3.0.0 3674 2022-03-02T16:39:41Z 2022-03-02T16:39:41Z House H HR 2011-12-15 112 From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]By Mr. DANIEL E. LUNGREN of California:H.R. 3674.Congress has the power to enact this legislation pursuantto the following:Article I, Section 8, Clause 1The Congress shall have Power to lay and collect Taxes,Duties, Imposts and Excises, to pay the Debts and provide forthe common Defence and general Welfare of the United States;but all Duties, Imposts and Excises shall be uniformthroughout the United States.Article I, Section 8, Clause 18The Congress shall have Power to make all Laws which shallbe necessary and proper for carrying into Execution theforgoing Powers, and all other Powers vested by thisConstitution in the Government of the United States or in anyDepartment or Officer thereof.[Page H9431]]]> hsif00 Energy and Commerce Committee House Standing Discharged from 2012-09-21T17:14:31Z Referred to 2012-07-11T17:09:43Z hlig00 Intelligence (Permanent Select) Committee House Select Discharged from 2012-07-11T17:09:31Z Referred to 2011-12-15T15:01:30Z hsju00 Judiciary Committee House Standing hsju08 Crime and Federal Government Surveillance Subcommittee Referred to 2012-01-06T18:42:12Z Discharged from 2012-07-11T17:09:27Z Referred to 2011-12-15T15:01:25Z hssy00 Science, Space, and Technology Committee House Standing hssy19 Technology Subcommittee Referred to 2012-01-12T17:55:38Z Discharged from 2012-07-11T17:09:22Z Referred to 2011-12-15T15:01:20Z hsgo00 Oversight and Accountability Committee House Standing Discharged from 2012-07-11T17:09:15Z Referred to 2011-12-15T15:01:15Z hshm00 Homeland Security Committee House Standing hshm08 Cybersecurity and Infrastructure Protection Subcommittee Reported by 2012-02-01T14:21:33Z Markup by 2012-02-01T14:20:37Z Referred to 2012-01-04T20:45:13Z Reported by 2012-07-11T17:08:07Z Markup by 2012-04-18T13:25:04Z Referred to 2011-12-15T15:01:10Z H. Rept. 112-592 2012-09-21 Placed on the Union Calendar, Calendar No. 501. Calendars H12410 2 House floor actions U00501 2012-09-21 Committee on Energy and Commerce discharged. Discharge H12300 2 House floor actions hsif00 Energy and Commerce Committee 2012-09-21 Committee on Energy and Commerce discharged. Committee 5500 9 Library of Congress hsif00 Energy and Commerce Committee 2012-07-11 Referred sequentially to the House Committee on Energy and Commerce for a period ending not later than Sept. 21, 2012 for consideration of such provisions of the bill and amendment as fall within the jurisdiction of that committee pursuant to clause 1(f) of rule X. IntroReferral H11200 2 House floor actions hsif00 Energy and Commerce Committee 2012-07-11 Committee on Intelligence (Permanent) discharged. Discharge H12300 2 House floor actions hlig00 Intelligence (Permanent Select) Committee 2012-07-11 Committee on Intelligence (Permanent) discharged. Committee 5500 9 Library of Congress hlig00 Intelligence (Permanent Select) Committee 2012-07-11 Committee on Judiciary discharged. Discharge H12300 2 House floor actions hsju00 Judiciary Committee 2012-07-11 Committee on Judiciary discharged. Committee 5500 9 Library of Congress hsju00 Judiciary Committee 2012-07-11 Committee on Science, Space, and Technology discharged. Discharge H12300 2 House floor actions hssy00 Science, Space, and Technology Committee 2012-07-11 Committee on Science, Space, and Technology discharged. Committee 5500 9 Library of Congress hssy00 Science, Space, and Technology Committee 2012-07-11 Committee on Oversight and Government discharged. Discharge H12300 2 House floor actions hsgo00 Oversight and Accountability Committee 2012-07-11 Committee on Oversight and Government discharged. Committee 5500 9 Library of Congress hsgo00 Oversight and Accountability Committee 2012-07-11 Reported (Amended) by the Committee on Homeland Security. H. Rept. 112-592, Part I. Committee H12200 2 House floor actions hshm00 Homeland Security Committee 2012-07-11 Reported (Amended) by the Committee on Homeland Security. H. Rept. 112-592, Part I. Committee 5000 9 Library of Congress hshm00 Homeland Security Committee 2012-04-18 hshm00 Homeland Security Committee 1 House committee actions Ordered to be Reported (Amended) by the Yeas and Nays: 16 - 13. Committee 2012-04-18 hshm00 Homeland Security Committee 1 House committee actions Committee Consideration and Mark-up Session Held. Committee 2012-02-01 hshm08 Cybersecurity and Infrastructure Protection Subcommittee 1 House committee actions Forwarded by Subcommittee to Full Committee (Amended) by Voice Vote . Committee 2012-02-01 hshm08 Cybersecurity and Infrastructure Protection Subcommittee 1 House committee actions Subcommittee Consideration and Mark-up Session Held. Committee 2012-01-12 hssy19 Technology Subcommittee 1 House committee actions Referred to the Subcommittee on Technology and Innovation. Committee 2012-01-06 hsju08 Crime and Federal Government Surveillance Subcommittee 1 House committee actions Referred to the Subcommittee on Crime, Terrorism, and Homeland Security. Committee 2012-01-04 hshm08 Cybersecurity and Infrastructure Protection Subcommittee 1 House committee actions Referred to the Subcommittee on Cybersecurity, Infrastructure Protection, and Security Technologies. Committee 2011-12-15 Referred to the Committee on Homeland Security, and in addition to the Committees on Oversight and Government Reform, Science, Space, and Technology, the Judiciary, and Intelligence (Permanent Select), for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned. IntroReferral H11100 2 House floor actions hlig00 Intelligence (Permanent Select) Committee 2011-12-15 Referred to the Committee on Homeland Security, and in addition to the Committees on Oversight and Government Reform, Science, Space, and Technology, the Judiciary, and Intelligence (Permanent Select), for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned. IntroReferral H11100 2 House floor actions hsju00 Judiciary Committee 2011-12-15 Referred to the Committee on Homeland Security, and in addition to the Committees on Oversight and Government Reform, Science, Space, and Technology, the Judiciary, and Intelligence (Permanent Select), for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned. IntroReferral H11100 2 House floor actions hssy00 Science, Space, and Technology Committee 2011-12-15 Referred to the Committee on Homeland Security, and in addition to the Committees on Oversight and Government Reform, Science, Space, and Technology, the Judiciary, and Intelligence (Permanent Select), for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned. IntroReferral H11100 2 House floor actions hsgo00 Oversight and Accountability Committee 2011-12-15 Referred to the Committee on Homeland Security, and in addition to the Committees on Oversight and Government Reform, Science, Space, and Technology, the Judiciary, and Intelligence (Permanent Select), for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned. IntroReferral H11100 2 House floor actions hshm00 Homeland Security Committee 2011-12-15 Introduced in House IntroReferral Intro-H 9 Library of Congress 2011-12-15 Introduced in House IntroReferral 1000 9 Library of Congress L000517 Rep. Lungren, Daniel E. [R-CA-3] DANIEL LUNGREN R CA EDWARD 3 N K000210 Rep. King, Peter T. [R-NY-3] PETER KING R NY T. 3 2011-12-15 True M001157 Rep. McCaul, Michael T. [R-TX-10] Michael McCaul R TX T. 10 2011-12-15 True B001257 Rep. Bilirakis, Gus M. [R-FL-9] Gus Bilirakis R FL M. 9 2011-12-15 True M001150 Rep. Miller, Candice S. [R-MI-10] Candice Miller R MI S. 10 2011-12-15 True W000798 Rep. Walberg, Tim [R-MI-7] Tim Walberg R MI 7 2011-12-15 True M001179 Rep. Marino, Tom [R-PA-10] Tom Marino R PA 10 2011-12-15 True L000576 Rep. Long, Billy [R-MO-7] Billy Long R MO 7 2011-12-15 True T000471 Rep. Turner, Robert L. [R-NY-9] Robert Turner R NY L. 9 2011-12-15 True S001187 Rep. Stivers, Steve [R-OH-15] Steve Stivers R OH 15 2011-12-15 True L000559 Rep. Langevin, James R. [D-RI-2] JAMES LANGEVIN D RI R. 2 2011-12-15 True 2012-04-25 M001181 Rep. Meehan, Patrick [R-PA-7] Patrick Meehan R PA 7 2012-02-16 False Emergency Management Administrative law and regulatory procedures Advanced technology and technological innovations Civil actions and liability Computer security and identity theft Computers and information technology Department of Homeland Security Government corporations and government-sponsored enterprises Government employee pay, benefits, personnel management Government information and archives Homeland security Intellectual property Intelligence activities, surveillance, classified information Internet and video services Internet, web applications, social media Performance measurement Public-private cooperation Research administration and funding Research and development Terrorism Emergency Management 00 2011-12-15 Introduced in House 2012-07-25T12:31:25Z Promoting and Enhancing Cybersecurity and Information Sharing Effectiveness Act of 2011 or the PRECISE Act of 2011 - Amends the Homeland Security Act of 2002 to direct the Secretary of Homeland Security (DHS) to take specified actions to protect federal information systems and critical infrastructure information systems and to prepare the nation to respond to, recover from, and mitigate against acts of terrorism and other incidents involving such systems, including: (1) conducting risk assessments of such systems, (2) fostering the development of essential information security technologies and capabilities for protecting such systems, (3) facilitating the adoption of new cybersecurity technologies and practices, (4) maintaining the capability to serve as a focal point with the federal government for cybersecurity, (5) assisting in national efforts to mitigate communications and information technology supply chain vulnerabilities, (6) leading a nationwide cybersecurity awareness and outreach effort, (6) establishing guidelines for making critical infrastructure information systems more secure, and (7) developing a national cybersecurity incident response plan.

Directs the Secretary to: (1) coordinate the activates undertaken by agencies to protect such systems; (2) designate a lead cybersecurity official; (3) maintain a strategy to assure the readiness, reliability, continuity, integrity, and resilience of such systems and to protect privacy rights and civil liberties; (4) identify and evaluate cybersecurity risks to critical infrastructure on a continuous and sector-by-sector basis; and (5) review existing internationally recognized consensus-developed risk-based performance standards for inclusion in a common collection and develop market-based incentives to encourage use of such collection. Makes the Secretary responsible for making all cyber threat information available to appropriate owners and operators of critical infrastructure on a timely basis.

Requires the Under Secretary for Science and Technology to support research, development, testing, evaluation, and transition of cybersecurity technology, with an emphasis on research and development relevant to attacks that would cause a debilitating impact on national security, economic security, or public health and safety.

Authorizes the Secretary, to the extent necessary to carry out cybersecurity functions, to: (1) convert competitive service positions to excepted service, or establish new excepted service positions, within the Office of Cybersecurity and Communications; (2) provide additional forms of compensation for such positions; and (3) pay bonuses to retain essential personnel.

Establishes the National Information Sharing Organization as a not-for-profit organization for sharing cyber threat information, exchanging technical assistance, advice, and support, and developing and disseminating necessary information security technology among private sector systems, educational institutions, state, local, and tribal governments, and the federal government. Directs the Secretary, in conjunction with the Director of National Intelligence, to facilitate the sharing of classified and declassified federal agency information related to threats to information networks with cleared members of the Organization. Authorizes: (1) a cybersecurity provider, with the express consent of a protected entity, to use cybersecurity systems to identify and obtain cyber threat information to protect such entity's rights and property; and (2) such entity to share such information with the Organization. Exempts the exchange of information between private sector members of the Organization in furtherance of Organization activities from antitrust prohibitions.

Authorizes the Secretary to provide advisories, alerts, and warnings to relevant companies, targeted sectors, other government entities, or the general public regarding potential threats to information networks.

]]> 18 2012-07-11 Reported to House amended, Part I 2012-07-25T13:40:38Z Promoting and Enhancing Cybersecurity and Information Sharing Effectiveness Act of 2012 or the PRECISE Act of 2012 - (Sec. 2) Amends the Homeland Security Act of 2002 to direct the Secretary of Homeland Security (DHS) to perform necessary activities to facilitate the protection of federal systems and to assist critical infrastructure owners and operators, upon request, in protecting their critical infrastructure information systems, including by: (1) conducting risk assessments and providing technical assistance; (2) assisting in fostering the development of essential information security technologies and capabilities for protecting federal systems and critical infrastructure information systems; (3) assisting in efforts to mitigate communications and information technology supply chain vulnerabilities; (4) supporting nationwide awareness and outreach efforts to educate the public; and (5) conducting exercises, simulations, and other activities designed to support and evaluate the national cyber incident response plan.

Directs the Secretary, at the direction of the Office of Management and Budget (OMB), to: (1) conduct targeted risk assessments and operational evaluations for federal systems, which may include threat, vulnerability, and impact assessments and penetration testing; (2) provide for the use of consolidated intrusion detection, prevention, or other protective capabilities and associated countermeasures for the purpose of protecting federal systems from cybersecurity threats; (3) assess and foster the development of information security technologies and capabilities for use and dissemination through DHS and to be made available across multiple agencies; (4) designate an entity within DHS to receive reports and information about cybersecurity incidents, threats, and vulnerabilities affecting federal systems; and (5) provide incident detection, analysis, mitigation, and response information and remote or on-site technical assistance for federal systems.

Authorizes the Secretary to acquire, intercept, retain, use, and disclose communications and other system traffic transiting to or from, or stored on, federal systems and to deploy countermeasures with regard to such communications and system traffic for cybersecurity purposes (cybersecurity operational activities) if the Secretary certifies that: (1) such acquisitions, interceptions, and countermeasures are reasonably necessary for protecting federal systems from cybersecurity threats; (2) the content of communications will be collected and retained only when the communication is associated with a known or reasonably suspected cybersecurity threat and communications and system traffic will not be subject to the operation of a countermeasure unless associated with such threats; (3) information obtained pursuant to cybersecurity operational activities will only be retained, used, or disclosed to protect federal systems from cybersecurity threats, to mitigate against such threats, or for law enforcement purposes with the Attorney General's approval when the information is evidence of a crime; (4) notice has been provided to users of federal systems concerning the potential for acquisition, interception, retention, use, and disclosure of communications and other system traffic; and (5) such activities are implemented pursuant to policies and procedures that have been reviewed and approved by the Attorney General.

Authorizes the Secretary to contract with, or request and obtain the assistance of, private entities that provide electronic communication or cybersecurity services to acquire, intercept, retain, use, and disclose communications and other system traffic. Authorizes agencies to permit the Secretary, or a private entity assisting the Secretary, to acquire, intercept, retain, use, or disclose communications, system traffic, records, or other information transiting to or from, or stored on, a federal system for the purpose of protecting federal systems from cybersecurity threats or mitigating such threats in connection with cybersecurity activities.

Provides that no otherwise privileged communication obtained in accordance with, or in violation of, such activities shall lose its privileged character.

Directs the Secretary to designate a lead cybersecurity official within DHS to provide leadership to the cybersecurity activities of DHS and to ensure that DHS's cybersecurity activities are coordinated with all other DHS infrastructure protection and cybersecurity programs and activities.

Directs the Secretary, in carrying out cybersecurity activities, to: (1) coordinate with relevant federal agencies, state and local government representatives, critical infrastructure owners and operators, suppliers of technology for such owners and operators, academia, and international organizations and foreign partners; and (2) develop and maintain a strategy that articulates DHS actions necessary to assure the readiness, reliability, continuity, integrity, and resilience of federal systems and critical infrastructure information systems. Requires such strategy to: (1) foster the continued superiority and reliability of the U.S. information technology and communications sectors, and (2) ensure that DHS activities are undertaken in a manner that protects statutory privacy rights and civil liberties of U.S. persons.

Requires the Privacy Officer of DHS to review on an ongoing basis, and prepare privacy impact assessments on, the cybersecurity policies, programs, and activities of DHS to ensure compliance with constitutional and legal protections.

Authorizes the Secretary, in order to assure that DHS has the necessary resources to carry out such cybersecurity activities, to: (1) convert competitive service positions to excepted service or establish new excepted service positions within the Office of Cybersecurity and Communications, to carry out cybersecurity functions; and (2) fix compensation for such positions, provide additional forms of compensation, and pay a retention bonus as needed to retain essential personnel. Directs the Secretary to submit to appropriate congressional committees a detailed report that includes: (1) a discussion of the Secretary's use of such flexible authority to recruit and retain qualified employees, (2) metrics on relevant personnel actions, and (3) long- and short-term strategic goals to address critical skills deficiencies.

(Sec. 3) Directs the Secretary to make appropriate cyber threat information obtained by DHS pursuant to National Security Act of 1947 or other information appropriately in the possession of DHS available to appropriate owners and operators of critical infrastructure on a timely basis consistent with the statutory and other appropriate restrictions on the dissemination of such information and with the Secretary's responsibilities under the Homeland Security Act of 2002.

Establishes within DHS the National Cybersecurity and Communications Integration Center, which shall be the primary entity within DHS for sharing timely cyber threat information and exchanging technical assistance, advice, and support with appropriate entities pursuant to DHS's authorities. Requires the Center to have a board of advisors which shall advise the Secretary on Center operations and act as an advocate on behalf of the private sector in improving such operations. Requires the Secretary to develop a charter to govern the operations and administration of the Center, including procedures for making cyber incident information available to outside groups for academic research and insurance actuarial purposes.

Authorizes the Secretary to provide advisories, alerts, and warnings to relevant companies, targeted sectors, other government entities, or the general public regarding potential cybersecurity threats as appropriate.

Authorizes appropriations for FY2013-FY2015 for the administration and management of the Center.

(Sec. 4) Directs the Under Secretary for Science and Technology to support research, development, testing, evaluation, and transition of cybersecurity technology to improve the ability of the United States to prevent, protect against, detect, respond to, and recover from acts of terrorism and cyber attacks, with an emphasis on attacks that would cause a debilitating impact on national security, national economic security, or national public health and safety, including work to: (1) advance the development and deployment of more secure versions of fundamental Internet protocols and architectures; (2) improve, create, and advance the research and development of techniques and technologies for proactive detection and identification of threats, attacks, and terrorist acts before they occur; (3) advance technologies for detecting attacks or intrusions; (4) improve and create mitigation and recovery methodologies; (5) develop and support infrastructure and tools to support cybersecurity research and development efforts; (6) assist in the development and support of technologies to reduce vulnerabilities in process control systems; (7) develop and support cyber forensics and attack attribution; (8) test, evaluate, and facilitate the transfer of technologies associated with the engineering of less vulnerable software and securing the information technology software development life cycle; (9) ensure new cybersecurity technology is scientifically and operationally validated; and (10) facilitate the planning, development, and implementation of international cooperative activities to address cybersecurity and energy infrastructure with specified foreign entities.

Directs the Under Secretary to coordinate all activities with: (1) the Under Secretary for National Protection and Programs Directorate; and (2) the heads of other relevant federal departments and agencies, academic institutions, the Networking and Information Technology Research and Development Program, and other appropriate working groups established by the President to identify unmet needs and cooperatively support activities.

(Sec. 5) Directs the Secretary to submit a report on support DHS might provide to regional, state, and local grass roots cyber cooperatives, including an analysis of progress in establishing the NET Guard authorized under the Homeland Security Act to build a national technology guard for cyber response capabilities and an assessment of whether a grant process for pilot regional, state, or local cyber cooperatives would be beneficial.

(Sec. 6) Authorizes the Secretary to establish a Cybersecurity Domestic Preparedness Consortium to: (1) provide training to state and local first responders and officials for preparing for and responding to cybersecurity attacks, (2) develop and update a curriculum utilizing the DHS National Cyber Security Division sponsored Community Cyber Security Maturity Model for state and local first responders and officials, (3) provide technical assistance services to build and sustain capabilities in support of cybersecurity preparedness and response, and (4) conduct cybersecurity training and simulation exercises to defend from and respond to cyber attacks.

Authorizes the Secretary, as part of the Consortium, to establish one or more cybersecurity training centers. Requires the Consortium to develop a plan to implement as one of the centers a one-year voluntary pilot program to test and assess the feasibility, costs, and benefits of providing cybersecurity training to state and local law enforcement personnel through the national network of fusion centers. Directs the Secretary to implement a one-year voluntary pilot program to train state and local law enforcement personnel in the national network of fusion centers in cyber security standards, procedures, and best practices.

]]> PRECISE Act of 2012 Short Titles as Introduced Promoting and Enhancing Cybersecurity and Information Sharing Effectiveness Act of 2011 Short Titles as Introduced PRECISE Act of 2011 Short Titles as Reported to House PRECISE Act of 2012 H House Short Titles as Reported to House Promoting and Enhancing Cybersecurity and Information Sharing Effectiveness Act of 2012 H House Display Title PRECISE Act of 2012 Official Title as Introduced To amend the Homeland Security Act of 2002 to make certain improvements in the laws relating to cybersecurity, and for other purposes. Reported in House 2012-09-21T04:00:00Z https://www.govinfo.gov/content/pkg/BILLS-112hr3674rh/xml/BILLS-112hr3674rh.xml Introduced in House 2011-12-15T05:00:00Z https://www.govinfo.gov/content/pkg/BILLS-112hr3674ih/xml/BILLS-112hr3674ih.xml 2012-09-21 Placed on the Union Calendar, Calendar No. 501. text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain. Congressional Research Service, Library of Congress This file contains bill summaries and statuses for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.