Bill > HR3286

This bill amends the Homeland Security Act of 2002 to establish the duties of the Director of the Cybersecurity and Infrastructure Security Agency (CISA) regarding open source software security. The key provisions include: 1) defining "open source software" and "open source software community"; 2) requiring CISA to support the secure usage and deployment of software, including open source software, in the software development lifecycle at federal agencies; 3) requiring the CISA Director to perform outreach and engagement to bolster the security of open source software, coordinate with non-federal entities on open source software security, and support federal and non-federal supply chain security efforts; 4) requiring the CISA Director to develop a framework for assessing the risk of open source software components and conduct assessments of open source software components deployed on federal high-value assets; and 5) requiring the CISA Director to report to Congress on their open source software security activities.