3.0.0 6066 2023-01-11T13:33:47Z 2023-01-11T13:33:47Z House HR 2016-09-19 114 [Congressional Record Volume 162, Number 141 (Monday, September 19, 2016)]From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]By Mr. ABRAHAM:H.R. 6066.Congress has the power to enact this legislation pursuantto the following:Article I, Section 8, Clause 3:The Congress shall have power to regulate commerce withforeign nations, and among the several states, and withIndian tribes.andArticle I, Section 8, Clause 18:The Congress shall have power to make all Laws which shallbe necessary and proper for carrying into Execution theforegoing Powers, and all other Powers vested by thisConstitution in the Government of the United States, or inany Department of Officer thereof.[Page H5644]]]> hssy00 Science, Space, and Technology Committee House Standing Markup by 2016-09-21T14:28:50Z Referred to 2016-09-19T18:00:34Z hsgo00 Oversight and Accountability Committee House Standing Referred to 2016-09-19T18:00:29Z 2016-09-21 hssy00 Science, Space, and Technology Committee 1 House committee actions Ordered to be Reported by Voice Vote. Committee 2016-09-21 hssy00 Science, Space, and Technology Committee 1 House committee actions Committee Consideration and Mark-up Session Held. Committee 2016-09-19 Referred to the Committee on Oversight and Government Reform, and in addition to the Committee on Science, Space, and Technology, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned. IntroReferral H11100 2 House floor actions hssy00 Science, Space, and Technology Committee 2016-09-19 Referred to the Committee on Oversight and Government Reform, and in addition to the Committee on Science, Space, and Technology, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned. IntroReferral H11100-A 9 Library of Congress 2016-09-19 Referred to the Committee on Oversight and Government Reform, and in addition to the Committee on Science, Space, and Technology, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned. IntroReferral H11100 2 House floor actions hsgo00 Oversight and Accountability Committee 2016-09-19 Introduced in House IntroReferral Intro-H 9 Library of Congress 2016-09-19 Introduced in House IntroReferral 1000 9 Library of Congress A000374 Rep. Abraham, Ralph Lee [R-LA-5] Ralph Abraham R LA Lee 5 N S000583 Rep. Smith, Lamar [R-TX-21] LAMAR SMITH R TX 21 2016-09-19 True C001105 Rep. Comstock, Barbara [R-VA-10] Barbara Comstock R VA 10 2016-09-20 False K000387 Rep. Knight, Stephen [R-CA-25] Stephen Knight R CA 25 2016-09-21 False Science, Technology, Communications Science, Technology, Communications 00 2016-09-19 Introduced in House 2016-11-09T19:50:38Z Cybersecurity Responsibility and Accountability Act of 2016

This bill requires the National Institute of Standards and Technology (NIST) to incorporate additional cybersecurity requirements in its computer standards for agency information systems and provide the Office of Management and Budget (OMB) with a process for agencies to implement those standards.

NIST must also: (1) support development of information security training and certification for agency heads, (2) address agency-identified information security challenges and knowledge gaps, (3) assess information security statutory requirements, and (4) develop security standards for national security systems.

The OMB must require the heads of agencies (currently, agencies generally) to: (1) report on the adequacy of their information security procedures, (2) provide for independent evaluations of information security practices, and (3) notify Congress and affected individuals of data breaches. Intelligence community agencies affected by data breaches must notify NIST.

Chief information officers of agencies must collaborate with their agency head to designate chief information security officers (positions with job responsibilities to be developed by the OMB and NIST) to replace their current senior agency information security officers.

Agencies must develop mandatory annual information security training and certification to ensure that agency heads understand federal cybersecurity policy regarding: (1) agency systems, (2) cyber-attacks and data breaches, and (3) not using private email servers or messaging systems for official communications.

Agency heads must certify that their agencies meet information security standards and provide reasons for not meeting any standards.

Agency heads must also develop annual plans to implement information security recommendations of the Government Accountability Office (GAO) and inspectors general. If an agency head fails to implement such a recommendation, the reasons for the failure must be provided to the OMB for approval.

For each OMB-defined "major cybersecurity incident" (e.g., an incident involving classified information) that an agency experiences, the agency head must transmit an inspector general-performed independent evaluation to the OMB, the Department of Homeland Security, NIST, Congress, and the GAO. If the evaluation determines that the incident occurred because the agency head failed to comply sufficiently with NIST certification standards or recommendations of the GAO or agency inspectors general, then the OMB must hold the agency head accountable through an enforcement action, which may include actions under the budgetary or appropriations process, a recommendation for the President to remove or demote the agency head, or actions to ensure that the agency head does not receive cash or pay awards or bonuses for one year.

]]> Cybersecurity Responsibility and Accountability Act of 2016 Display Title Cybersecurity Responsibility and Accountability Act of 2016 Official Title as Introduced To enforce Federal cybersecurity responsibility and accountability. Introduced in House IH Short Titles as Introduced Cybersecurity Responsibility and Accountability Act of 2016 Introduced in House 2016-09-19T04:00:00Z https://www.govinfo.gov/content/pkg/BILLS-114hr6066ih/xml/BILLS-114hr6066ih.xml 2016-09-21 Ordered to be Reported by Voice Vote. text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain. Congressional Research Service, Library of Congress This file contains bill summaries and statuses for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.