<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="billres.xsl"?>
<!DOCTYPE bill PUBLIC "-//US Congress//DTDs/bill.dtd//EN" "bill.dtd">
<bill bill-stage="Reported-in-Senate" public-private="public"><metadata xmlns:dc="http://purl.org/dc/elements/1.1/">
<dublinCore>
<dc:title>115 S3208 RS: Federal Information Systems Safeguards Act of 2018</dc:title>
<dc:publisher>U.S. Senate</dc:publisher>
<dc:date>2018-07-12</dc:date>
<dc:format>text/xml</dc:format>
<dc:language>EN</dc:language>
<dc:rights>Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.</dc:rights>
</dublinCore>
</metadata>
<form>
<distribution-code display="yes">II</distribution-code><calendar>Calendar No. 668</calendar><congress>115th CONGRESS</congress><session>2d Session</session><legis-num>S. 3208</legis-num><associated-doc role="report">[Report No. 115–382]</associated-doc><current-chamber>IN THE SENATE OF THE UNITED STATES</current-chamber><action><action-date date="20180712">July 12, 2018</action-date><action-desc><sponsor name-id="S345">Mr. Johnson</sponsor> (for himself and <cosponsor name-id="S376">Mrs. Ernst</cosponsor>) introduced the following bill; which was read twice and referred to the <committee-name added-display-style="italic" committee-id="SSGA00" deleted-display-style="strikethrough">Committee on Homeland Security and Governmental Affairs</committee-name></action-desc></action><action stage="Reported-in-Senate"><action-date>November 26, 2018</action-date><action-desc>Reported by <sponsor name-id="S345">Mr. Johnson</sponsor>, with an amendment</action-desc><action-instruction>Strike out all after the enacting clause and insert the part printed in italic</action-instruction></action><legis-type>A BILL</legis-type><official-title>To provide agencies with discretion in securing information technology and information systems. </official-title></form>
	<legis-body style="OLC">
 <section changed="deleted" commented="no" committee-id="SSGA00" id="HB17085CFB054494CB5135FC152C77317" reported-display-style="strikethrough" section-type="section-one"><enum>1.</enum><header>Short title</header><text display-inline="no-display-inline">This Act may be cited as the <quote><short-title>Federal Information Systems Safeguards Act of 2018</short-title></quote>.</text> </section><section changed="deleted" committee-id="SSGA00" id="H02E1050E7C7240298B74A81CD0AD6E19" reported-display-style="strikethrough" section-type="subsequent-section"><enum>2.</enum><header>Agency discretion to secure information technology and information systems</header> <subsection id="id978eb3ae83e140e5aae3e5a5fb2cc0d7"><enum>(a)</enum><header>In general</header><text>The authority described under subsection (b) may not be—</text>
 <paragraph id="idfc03aeb9ce924acc9e3284d746736a9a"><enum>(1)</enum><text>limited by a collective bargaining agreement, memorandum of agreement, or any other agreement entered into before, on, or after the date of enactment of this Act pursuant to <external-xref legal-doc="usc-chapter" parsable-cite="usc-chapter/5/71">chapter 71</external-xref> of title 5, United States Code; or</text>
 </paragraph><paragraph id="idf5937f2eaab2465f9e02aafeb81d250c"><enum>(2)</enum><text>negotiated under section 7106(b) or any other section of such chapter 71.</text> </paragraph></subsection><subsection id="idb4982320f976450ab627f6a578615f7c"><enum>(b)</enum><header>Authority covered</header><text>The authority described in this subsection is the authority of the head of an agency, pursuant to section 3554 of title 44, United States Code, to take any action to limit, restrict, or prohibit access to a website or to test, deploy, or update a cybersecurity measure if the head of the agency determines such action is necessary to carry out the responsibilities of the head of the agency under such section 3554.</text>
 </subsection><subsection id="idFAD601848DEE415094DDC5A2134322B1"><enum>(c)</enum><header>Definition of agency</header><text>In this section, the term <term>agency</term> has the meaning given the term in section 3502 of title 44, United States Code.</text></subsection></section></legis-body> <legis-body display-enacting-clause="no-display-enacting-clause"> <section changed="added" commented="no" committee-id="SSGA00" id="id81f22819-3cb2-4f4e-a145-9ac8da84b26c" reported-display-style="italic" section-type="section-one"><enum>1.</enum><header>Short title</header><text display-inline="no-display-inline">This Act may be cited as the <quote><short-title>Federal Information Systems Safeguards Act of 2018</short-title></quote>.</text>
		</section><section changed="added" committee-id="SSGA00" id="id008a1940-4913-4e05-bcc8-9f6fa38df6a6" reported-display-style="italic" section-type="subsequent-section"><enum>2.</enum><header>Agency discretion to secure information technology and information systems</header>
 <subsection id="idaa01be1f-fa5e-4f8a-90ab-3aaee7deb4f6"><enum>(a)</enum><header>In general</header><text>The authority described under subsection (b) may not be—</text> <paragraph id="id376b523b-0517-4c2b-90e3-9125ec9248c1"><enum>(1)</enum><text>limited by a collective bargaining agreement, memorandum of agreement, or any other agreement entered into before, on, or after the date of enactment of this Act pursuant to <external-xref legal-doc="usc-chapter" parsable-cite="usc-chapter/5/71">chapter 71</external-xref> of title 5, United States Code; or</text>
 </paragraph><paragraph id="id5b7e2931-6920-4f0b-b0d6-6b837eb64947"><enum>(2)</enum><text>negotiated under section 7106(b) or any other section of such chapter 71.</text> </paragraph></subsection><subsection id="id8c9bb0fe-23c7-4eff-8970-d4937fba1898"><enum>(b)</enum><header>Authority covered</header><text>The authority described in this subsection is the authority of the head of an agency, pursuant to section 3554 of title 44, United States Code, to take any action to limit, restrict, or prohibit access to a website or to test, deploy, or update a cybersecurity measure if the head of the agency determines such action is necessary to carry out the responsibilities of the head of the agency under such section 3554.</text>
			</subsection><subsection id="idbcc45b1dcb1f4e878f0ab0d0934477ac"><enum>(c)</enum><header>Consideration of communication needs</header>
 <paragraph id="id5bb14f1d031a4589b3a0bb173cd61bd9"><enum>(1)</enum><header>In general</header><text>After taking an action under this section, the head of an agency shall, upon the request of employees of the agency, take into consideration and seek guidance on the personal communication needs of the employees of the agency.</text>
 </paragraph><paragraph id="id56bd75341c414b2aa964bbfc5ec7cc42"><enum>(2)</enum><header>Rule of construction</header><text>Nothing in this subsection shall be construed to establish a right to collective bargaining.</text> </paragraph></subsection><subsection commented="no" display-inline="no-display-inline" id="idc534df79-83a7-4320-9059-554dd7b338bb"><enum>(d)</enum><header>Definition of agency</header><text>In this section, the term <term>agency</term> has the meaning given the term in section 3502 of title 44, United States Code.</text></subsection></section></legis-body><endorsement><action-date>November 26, 2018</action-date><action-desc>Reported with an amendment</action-desc></endorsement></bill>


