3.0.0 3286 2025-05-27T14:15:36Z 2025-05-27T14:15:36Z House H HR 2023-05-15 118 <pre>[Congressional Record Volume 169, Number 81 (Monday, May 15, 2023)][House]From the Congressional Record Online through the Government Publishing Office [<a href="https://www.gpo.gov">www.gpo.gov</a>]By Mr. GREEN of Tennessee:H.R. 3286.Congress has the power to enact this legislation pursuantto the following:Article I, Section 8 of the U.S. ConstitutionThe single subject of this legislation is:To improve open source software security[Page H2347]</pre> hsgo00 Oversight and Government Reform Committee House Standing Discharged From 2023-07-27T19:24:47Z Referred To 2023-05-15T16:07:45Z hshm00 Homeland Security Committee House Standing Reported By 2023-07-27T19:24:37Z Markup By 2023-05-17T17:51:51Z Referred To 2023-05-15T16:07:40Z H. Rept. 118-160 2023-07-27 Placed on the Union Calendar, Calendar No. 127. Calendars H12410 2 House floor actions U00127 2023-07-27 Committee on Oversight and Accountability discharged. Discharge H12300 2 House floor actions hsgo00 Oversight and Government Reform Committee 2023-07-27 Committee on Oversight and Accountability discharged. Committee 5500 9 Library of Congress hsgo00 Oversight and Government Reform Committee 2023-07-27 Reported (Amended) by the Committee on Homeland Security. H. Rept. 118-160, Part I. Committee H12200 2 House floor actions hshm00 Homeland Security Committee 2023-07-27 Reported (Amended) by the Committee on Homeland Security. H. Rept. 118-160, Part I. Committee 5000 9 Library of Congress hshm00 Homeland Security Committee 2023-05-17 hshm00 Homeland Security Committee 1 House committee actions Ordered to be Reported (Amended) by Voice Vote. Committee 2023-05-17 hshm00 Homeland Security Committee 1 House committee actions Committee Consideration and Mark-up Session Held. Committee 2023-05-15 Referred to the Committee on Homeland Security, and in addition to the Committee on Oversight and Accountability, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned. IntroReferral H11100 2 House floor actions hsgo00 Oversight and Government Reform Committee 2023-05-15 Referred to the Committee on Homeland Security, and in addition to the Committee on Oversight and Accountability, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned. IntroReferral H11100 2 House floor actions hshm00 Homeland Security Committee 2023-05-15 Introduced in House IntroReferral Intro-H 9 Library of Congress 2023-05-15 Introduced in House IntroReferral 1000 9 Library of Congress G000590 Rep. Green, Mark E. [R-TN-7] Mark Green R TN E. 7 N G000597 Rep. Garbarino, Andrew R. [R-NY-2] Andrew Garbarino R NY R. 2 2023-05-15 True S001193 Rep. Swalwell, Eric [D-CA-14] Eric Swalwell D CA 14 2023-05-15 True L000598 Rep. LaLota, Nick [R-NY-1] Nick LaLota R NY 1 2023-05-18 False 2023-05-23T12:56:00Z https://www.cbo.gov/publication/59185 As ordered reported by the House Committee on Homeland Security on May 17, 2023 2023-05-23T12:56:00Z https://www.cbo.gov/publication/59185 As ordered reported by the House Committee on Homeland Security on May 17, 2023 Government Operations and Politics Computer security and identity theft 2023-06-08T19:15:21Z Computers and information technology 2023-06-08T19:15:21Z Congressional oversight 2023-06-08T19:15:21Z Department of Homeland Security 2023-06-08T19:15:21Z Federal officials 2023-06-08T19:15:21Z Government information and archives 2023-06-08T19:15:21Z Government studies and investigations 2023-06-08T19:15:21Z Performance measurement 2023-06-08T19:15:21Z Government Operations and Politics 2023-06-02T14:07:50Z

00 2023-05-15 Introduced in House 2023-12-20T17:15:19Z <p><strong>Securing Open Source Software Act of 2023</strong></p> <p>This bill sets forth the duties of the Cybersecurity and Infrastructure Security Agency (CISA) regarding open source software security.</p> <p><em>Open source software</em> means software for which the human-readable source code is made available to the public for use, study, reuse, modification, enhancement, and redistribution.</p> <p>Specifically, CISA must</p> <ul> <li>perform outreach and engagement to bolster the security of open source software; </li> <li> support federal efforts to strengthen open source software security; </li> <li> coordinate with nonfederal entities on efforts to ensure long-term open source software security; </li> <li> serve as a public point of contact regarding open source software security for nonfederal entities; and </li> <li> support federal and nonfederal supply chain security efforts by encouraging efforts to bolster open source software security.</li> </ul> <p>CISA must (1) publish a framework, incorporating government, private sector, and open source software community frameworks and best practices, for assessing the risk of open source software components; (2) update the framework at least annually; and (3) ensure, to the greatest extent practicable, that the framework is usable by the open source software community.</p> <p>The bill requires CISA to assess open source software components used by federal agencies based on the framework and provides for a pilot assessment of critical infrastructure.</p> <p>CISA's Cybersecurity Advisory Committee may establish a software security subcommittee.</p>

08 2023-07-27 Reported to House, Part I 2024-01-10T19:46:12Z <p><strong>Securing Open Source Software Act of 2023</strong></p> <p>This bill sets forth the duties of the Cybersecurity and Infrastructure Security Agency (CISA) regarding open source software security.</p> <p><em>Open source software</em> means software for which the human-readable source code is made available to the public for use, study, reuse, modification, enhancement, and redistribution.</p> <p>Specifically, CISA must</p> <ul> <li>perform outreach and engagement to bolster the security of open source software; </li> <li> support federal efforts to strengthen open source software security; </li> <li> coordinate with nonfederal entities on efforts to ensure long-term open source software security; </li> <li> serve as a public point of contact regarding open source software security for nonfederal entities; and </li> <li> support federal and nonfederal supply chain security efforts by encouraging efforts to bolster open source software security.</li> </ul> <p>CISA must (1) publish a framework, incorporating government, private sector, and open source software community frameworks and best practices, for assessing the risk of open source software components; (2) update the framework at least annually; and (3) ensure, to the greatest extent practicable, that the framework is usable by the open source software community.</p> <p>The bill requires CISA to assess open source software components deployed on high value assets at federal agencies based on the framework and provides for a pilot assessment of critical infrastructure.</p> <p>CISA's Cybersecurity Advisory Committee may establish a software security subcommittee.</p>

Display Title 45 2024-07-24T15:21:20Z Short Title(s) as Introduced 101 2024-05-24T13:39:53Z Introduced in House IH Short Title(s) as Reported to House 102 2024-05-24T13:38:16Z H House Reported in House RH Official Title as Introduced 6 2024-03-18T21:15:42Z Introduced in House IH Reported in House 2023-07-27T04:00:00Z https://www.govinfo.gov/content/pkg/BILLS-118hr3286rh/xml/BILLS-118hr3286rh.xml Introduced in House 2023-05-15T04:00:00Z https://www.govinfo.gov/content/pkg/BILLS-118hr3286ih/xml/BILLS-118hr3286ih.xml 2023-07-27 Placed on the Union Calendar, Calendar No. 127. text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain. Congressional Research Service, Library of Congress This file contains bill summaries and statuses for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.