,i #aac? ,,congress #b;d ,session ,h4 ,r4 #dcef ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,april #a1 #bjad ,mrs4 ,kirkpatrick 7= h]self & ,mr4 ,mi*aud7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,vet]ans' ,affairs ,a ,,bill ,to am5d title #ch1 ,unit$ ,/ates ,code1 to make c]ta9 improvem5ts 9 ! in=mation security ( ! ,dep>tm5t ( ,vet]ans ,affairs1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,dep>tm5t ( ,vet]ans ,affairs ,in=mation ,security ,protection ,act4 #b4 ,dep>tm5t ( ,vet]ans ,affairs in=mation security improvem5ts 7a7 ,submittal ( qu>t]ly in=mation security report to ,congress ,p>agraph 7#ad7 ( subsection 7b7 ( section #egbc ( title #ch1 ,unit$ ,/ates ,code1 is am5d$ by ins]t+ & to ! ,committees on ,vet]ans' ,affairs ( ! ,s5ate & ,h\se ( ,repres5tatives aft] to ! ,secret>y4 7b7 ,plan = address+ kn[n in=mation security vuln]abilities ,su* subsection is fur!r am5d$ by add+ at ! end ! foll[+ new p>agraph3 7#ag7 ,submitt+ to ! ,*airs & ,rank+ ,memb]s ( ! ,committees on ,vet]ans' ,affairs ( ! ,s5ate & ,h\se ( ,repres5tatives1 by n lat] ?an #cj days aft] ! date ( ! enactm5t ( ?is p>agraph1 & qu>t]ly !reaft]1 a plan ( action to address critical kn[n in=mation security vuln]abilities t includes-- 7,a7 specific mile/ones reg>d+ "tl9es to address su* vuln]abilities2 7,b7 a summ>y ( any reports provid$ to ! ,assi/ant ,secret>y = ,in=mation & ,te*nology pursuant to subsection 7e77#c7 dur+ ! p]iod cov]$ by ! report2 7,c7 a discussion ( any risk assessm5t analysis und]tak5 by ! ,dep>tm5t t l$ to ! inclusion ( any su* vuln]ability2 & 7,d7 a summ>y ( su* plan ( action t c\ld be made publicly available4 4 7c7 ,plan = replac+ outdat$ op]at+ sy/ems ,su* subsection is fur!r am5d$ by add+ at ! end ! foll[+ new p>agraph3 7#ah7 ,submitt+ to ! ,committees on ,vet]ans' ,affairs ( ! ,s5ate & ,h\se ( ,repres5tatives1 by n lat] ?an ,janu>y #a ( ea* ye>1 a plan = id5tify+ & replac+ op]at+ sy/ems ( ! ,dep>tm5t t are out-(-date or unsupport$ & t includes-- 7,a7 requirem5ts t su* an op]at+ sy/em be remov$ f ! network ( ! ,dep>tm5t no lat] ?an #ae days aft] ! date on :i* ! op]at+ sy/em 0 id5tifi$ z be+ out-(-date or unsupport$2 & 7,b7 in=mation conc]n+ ! numb] ( sy/ems s id5tifi$ dur+ ! ye> prec$+ ! ye> 9 :i* ! report is submitt$1 :5 ea* su* sy/em 0 s id5tifi$1 & :5 ea* sy/em s id5tifi$ 0 remov$ f ! network ( ! ,dep>tm5t4 4 7d7 ,s(tw>e security ,su* subsection is fur!r am5d$ by add+ at ! end ! foll[+ new p>agraph3 7#ai7 ,ensur+ t any s(tw>e or ,int]net applications us$ on sy/ems by ! ,dep>tm5t are secure f vuln]abilities t c\ld affect ! confid5tiality ( s5sitive p]sonal in=mation ( vet]ans4 4 #c4 ,in=mation te*nology report+ requirem5ts 7a7 ,9 g5]al ,*apt] #eg ( title #ch1 ,unit$ ,/ates ,code1 is am5d$-- 7#a7 by r$esignat+ sections #egbg & #egbh z sections #egbi & #egcj1 respectively2 & 7#b7 by ins]t+ aft] section #egbf ! foll[+ new sections3 #egbg4 ,report+ requirem5ts ,n lat] ?an #cj days aft] ! la/ day ( ea* fiscal qu>t]1 ! ,secret>y %all submit to ! ,committees on ,vet]ans' ,affairs ( ! ,s5ate & ,h\se ( ,repres5tatives a report t includes ! foll[+ in=mation = t fiscal qu>t]3 7#a7 ,a detail$ description ( any incid5ts ( failure to comply ) e/abli%$ in=mation security policies t occurr$ dur+ t qu>t]4 7#b7 ,any actions tak5 9 response to su* an incid5t4 7#c7 ,any reports made "u p>agraphs 7#h7 ?r\gh 7#aj7 ( subsection 7b7 ( section #egbc ( ?is title dur+ t qu>t]4 7#d7 ,writt5 c]tification t ! requirem5ts ( section #egbb7;c7 ( ?is title 7 foll[$ dur+ t qu>t]4 7#e7 ,a detail$ discussion ( :e!r ea* recomm5dation made by ! ,national ,in/itute ( ,/&>ds & ,te*nology1 ! ,(fice ( ,managem5t & ,budget1 or ! ,dep>tm5t ( ,homel& ,security relat+ to in=mation security h be5 implem5t$ by ! ,dep>tm5t1 & if n1 an explanation ( :y su* recomm5dation 0 n implem5t$4 7#f7 ,/eps tak5 to ensure ! security ( ! ,vet]ans ,heal? ,in=mation ,sy/ems & ,te*nology ,ar*itecture ( ! ,dep>tm5t t all[s = an integrat$ inpati5t & outpati5t electronic heal? record = pati5ts & provides adm9i/rative tools to employees ( ! ,dep>tm5t tak5 dur+ t qu>t]4 #egbh4 ,in=mation security /rategic plan 7a7 ,plan requir$ ,n lat] ?an "o ye> aft] ! date ( ! enactm5t ( ?is section1 ! ,secret>y1 9 consultation ) ! ,secret>y ( ,homel& ,security1 ! ,director ( ! ,(fice ( ,managem5t & ,budget1 ! ,secret>y ( ,def5se1 ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology1 ! heads ( o!r appropriate ,f$]al ag5cies1 vet]ans gr\ps1 & appropriate indu/ry speciali/s1 %all submit to ! ,committees on ,vet]ans' ,affairs ( ! ,s5ate & ,h\se ( ,repres5tatives a /rategic plan = improv+ ! in=mation security ( ! ,dep>tm5t4 ,su* plan %all address-- 7#a7 me?ods ( protect+ ! s5sitive p]sonal in=mation ( vet]ans :ile n unduly int]f]+ ) ! ability ( ! ,dep>tm5t to provide b5efits & s]vices to vet]ans & _! dep5d5ts2 7#b7 h[ ! ,dep>tm5t c improve its compliance ) in=mation security requirem5ts2 7#c7 tra9+ & recruitm5t ( employees ) ! necess>y exp]tise & abilities 9 in=mation security2 & 7#d7 ! in/itutional capability ( ! ,dep>tm5t to address in=mation security ?reats & to implem5t be/ practices relat$ to in=mation security4 7b7 ,biannual updates ,! ,secret>y %all submit to ! ,committees on ,vet]ans' ,affairs ( ! ,s5ate & ,h\se ( ,repres5tatives biannual updates to ! plan requir$ by subsection 7a74 4 7b7 ,cl]ical am5dm5ts ,! table ( sections at ! beg9n+ ( su* *apt] is am5d$ by /rik+ ! items relat+ to sections #egbg & #egbh & ins]t+ ! foll[+ new items3 #egbg4 ,report+ requirem5ts4 #egbh4 ,in=mation security /rategic plan4 #egbi4 ,def9itions4 #egcj4 ,au?orization ( appropriations4 4 #d4 ,requirem5ts = ,dep>tm5t ( ,vet]ans ,affairs contracts = data process+ or ma9t5ance 7a7 ,9 g5]al ,section #egbe7;a7 ( title #ch1 ,unit$ ,/ates ,code1 is am5d$-- 7#a7 9 p>agraph 7#b71 by /rik+ ! p]iod & ins]t+ 2 &2 & 7#b7 by add+ at ! end ! foll[+ new p>agraph3 7#c7 ! contractor %all provide protective measures to safegu>d f possible in=mation security ?reats any in=mation provid$ by ! ,dep>tm5t t w be resid5t on or transit+ ?r\gh in=mation sy/ems controll$ by ! contractor4 4 7b7 ,applicability ,p>agraph 7#c7 ( section #egbe7;a7 ( title #ch1 ,unit$ ,/ates ,code1 %all apply ) respect to a contract ent]$ into aft] ! date ( ! enactm5t ( ?is ,act4