117th CONGRESS 2d Session |
To require a report on cybersecurity roles and responsibilities of the Department of Homeland Security, and for other purposes.
December 14, 2022
Mr. Bacon introduced the following bill; which was referred to the Committee on Homeland Security
To require a report on cybersecurity roles and responsibilities of the Department of Homeland Security, and for other purposes.
Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled,
This Act may be cited as the “Homeland Security Cyber Incident Response Roles and Responsibilities Act of 2022”.
SEC. 2. Report on cybersecurity roles and responsibilities of the Department of Homeland Security.
(a) In general.—Not later than one year after the date of the enactment of this Act, the Secretary of Homeland Security, in coordination with the Director of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security, shall submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report on the roles and responsibilities of the Department and its components relating to cyber incident response.
(b) Contents.—The report required under subsection (a) shall include the following:
(1) A review of how the cyber incident response plans under section 2210(c) of the Homeland Security Act of 2002 (6 U.S.C. 660(c)) are utilized in the Federal Government’s response to a cyber incident.
(2) An explanation of the roles and responsibilities of the Department of Homeland Security and its components with responsibility for, or in support of, the Federal Government’s response to a cyber incident, including primary responsibility for working with impacted private sector entities.
(3) An explanation of which and how authorities of the Department and its components are utilized in the Federal Government’s response to a cyber incident.
(4) Recommendations to provide further clarity for roles and responsibilities of the Department and its components relating to cyber incident response.