,h4 ,,res4 #afd  ,in the ,house of      
,representatives1 ,u4 ,s41  ,april #ag1 
#bjac  ,,resolution  ,that at any time  
after the adoption of this resolution   
the ,speaker may1 pursuant to clause    
#b7;b7 of rule ,,xviii1 declare the     
,house resolved into the ,committee of  
the ,whole ,house on the state of the   
,union for consideration of the bill    
7,h4,r4 #fbd7 to provide for the sharing
 of certain cyber threat intelligence   
and cyber threat information between the
 intelligence community and             
cybersecurity entities1 and for other   
purposes4 ,the first reading of the bill
 shall be dispensed with4 ,all points of
 order against consideration of the bill
 are waived4 ,general debate shall be   
confined to the bill and shall not      
exceed one hour equally divided and     
controlled by the chair and ranking     
minority member of the ,permanent       
,select ,committee on ,intelligence4    
,after general debate the bill shall be 
considered for amendment under the      

five-minute rule4 ,in lieu of the       
amendment in the nature of a substitute 
recommended by the ,permanent ,select   
,committee on ,intelligence now printed 
in the bill1 it shall be in order to    
consider as an original bill for the    
purpose of amendment under the          
five-minute rule an amendment in the    
nature of a substitute consisting of the
 text of ,rules ,committee ,print       
#aac-g4 ,that amendment in the nature of
 a substitute shall be considered as    
read4 ,all points of order against that 
amendment in the nature of a substitute 
are waived4 ,no amendment to that       
amendment in the nature of a substitute 
shall be in order except those printed  
in the report of the ,committee on      
,rules accompanying this resolution4    
,each such amendment may be offered only
 in the order printed in the report1 may
 be offered only by a ,member designated
 in the report1 shall be considered as  
read1 shall be debatable for the time   
specified in the report equally divided 

and controlled by the proponent and an  
opponent1 shall not be subject to       
amendment1 and shall not be subject to a
 demand for division of the question in 
the ,house or in the ,committee of the  
,whole4 ,all points of order against    
such amendments are waived4 ,at the     
conclusion of consideration of the bill 
for amendment the ,committee shall rise 
and report the bill to the ,house with  
such amendments as may have been        
adopted4 ,any ,member may demand a      
separate vote in the ,house on any      
amendment adopted in the ,committee of  
the ,whole to the bill or to the        
amendment in the nature of a substitute 
made in order as original text4 ,the    
previous question shall be considered as
 ordered on the bill and amendments     
thereto to final passage without        
intervening motion except one motion to 
recommit with or without instructions4  
#b4 ,notwithstanding any other provision
 of this resolution1 the amendment      
specified in section #c shall be in     

order as though printed as the last     
amendment in ,house ,report #aac-da if  
offered by ,representative ,mc,caul of  
,texas or his designee4 ,that amendment 
shall be debatable for #aj minutes      
equally divided and controlled by the   
proponent and an opponent4  #c4 ,the    
amendment referred to in section #b is  
as follows3 ,after section #a1 insert   
the following new section 7and renumber 
subsequent sections accordingly73  #b4  
,federal ,government coordination with  
respect to cybersecurity  7a7           
,coordinated activities ,the ,federal   
,government shall conduct cybersecurity 
activities to provide shared situational
 awareness that enables integrated      
operational actions to protect1 prevent1
 mitigate1 respond to1 and recover from 
cyber incidents4  7b7 ,coordinated      
information sharing  7#a7 ,designation  
of coordinating entity for cyber threat 
information ,the ,president shall       
designate an entity within the          
,department of ,homeland ,security as   

the civilian ,federal entity to receive 
cyber threat information that is shared 
by a cybersecurity provider or          
self-protected entity in accordance with
 section #aajd7;b7 of the ,national     
,security ,act of #aidg1 as added by    
section #c7;a7 of this ,act1 except as  
provided in paragraph 7#b7 and subject  
to the procedures established under     
paragraph 7#d74  7#b7 ,designation of a 
coordinating entity for cybersecurity   
crimes ,the ,president shall designate  
an entity within the ,department of     
,justice as the civilian ,federal entity
 to receive cyber threat information    
related to cybersecurity crimes that is 
shared by a cybersecurity provider or   
self-protected entity in accordance with
 section #aajd7;b7 of the ,national     
,security ,act of #aidg1 as added by    
section #c7;a7 of this ,act1 subject to 
the procedures under paragraph 7#d74    
7#c7 ,sharing by coordinating entities  
,the entities designated under          
paragraphs 7#a7 and 7#b7 shall share    

cyber threat information shared with    
such entities in accordance with section
 #aajd7;b7 of the ,national ,security   
,act of #aidg1 as added by section      
#c7;a7 of this ,act1 consistent with the
 procedures established under paragraphs
 7#d7 and 7#e74  7#d7 ,procedures ,each 
department or agency of the ,federal    
,government receiving cyber threat      
information shared in accordance with   
section #aajd7;b7 of the ,national      
,security ,act of #aidg1 as added by    
section #c7;a7 of this ,act1 shall      
establish procedures to--  7,a7 ensure  
that cyber threat information shared    
with departments or agencies of the     
,federal ,government in accordance with 
such section #aajd7;b7 is also shared   
with appropriate departments and        
agencies of the ,federal ,government    
with a national security mission in real
 time2  7,b7 ensure the distribution to 
other departments and agencies of the   
,federal ,government of cyber threat    
information in real time2 and  7,c7     

facilitate information sharing1         
interaction1 and collaboration among and
 between the ,federal ,government2      
,state1 local1 tribal1 and territorial  
governments2 and cybersecurity providers
 and self-protected entities4  7#e7     
,privacy and civil liberties  7,a7      
,policies and procedures ,the ,secretary
 of ,homeland ,security1 the ,attorney  
,general1 the ,director of ,national    
,intelligence1 and the ,secretary of    
,defense shall jointly establish and    
periodically review policies and        
procedures governing the receipt1       
retention1 use1 and disclosure of       
non-publicly available cyber threat     
information shared with the ,federal    
,government in accordance with section  
#aajd7;b7 of the ,national ,security    
,act of #aidg1 as added by section      
#c7;a7 of this ,act4 ,such policies and 
procedures shall1 consistent with the   
need to protect systems and networks    
from cyber threats and mitigate cyber   
threats in a timely manner--  7i7       

minimize the impact on privacy and civil
 liberties2  7ii7 reasonably limit the  
receipt1 retention1 use1 and disclosure 
of cyber threat information associated  
with specific persons that is not       
necessary to protect systems or networks
 from cyber threats or mitigate cyber   
threats in a timely manner2  7iii7      
include requirements to safeguard       
non-publicly available cyber threat     
information that may be used to identify
 specific persons from unauthorized     
access or acquisition2  7iv7 protect the
 confidentiality of cyber threat        
information associated with specific    
persons to the greatest extent          
practicable2 and  7v7 not delay or      
impede the flow of cyber threat         
information necessary to defend against 
or mitigate a cyber threat4  7,b7       
,submission to ,congress ,the ,secretary
 of ,homeland ,security1 the ,attorney  
,general1 the ,director of ,national    
,intelligence1 and the ,secretary of    
,defense shall1 consistent with the need

 to protect sources and methods1 jointly
 submit to ,congress the policies and   
procedures required under subparagraph  
7,a7 and any updates to such policies   
and procedures4  7,c7 ,implementation   
,the head of each department or agency  
of the ,federal ,government receiving   
cyber threat information shared with the
 ,federal ,government under such section
 #aajd7;b7 shall--  7i7 implement the   
policies and procedures established     
under subparagraph 7,a72 and  7ii7      
promptly notify the ,secretary of       
,homeland ,security1 the ,attorney      
,general1 the ,director of ,national    
,intelligence1 the ,secretary of        
,defense1 and the appropriate           
congressional committees of any         
significant violations of such policies 
and procedures4  7,d7 ,oversight ,the   
,secretary of ,homeland ,security1 the  
,attorney ,general1 the ,director of    
,national ,intelligence1 and the        
,secretary of ,defense shall jointly    
establish a program to monitor and      

oversee compliance with the policies and
 procedures established under           
subparagraph 7,a74  7#f7 ,information   
sharing relationships ,nothing in this  
section shall be construed to--  7,a7   
alter existing agreements or prohibit   
new agreements with respect to the      
sharing of cyber threat information     
between the ,department of ,defense and 
an entity that is part of the defense   
industrial base2  7,b7 alter existing   
information-sharing relationships       
between a cybersecurity provider1       
protected entity1 or self-protected     
entity and the ,federal ,government2    
7,c7 prohibit the sharing of cyber      
threat information directly with a      
department or agency of the ,federal    
,government for criminal investigative  
purposes related to crimes described in 
section #aajd7;c77#a7 of the ,national  
,security ,act of #aidg1 as added by    
section #c7;a7 of this ,act2 or  7,d7   
alter existing agreements or prohibit   
new agreements with respect to the      

sharing of cyber threat information     
between the ,department of ,treasury and
 an entity that is part of the financial
 services sector4  7#g7 ,technical      
assistance  7,a7 ,discussions and       
assistance ,nothing in this section     
shall be construed to prohibit any      
department or agency of the ,federal    
,government from engaging in formal or  
informal technical discussion regarding 
cyber threat information with a         
cybersecurity provider or self-protected
 entity or from providing technical     
assistance to address vulnerabilities or
 mitigate threats at the request of such
 a provider or such an entity4  7,b7    
,coordination ,any department or agency 
of the ,federal ,government engaging in 
an activity referred to in subparagraph 
7,a7 shall coordinate such activity with
 the entity of the ,department of       
,homeland ,security designated under    
paragraph 7#a7 and share all significant
 information resulting from such        
activity with such entity and all other 

appropriate departments and agencies of 
the ,federal ,government4  7,c7 ,sharing
 by designated entity ,consistent with  
the policies and procedures established 
under paragraph 7#e71 the entity of the 
,department of ,homeland ,security      
designated under paragraph 7#a7 shall   
share with all appropriate departments  
and agencies of the ,federal ,government
 all significant information resulting  
from--  7i7 formal or informal technical
 discussions between such entity of the 
,department of ,homeland ,security and a
 cybersecurity provider or              
self-protected entity about cyber threat
 information2 or  7ii7 any technical    
assistance such entity of the           
,department of ,homeland ,security      
provides to such cybersecurity provider 
or such self-protected entity to address
 vulnerabilities or mitigate threats4   
7c7 ,reports on information sharing     
7#a7 ,inspector ,general of the         
,department of ,homeland ,security      
report ,the ,inspector ,general of the  

,department of ,homeland ,security1 in  
consultation with the ,inspector        
,general of the ,department of ,justice1
 the ,inspector ,general of the         
,intelligence ,community1 the ,inspector
 ,general of the ,department of         
,defense1 and the ,privacy and ,civil   
,liberties ,oversight ,board1 shall     
annually submit to the appropriate      
congressional committees a report       
containing a review of the use of       
information shared with the ,federal    
,government under subsection 7b7 of     
section #aajd of the ,national ,security
 ,act of #aidg1 as added by section     
#c7;a7 of this ,act1 including--  7,a7 a
 review of the use by the ,federal      
,government of such information for a   
purpose other than a cybersecurity      
purpose2  7,b7 a review of the type of  
information shared with the ,federal    
,government under such subsection2  7,c7
 a review of the actions taken by the   
,federal ,government based on such      
information2  7,d7 appropriate metrics  

to determine the impact of the sharing  
of such information with the ,federal   
,government on privacy and civil        
liberties1 if any2  7,e7 a list of the  
departments or agencies receiving such  
information2  7,f7 a review of the      
sharing of such information within the  
,federal ,government to identify        
inappropriate stovepiping of shared     
information2 and  7,g7 any              
recommendations of the ,inspector       
,general of the ,department of ,homeland
 ,security for improvements or          
modifications to the authorities under  
such section4  7#b7 ,privacy and civil  
liberties officers report ,the ,officer 
for ,civil ,rights and ,civil ,liberties
 of the ,department of ,homeland        
,security1 in consultation with the     
,privacy and ,civil ,liberties          
,oversight ,board1 the ,inspector       
,general of the ,intelligence           
,community1 and the senior privacy and  
civil liberties officer of each         
department or agency of the ,federal    

,government that receives cyber threat  
information shared with the ,federal    
,government under such subsection 7b71  
shall annually and jointly submit to    
,congress a report assessing the privacy
 and civil liberties impact of the      
activities conducted by the ,federal    
,government under such section #aajd4   
,such report shall include any          
recommendations the ,civil ,liberties   
,protection ,officer and ,chief ,privacy
 and ,civil ,liberties ,officer consider
 appropriate to minimize or mitigate the
 privacy and civil liberties impact of  
the sharing of cyber threat information 
under such section #aajd4  7#c7 ,form   
,each report required under paragraph   
7#a7 or 7#b7 shall be submitted in      
unclassified form1 but may include a    
classified annex4  7d7 ,definitions ,in 
this section3  7#a7 ,appropriate        
congressional committees ,the term      
appropriate congressional committees    
means--  7,a7 the ,committee on         
,homeland ,security1 the ,committee on  

the ,judiciary1 the ,permanent ,select  
,committee on ,intelligence1 and the    
,committee on ,armed ,services of the   
,house of ,representatives2 and  7,b7   
the ,committee on ,homeland ,security   
and ,governmental ,affairs1 the         
,committee on the ,judiciary1 the       
,select ,committee on ,intelligence1 and
 the ,committee on ,armed ,services of  
the ,senate4  7#b7 ,cyber threat        
information1 cyber threat intelligence1 
cybersecurity crimes1 cybersecurity     
provider1 cybersecurity purpose1 and    
self-protected entity ,the terms cyber  
threat information1 cyber threat        
intelligence1 cybersecurity crimes1     
cybersecurity provider1 cybersecurity   
purpose1 and self-protected entity have 
the meaning given those terms in section
 #aajd of the ,national ,security ,act  
of #aidg1 as added by section #c7;a7 of 
this ,act4  7#c7 ,intelligence community
 ,the term intelligence community has   
the meaning given the term in section   
#c7d7 of the ,national ,security ,act of

 #aidg 7#ej ,u4,s4,c4 #dja;a7#d774  7#d7
 ,shared situational awareness ,the term
 shared situational awareness means an  
environment where cyber threat          
information is shared in real time      
between all designated ,federal cyber   
operations centers to provide actionable
 information about all known cyber      
threats4  4  ,page #e1 strike line #f   
and all that follows through page #f1   
line #g4  ,page #g1 beginning on line   
#ag1 strike by the department or agency 
of the ,federal ,government receiving   
such cyber threat information4  ,page   
#ac1 strike line #ac and all that       
follows through page #ae1 line #bc4     
,page #ag1 strike line #ae and all that 
follows through page #ai1 line #ai4     
,clerk4