Federal

Cyber Vulnerability Disclosure Reporting Act

Source: Congress.gov · 383 words in original text

What This Bill Does

This bill requires the Secretary of Homeland Security to write a report about how the government shares information about computer security weaknesses (called cyber vulnerabilities) with companies and other organizations. The report must describe the rules and procedures used to tell people about these security problems.

Who It Affects

The Secretary of Homeland Security, the House Committee on Homeland Security, the Senate Committee on Homeland Security and Governmental Affairs, industry companies, critical infrastructure owners and operators (organizations that run essential services like power or water systems), and other federal agencies.

Key Provisions

* The Secretary of Homeland Security must submit a report to Congress no later than 240 days after this law is signed that describes the policies and procedures for sharing information about cyber vulnerabilities (Sec. 2(a)). * The report should include information about instances in the past year when these procedures were actually used to disclose vulnerabilities and how companies and other stakeholders responded to that information, to the extent possible (Sec. 2(a)). * The report may describe how the Secretary is working with other federal agencies and critical infrastructure owners and operators to prevent, detect and fix cyber vulnerabilities (Sec. 2(a)). * The main report must be submitted in unclassified form (available to the public) but may include a separate classified section (Sec. 2(b)).

What Changes

The Secretary of Homeland Security will be required to produce and submit this specific report to Congress.

Important Definitions

None defined in the bill text.

I 118TH CONGRESS 1ST SESSION H. R. 280 To require the Secretary of Homeland Security to submit a report on cyber vulnerability disclosures, and for other purposes. IN THE HOUSE OF REPRESENTATIVES JANUARY 11, 2023 Ms. JACKSON LEE introduced the following bill; which was referred to the Committee on Homeland Security A BILL To require the Secretary of Homeland Security to submit a report on cyber vulnerability disclosures, and for other purposes. Be it enacted by the Senate and House of Representa- 1 tives of the United States of America in Congress assembled, 2 SECTION 1. SHORT TITLE. 3 This Act may be cited as the ‘‘Cyber Vulnerability 4 Disclosure Reporting Act’’. 5 SEC. 2. REPORT ON CYBER VULNERABILITIES. 6 (a) REPORT.—Not later than 240 days after the date 7 of the enactment of this Act, the Secretary of Homeland 8 Security shall submit to the Committee on Homeland Se- 9 curity of the House of Representatives and the Committee 10 VerDate Sep 11 2014 03:50 Jan 21, 2023 Jkt 039200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\H280.IH H280 pbinns on DSKJLVW7X2PROD with $$_JOB 2 •HR 280 IH on Homeland Security and Governmental Affairs of the 1 Senate a report that contains a description of the policies 2 and procedures developed for coordinating cyber vulner- 3 ability disclosures, in accordance with section 2209(m) of 4 the Homeland Security Act of 2002 (6 U.S.C. 659(m)). 5 To the extent possible, such report shall include an annex 6 with information on instances in which such policies and 7 procedures were used to disclose cyber vulnerabilities in 8 the year prior to the date such report is required and, 9 where available, information on the degree to which such 10 information was acted upon by industry and other stake- 11 holders. Such report may also contain a description of how 12 the Secretary is working with other Federal entities and 13 critical infrastructure owners and operators to prevent, de- 14 tect, and mitigate cyber vulnerabilities. 15 (b) FORM.—The report required under subsection (b) 16 shall be submitted in unclassified form but may contain 17 a classified annex. 18 Æ VerDate Sep 11 2014 03:50 Jan 21, 2023 Jkt 039200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6301 E:\BILLS\H280.IH H280 pbinns on DSKJLVW7X2PROD with $$_JOB

Important: This plain English summary was generated by AI and is provided for informational purposes only. It is not legal advice. Always consult the official bill text on Congress.gov or a qualified attorney for legal matters.