3.0.0 2105 2019-02-20T23:25:38Z 2022-05-20T16:27:20Z Senate S S 2012-02-14 112 ssga00 Homeland Security and Governmental Affairs Committee Senate Standing Hearings by 2012-02-16T23:01:00Z Cybersecurity Information Sharing Act of 2012 112 2102 S 2012-02-13 Read twice and referred to the Committee on Homeland Security and Governmental Affairs. Related bill CRS SECURE IT 112 2151 S 2012-03-01 Read twice and referred to the Committee on Commerce, Science, and Transportation. Related bill CRS CSA2012 112 3414 S 2012-11-14 Upon reconsideration, cloture on the bill not invoked in Senate by Yea-Nay Vote. 51 - 47. Record Vote Number: 202. (consideration: CR S6784; text: CR S6784) Related bill CRS 2012-02-16 ssga00 Homeland Security and Governmental Affairs Committee Senate Committee on Homeland Security and Governmental Affairs. Hearings held. Hearings printed: S.Hrg. 112-524. Committee 2012-02-15 Senate Read the second time. Placed on Senate Legislative Calendar under General Orders. Calendar No. 323. Calendars 2012-02-14 Senate Introduced in the Senate. Read the first time. Placed on Senate Legislative Calendar under Read the First Time. Calendars 2012-02-14 Sponsor introductory remarks on measure. (CR S616-618) IntroReferral B00100 9 Library of Congress 2012-02-14 Introduced in Senate IntroReferral 10000 9 Library of Congress L000304 Sen. Lieberman, Joseph I. [ID-CT] JOSEPH LIEBERMAN ID CT I. N C001035 Sen. Collins, Susan M. [R-ME] Susan Collins R ME M. 2012-02-14 True R000361 Sen. Rockefeller, John D., IV [D-WV] JAY ROCKEFELLER D WV 2012-02-14 True F000062 Sen. Feinstein, Dianne [D-CA] Dianne Feinstein D CA 2012-02-14 True W000802 Sen. Whitehouse, Sheldon [D-RI] Sheldon Whitehouse D RI 2012-02-15 False Government Operations and Politics Administrative law and regulatory procedures Advanced technology and technological innovations Civil actions and liability Computer security and identity theft Computers and information technology Congressional oversight Criminal investigation, prosecution, interrogation Criminal justice information and records Department of Homeland Security Director of National Intelligence Electric power generation and transmission Elementary and secondary education Emergency communications systems Executive agency funding and structure Federal preemption Foreign aid and international relief Government employee pay, benefits, personnel management Government information and archives Higher education Homeland security Infrastructure development Intelligence activities, surveillance, classified information International organizations and cooperation Performance measurement Public contracts and procurement Public-private cooperation Research administration and funding Research and development Right of privacy Science and engineering education Student aid and college costs Teaching, teachers, curricula Technology assessment Government Operations and Politics 00 2012-02-14 Introduced in Senate 2012-03-12T15:31:23Z Cybersecurity Act of 2012 - Directs the Secretary of Homeland Security (DHS), in consultation with owners and operators of critical infrastructure, the Critical Infrastructure Partnership Advisory Council, and other federal agencies and private sector entities, to: (1) to conduct a top-level assessment of cybersecurity risks to determine which sectors face the greatest immediate risk, and beginning with the sectors identified as having the highest priority, conduct, on a sector-by-sector basis, cyber risk assessments of the critical infrastructure; (2) establish a procedure for the designation of critical infrastructure; (3) identify or develop risk-based cybersecurity performance requirements; and (4) implement cyber response and restoration plans. Sets forth requirements for securing critical infrastructure, including notification of cyber risks and threats and reporting of significant cyber incidents affecting critical infrastructure.

Defines "critical infrastructure" as systems and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, or national public health or safety.

Amends the Federal Information Security Management Act of 2002 (FISMA) to revise information security requirements for federal agencies and provide for continuous monitoring of, and streamlined reporting of, cybersecurity risks.

Amends the Homeland Security Act of 2002 to consolidate existing DHS resources for cybersecurity within a National Center for Cybersecurity and Communications. Sets forth the duties of the Center, including managing efforts to secure, protect, and ensure the resiliency of the federal information infrastructure, supporting private sector efforts to protect such infrastructure, prioritizing efforts to address the most significant risks to the information infrastructure, and ensuring privacy protections.

Requires: (1) the DHS Secretary to implement outreach and awareness programs on cybersecurity; (2) the DHS Secretary and the Secretary of Commerce to establish a program to identify, develop, and recruit talented individuals to work in cybersecurity; (3) the Director of the National Science Foundation (NSF) to establish a program to stimulate innovation in basic cybersecurity research and development and to recruit and train cybersecurity professionals; and (4) the Director of the Office of Personnel Management (OPM) to assess the readiness and capacity of the federal workforce to meet cybersecurity needs and to establish a cybersecurity awareness and education curriculum for all federal employees and contractors.

Requires the Secretary of Education to develop model curriculum standards to address cybersecurity issues for elementary school students and for students in institutions of higher education and career and technical institutions.

Requires federal agencies to adopt OPM best practices for motivating employees to demonstrate leadership in cybersecurity.

Requires the Director of the Office of Science and Technology Policy to develop a national cybersecurity research and development plan to advance the development of new technologies to protect against evolving cyberthreats.

Requires the DHS Secretary to coordinate with private sector and academic experts, the Secretaries of Defense (DOD), Commerce, and State, the Director of National Intelligence (DNI), and other federal agencies to develop and periodically update an acquisition risk management strategy to ensure the security of the federal information infrastructure.

Authorizes private entities to disclose or receive lawfully obtained cybersecurity threat information to protect an information system. Establishes a process to designate cybersecurity exchanges for distributing, receiving, and exchanging cybersecurity threat information. Allows a non-federal entity to disclose lawfully obtained cybersecurity threat information to an exchange. Provides legal protections for entities engaged in cybersecurity monitoring activities, including a good faith defense.

Directs the DHS Secretary and the Secretary of Defense (DOD) to report to Congress annually on major cyber incidents involving networks of executive agencies and military departments. Requires the Attorney General and the Director of the Federal Bureau of Investigation (FBI) to report on investigations and prosecutions of cybercrimes. Requires the Attorney General to report on the ability of federal courts to grant timely relief in matters relating to cybercrime.

Requires the DHS Secretary to report on: (1) available technical options to enhance the security of critical infrastructure, (2) legal or other impediments to public awareness of cybersecurity threats, and (3) the national security implications of a disruption of the U.S. electric grid caused by a cyber attack.

Expresses the sense of Congress with respect to engaging in international cooperation to advance U.S. cyberspace objectives and combat cybercrime. Authorizes the Secretary of State to designate a senior State Department official to coordinate diplomatic efforts on the full range of international cyber issues. Requires the Secretary to assess and report on significant global issues, trends, and actors with respect to cybercrime and to give priority in foreign assistance to programs designed to combat cybercrime.

]]> Cybersecurity Act of 2012 Short Titles as Introduced Cybersecurity Act of 2012 Display Title Cybersecurity Act of 2012 Official Title as Introduced A bill to enhance the security and resiliency of the cyber and communications infrastructure of the United States. Placed on Calendar Senate 2012-02-15T05:00:00Z https://www.govinfo.gov/content/pkg/BILLS-112s2105pcs/xml/BILLS-112s2105pcs.xml 2012-02-16 Committee on Homeland Security and Governmental Affairs. Hearings held. Hearings printed: S.Hrg. 112-524. text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain. Congressional Research Service, Library of Congress This file contains bill summaries and statuses for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.