Bill

Bill > S3045


US S3045

Cybersecurity Vulnerability Identification and Notification Act of 2019 Cybersecurity Vulnerability Identification and Notification Act of 2020


summary

Introduced
12/12/2019
In Committee
03/11/2020
Crossed Over
Passed
Dead
12/31/2020

Introduced Session

116th Congress

Bill Summary

A bill to amend the Homeland Security Act of 2002 to protect United States critical infrastructure by ensuring that the Cybersecurity and Infrastructure Security Agency has the legal tools it needs to notify private and public sector entities put at risk by cybersecurity vulnerabilities in the networks and systems that control critical assets of the United States. This bill authorizes the Department of Homeland Security (DHS) to issue a subpoena for the production of information to identify and notify an entity that is put at risk by cybersecurity vulnerabilities. Specifically, the bill requires the DHS Cybersecurity and Infrastructure Security Agency (CISA) to detect, identify, and receive information about security vulnerabilities relating to critical infrastructure in the information systems and devices of public and private entities. To do this, the bill authorizes CISA, upon identification of a system determined to have such a security vulnerability, to issue a subpoena for the production of information that is necessary to identify and notify the at-risk entity.

AI Summary

This bill amends the Homeland Security Act of 2002 to authorize the Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) to issue subpoenas to identify and notify entities at risk from cybersecurity vulnerabilities in critical infrastructure systems and devices. Specifically, the bill allows CISA to subpoena information necessary to detect, identify, and receive information about security vulnerabilities in the information systems and devices of federal and non-federal entities. CISA must coordinate the issuance of subpoenas with the Department of Justice and establish internal procedures for protecting and restricting the dissemination of non-public information obtained through the subpoenas. The bill also requires CISA to annually report to Congress on its use of the subpoena authority.

Committee Categories

Military Affairs and Security

Sponsors (4)

Last Action

Placed on Senate Legislative Calendar under General Orders. Calendar No. 500. (on 07/29/2020)

bill text


bill summary

Loading...

bill summary

Loading...
Loading...