,,ib ,union ,calendar ,no4 #baf #aadth ,,congress #ast ,session ,h4 ,r4 #ceaj ,report ,no4 #aad-bhd ,,in ,,the ,,house ,,of ,,representatives ,september #ae1 #bjae ,mr4 ,richmond introduced the following bill2 which was referred to the ,committee on ,homeland ,security ,october #f1 #bjae ,additional sponsors3 ,mr4 ,ratcliffe1 ,mr4 ,mc,caul1 and ,mr4 ,thompson of ,mississippi ,october #f1 #bjae ,reported with an amendment1 committed to the ,committee of the ,whole ,house on the ,state of the ,union1 and ordered to be printed ,strike out all after the enacting clause and insert the part printed in italic ,for text of introduced bill1 see copy of bill as introduced on ,september #ae1 #bjae ,a ,,bill ,to amend the ,homeland ,security ,act of #bjjb to require the ,secretary of ,homeland ,security to develop a cybersecurity strategy for the ,department of ,homeland ,security1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,department of ,homeland ,security ,cybersecurity ,strategy ,act of #bjae4 #b4 ,cybersecurity strategy for the ,department of ,homeland ,security 7a7 ,in general ,subtitle ,c of title ,,ii of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #ada et seq47 is amended by adding at the end the following new section3 #bcj4 ,cybersecurity strategy 7a7 ,in general ,not later than #fj days after the date of the enactment of this section1 the ,secretary shall develop a departmental strategy to carry out cybersecurity responsibilities as set forth in law4 7b7 ,contents ,the strategy required under subsection 7a7 shall include the following3 7#a7 ,strategic and operational goals and priorities to successfully execute the full range of the ,secretary's cybersecurity responsibilities4 7#b7 ,information on the programs1 policies1 and activities that are required to successfully execute the full range of the ,secretary's cybersecurity responsibilities1 including programs1 policies1 and activities in furtherance of the following3 7,a7 ,cybersecurity functions set forth in the second section #bbf 7relating to the national cybersecurity and communications integration center74 7,b7 ,cybersecurity investigations capabilities4 7,c7 ,cybersecurity research and development4 7,d7 ,engagement with international cybersecurity partners4 7c7 ,considerations ,in developing the strategy required under subsection 7a71 the ,secretary shall-- 7#a7 consider-- 7,a7 the cybersecurity strategy for the ,homeland ,security ,enterprise published by the ,secretary in ,november #bjaa2 7,b7 the ,department of ,homeland ,security ,fiscal ,years #bjad-bjah ,strategic ,plan2 and 7,c7 the most recent ,quadrennial ,homeland ,security ,review issued pursuant to section #gjg2 and 7#b7 include information on the roles and responsibilities of components and offices of the ,department1 to the extent practicable1 to carry out such strategy4 7d7 ,implementation plan ,not later than #ij days after the development of the strategy required under subsection 7a71 the ,secretary shall issue an implementation plan for the strategy that includes the following3 7#a7 ,strategic objectives and corresponding tasks4 7#b7 ,projected timelines and costs for such tasks4 7#c7 ,metrics to evaluate performance of such tasks4 7e7 ,congressional oversight ,the ,secretary shall submit to the ,committee on ,homeland ,security of the ,house of ,representatives and the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate for assessment the following3 7#a7 ,a copy of the strategy required under subsection 7a7 upon issuance4 7#b7 ,a copy of the implementation plan required under subsection 7d7 upon issuance1 together with detailed information on any associated legislative or budgetary proposals4 7f7 ,prohibition on reorganization ,in the event that the strategy required under subsection 7a7 or implementation plan required under subsection 7d7 includes actions to reorganize departmental components or offices1 such actions may not be executed without prior congressional authorization4 7g7 ,classified information ,the strategy required under subsection 7a7 shall be in an unclassified form but may contain a classified annex4 7h7 ,rule of construction ,nothing in this section may be construed as permitting the ,department to engage in monitoring1 surveillance1 exfiltration1 or other collection activities for the purpose of tracking an individual's personally identifiable information4 7i7 ,definitions ,in this section3 7#a7 ,cybersecurity risk ,the term cybersecurity risk has the meaning given such term in the second section #bbf1 relating to the national cybersecurity and communications integration center4 7#b7 ,homeland ,security ,enterprise ,the term ,homeland ,security ,enterprise means relevant governmental and nongovernmental entities involved in homeland security1 including ,federal1 ,state1 local1 and tribal government officials1 private sector representatives1 academics1 and other policy experts4 7#c7 ,incident ,the term incident has the meaning given such term in the second section #bbf1 relating to the national cybersecurity and communications integration center4 4 7b7 ,clerical amendment ,the table of contents in section #a7;b7 of the ,homeland ,security ,act of #bjjb is amended by adding at the end of the list of items for subtitle ,c of title ,,ii the following new item3 ,sec4 #bcj4 ,cybersecurity strategy4 4 7c7 ,amendment to definition ,paragraph 7#b7 of subsection 7a7 of the second section #bbf of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #adh2 relating to the national cybersecurity and communications integration center7 is amended to read as follows3 7#b7 the term incident means an occurrence that actually or imminently jeopardizes1 without lawful authority1 the integrity1 confidentiality1 or availability of information on an information system1 or actually or imminently jeopardizes1 without lawful authority1 an information system2 4 ,october #f1 #bjae ,reported with an amendment1 committed to the ,committee of the ,whole ,house on the ,state of the ,union1 and ordered to be printed