such requirements shall be carried out using amounts otherwise authorized.

Amend the title so as to read: A bill to require the Surface Transportation Board to implement certain recommendations of the Inspector General of the Department of Transportation. .

April 5, 2018 Reported with amendments, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed

tv_txt: IB One Hundred Fifteenth Congress of the United States of America At the Second Session Begun and held at the City of Washington on Wednesday, the third day of January, two thousand and eighteen H. R. 4921 AN ACT To require the Surface Transportation Board to implement certain recommendations of the Inspector General of the Department of Transportation.

1. Short title This Act may be cited as the STB Information Security Improvement Act . 2. Requirements (a) In general The Surface Transportation Board (in this section referred to as the STB ) shall develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002, including improvements— (1) to identify controls, including risk management, weakness remediation, and security authorization; (2) to protect controls, including configuration management, user identity and access management, and security training; (3) to detect controls, including continuous monitoring; (4) to respond controls, including incident handling and reporting; (5) to recover controls for contingency planning; and (6) any additional tools that will improve the implementation of the recommendations. (b) Implementation (1) In general Not later than 180 days after the date of enactment of this Act, the STB shall submit the plan and timeline developed under subsection (a) to the Committee on Transportation and Infrastructure of the House of Representatives and the Committee on Commerce of the Senate. (2) Report The STB shall report annually to such Committees on the progress on implementation of the recommendations until the implementation is complete. (3) Plan implementation The STB shall designate an individual to implement the plan developed under subsection (a). 3. No additional funds authorized No additional funds are authorized to carry out the requirements of this Act. Such requirements shall be carried out using amounts otherwise authorized.

Speaker of the House of Representatives. Vice President of the United States and President of the Senate.