3.0.0 2481 2023-01-11T13:36:44Z 2023-01-11T13:36:44Z House HR 2017-05-17 115 [Congressional Record Volume 163, Number 85 (Wednesday, May 17, 2017)]From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]By Mr. TED LIEU of California:H.R. 2481.Congress has the power to enact this legislation pursuantto the following:Article 1, Section 8[Page H4311]]]> hsgo00 Oversight and Accountability Committee House Standing Referred to 2017-05-17T14:01:45Z PATCH Act of 2017 115 1157 S 2017-05-17 Read twice and referred to the Committee on Homeland Security and Governmental Affairs. Identical bill CRS 2017-05-17 Referred to the House Committee on Oversight and Government Reform. IntroReferral H11100 2 House floor actions hsgo00 Oversight and Accountability Committee 2017-05-17 Introduced in House IntroReferral Intro-H 9 Library of Congress 2017-05-17 Introduced in House IntroReferral 1000 9 Library of Congress L000582 Rep. Lieu, Ted [D-CA-33] Ted Lieu D CA 33 N F000460 Rep. Farenthold, Blake [R-TX-27] Blake Farenthold R TX 27 2017-05-17 True S000480 Rep. Slaughter, Louise McIntosh [D-NY-25] LOUISE SLAUGHTER D NY M. 25 2017-10-04 False K000381 Rep. Kilmer, Derek [D-WA-6] Derek Kilmer D WA 6 2017-10-04 False Government Operations and Politics Computer security and identity theft Executive agency funding and structure Government information and archives Government studies and investigations Intelligence activities, surveillance, classified information Public contracts and procurement Government Operations and Politics 00 2017-05-17 Introduced in House 2017-11-29T21:08:21Z Protecting Our Ability to Counter Hacking Act of 2017 or the PATCH Act of 2017

This bill establishes the Vulnerability Equities Review Board to establish and make available to the public policies on matters relating to whether, when, how, to whom, and to what degree information about a vulnerability in a technology, product, system, service, or application that is not publicly known should be shared or released by the government to a non-federal entity. The board must submit to Congress and the President a draft of such policies, along with a description of challenges or impediments requiring legislative or administrative action.

Each federal agency shall, upon obtaining information about such a vulnerability, subject such information to a process established by the board for sharing or releasing the information. Process considerations shall include:

  • which technologies, products, systems, services, or applications are subject to the vulnerability;
  • the potential risks of leaving the vulnerability unpatched or unmitigated;
  • the likelihood that a non-federal entity will discover the vulnerability; and
  • whether the vulnerability can be patched or otherwise mitigated.

An agency may share or release such information to a non-federal entity without subjecting it to such process if the agency determines that the information is presumptively shareable or releasable.

If the board determines that such information should be shared with or released to the vendor that developed or maintains the technology, it shall provide the information to the Department of Homeland Security, which shall share or release the information as directed by the board.

]]> Protecting Our Ability to Counter Hacking Act of 2017 Display Title Protecting Our Ability to Counter Hacking Act of 2017 Official Title as Introduced To establish the Vulnerability Equities Review Board, and for other purposes. Introduced in House IH Short Titles as Introduced Protecting Our Ability to Counter Hacking Act of 2017 Short Titles as Introduced PATCH Act of 2017 Introduced in House 2017-05-17T04:00:00Z https://www.govinfo.gov/content/pkg/BILLS-115hr2481ih/xml/BILLS-115hr2481ih.xml 2017-05-17 Referred to the House Committee on Oversight and Government Reform. text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain. Congressional Research Service, Library of Congress This file contains bill summaries and statuses for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.