3.0.0
2902
2023-08-03T19:45:17Z
2023-08-03T19:45:17Z
Senate
S
2021-09-29
117
- ssga00
Homeland Security and Governmental Affairs Committee
Senate
Standing
  - Reported by
2022-12-19T22:26:21Z
  - Markup by
2021-10-06T14:15:57Z
  - Referred to
2021-09-29T22:08:34Z
S. Rept. 117-274

- Federal Information Security Modernization Act of 2022
117
6497
HR
2022-02-02
Ordered to be Reported (Amended) by Voice Vote.
  - Related bill
CRS
- 2022-12-19
Senate
Placed on Senate Legislative Calendar under General Orders. Calendar No. 673.
Calendars
- 2022-12-19
  - ssga00
Homeland Security and Governmental Affairs Committee
Senate
Committee on Homeland Security and Governmental Affairs. Reported by Senator Peters with an amendment in the nature of a substitute. With written report No. 117-274.
Committee
- 2022-12-19
Committee on Homeland Security and Governmental Affairs. Reported by Senator Peters with an amendment in the nature of a substitute. With written report No. 117-274.
Committee
14000
9
Library of Congress
  - ssga00
Homeland Security and Governmental Affairs Committee
- 2021-10-06
  - ssga00
Homeland Security and Governmental Affairs Committee
Senate
Committee on Homeland Security and Governmental Affairs. Ordered to be reported with an amendment in the nature of a substitute favorably.
Committee
- 2021-09-29
  - ssga00
Homeland Security and Governmental Affairs Committee
Senate
Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
IntroReferral
- 2021-09-29
Introduced in Senate
IntroReferral
10000
9
Library of Congress
- P000595
Sen. Peters, Gary C. [D-MI]
Gary
Peters
D
MI
N
- P000449
Sen. Portman, Rob [R-OH]
Rob
Portman
R
OH
2021-09-29
True
- C000174
Sen. Carper, Thomas R. [D-DE]
Thomas
Carper
D
DE
R.
2021-10-20
False
- 2022-11-09T16:16:00Z

S. 2902, Federal Information Security Modernization Act of 2021
https://www.cbo.gov/publication/58720
As ordered reported by the Senate Committee on Homeland Security and Government Affairs on October 6, 2021
Government Operations and Politics
- Computer security and identity theft
- Congressional oversight
- Department of Homeland Security
- Employment and training programs
- Government employee pay, benefits, personnel management
- Government information and archives
- Government studies and investigations
- Performance measurement
- Right of privacy
- Technology assessment
Government Operations and Politics
00
2021-09-29
Introduced in Senate
2022-03-01T22:44:11Z
Federal Information Security Modernization Act of 2021
This bill addresses federal information security management, notification and remediation of cybersecurity incidents, and the role of the Office of Management and Budget (OMB) and the Cybersecurity and Infrastructure Security Agency (CISA).
The OMB and CISA must perform, on an ongoing and continuous basis, assessments of federal risk posture. The bill requires annual evaluation by each agency of whether additional cybersecurity procedures are appropriate.
An agency, within 30 days of concluding that a major incident has occurred due to a high risk exposure of personal identifiable information, must provide notification to the last known home mailing address of each individual whom the incident may have impacted. Notification may be delayed under specified circumstances.
Each agency must provide any information relating to an incident to CISA, the OMB, the Office of the National Cyber Director, the Government Accountability Office, and Congress. An agency's contractors and grant recipients must immediately notify the agency of an incident involving federal information.
Each agency shall develop training for individuals at the agency with access to federal information or information systems on how to identify and respond to an incident.
The OMB and CISA must (1) develop and promulgate guidance on the definition of major incident, and (2) develop a framework for prioritizing federal penetration testing resources among agencies. CISA must establish a program to provide ongoing, hypothesis-driven threat-hunting services on the network of each agency.
The bill establishes specified pilot programs to enhance federal cybersecurity.
25
2022-12-19
Reported to Senate
2023-08-03T19:38:54Z
Federal Information Security Modernization Act of 2021
This bill addresses federal information security management, notification and remediation of cybersecurity incidents.
For example, the bill requires (1) the Cybersecurity and Infrastructure Security Agency to perform ongoing and continuous assessments of federal information security risk posture; and (2) federal agencies to take certain actions in response to information security breaches, such as notifying affected individuals.

Federal Information Security Modernization Act of 2021
- Official Title as Introduced

A bill to modernize Federal information security management, and for other purposes.
Introduced in Senate
IS
- Display Title

Federal Information Security Modernization Act of 2021
- Short Title(s) as Reported to Senate

Federal Information Security Modernization Act of 2021
S
Senate
Reported to Senate
RS
- Short Title(s) as Introduced

Federal Information Security Modernization Act of 2021
Introduced in Senate
IS
- Reported to Senate
2022-12-19T05:00:00Z
  - https://www.govinfo.gov/content/pkg/BILLS-117s2902rs/xml/BILLS-117s2902rs.xml
- Introduced in Senate
2021-09-29T04:00:00Z
  - https://www.govinfo.gov/content/pkg/BILLS-117s2902is/xml/BILLS-117s2902is.xml
2022-12-19
Placed on Senate Legislative Calendar under General Orders. Calendar No. 673.
text/xml
EN
Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.
Congressional Research Service, Library of Congress
This file contains bill summaries and statuses for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.