STB Information Security Improvement Act

Bill: 115-s-2844
Sponsor: full_name: Sen. Thune, John [R-SD]
Introduced: 2018-05-15
Policy area: Transportation and Public Works
Subjects: Computer security and identity theft

Computers and information technology

Congressional oversight

Government information and archives

Government studies and investigations

Surface Transportation Board
Latest action: action_date: 2018-08-16
text: Placed on Senate Legislative Calendar under General Orders. Calendar No. 556.

Summaries:
action_date: 2018-05-15
action_desc: Introduced in Senate
text: <p><strong>STB Information Security Improvement Act </strong></p> <p>This bill requires the Surface Transportation Board to develop a timeline and plan to implement the recommendations of the Department of Transportation in Report No. FI2018002 concerning information security.</p> <p><br> </p>

action_date: 2018-08-16
action_desc: Reported to Senate without amendment
text: <p><STRONG>STB Information Security Improvement Act </STRONG></p> <p>This bill requires the Surface Transportation Board to develop a timeline and plan to implement the recommendations of the Department of Transportation in Report No. FI2018002 concerning information security.</p>

tv_txt: II 115th CONGRESS 2d Session S. 2844 IN THE SENATE OF THE UNITED STATES May 15, 2018 Mr. Thune introduced the following bill; which was read twice and referred to the Committee on Commerce, Science, and Transportation A BILL To require the Surface Transportation Board to implement certain recommendations of the Inspector General of the Department of Transportation.

1. Short title This Act may be cited as the STB Information Security Improvement Act . 2. Requirements (a) In general The Surface Transportation Board (in this section referred to as the STB ) shall develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002, including improvements— (1) to identify controls, including risk management, weakness remediation, and security authorization; (2) to protect controls, including configuration management, user identity and access management, and security training; (3) to detect controls, including continuous monitoring; (4) to respond controls, including incident handling and reporting; (5) to recover controls for contingency planning; and (6) to such other tools that would implement the recommendations in the report. (b) Implementation (1) In general Not later than 180 days after the date of enactment of this Act, the STB shall submit the plan and timeline developed under subsection (a) to the Committee on Commerce, Science, and Transportation of the Senate and the Committee on Transportation and Infrastructure of the House of Representatives . (2) Report The STB shall report annually to such Committees on the progress on implementation of the recommendations until the implementation is complete. (3) Plan implementation The STB shall designate an individual to implement the plan developed under subsection (a). 3. No additional funds authorized No additional funds are authorized to carry out the requirements of this Act. Such requirements shall be carried out using amounts otherwise authorized.

tv_txt: II Calendar No. 556 115th CONGRESS 2d Session S. 2844 [Report No. 115–322] IN THE SENATE OF THE UNITED STATES May 15, 2018 Mr. Thune introduced the following bill; which was read twice and referred to the Committee on Commerce, Science, and Transportation August 16, 2018 Reported by Mr. Thune , without amendment A BILL To require the Surface Transportation Board to implement certain recommendations of the Inspector General of the Department of Transportation.

1. Short title This Act may be cited as the STB Information Security Improvement Act . 2. Requirements (a) In general The Surface Transportation Board (in this section referred to as the STB ) shall develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002, including improvements— (1) to identify controls, including risk management, weakness remediation, and security authorization; (2) to protect controls, including configuration management, user identity and access management, and security training; (3) to detect controls, including continuous monitoring; (4) to respond controls, including incident handling and reporting; (5) to recover controls for contingency planning; and (6) to such other tools that would implement the recommendations in the report. (b) Implementation (1) In general Not later than 180 days after the date of enactment of this Act, the STB shall submit the plan and timeline developed under subsection (a) to the Committee on Commerce, Science, and Transportation of the Senate and the Committee on Transportation and Infrastructure of the House of Representatives . (2) Report The STB shall report annually to such Committees on the progress on implementation of the recommendations until the implementation is complete. (3) Plan implementation The STB shall designate an individual to implement the plan developed under subsection (a). 3. No additional funds authorized No additional funds are authorized to carry out the requirements of this Act. Such requirements shall be carried out using amounts otherwise authorized.

August 16, 2018 Reported without amendment