,i  #aadth ,,congress  #b;d ,session    
,h4 ,r4 #fdgc  ,,in ,,the ,,house ,,of  
,,representatives  ,december #g1        
#bjaf,mr4 ,upton introduced the         
following bill2 which was referred to   
the ,committee on ,energy and ,commerce 
,a ,,bill  ,to express the sense of     
,congress that information security is  
critical to the economic security of the
 ,united ,states and to direct the      
,assistant ,secretary of ,commerce for  
,communications and ,information to     
submit to ,congress a report on the     
costs of information security4  #a4     
,sense of ,congress on information      
security ,it is the sense of ,congress  
that-- 7#a7 information is vital to all 
industries of the ,united ,states for   
domestic and international commerce2    
7#b7 the modern ,united ,states economy 
relies increasingly on digital          
information systems2 and  7#c7          
information security is therefore       
critical to the economic security of the
 ,united ,states and should be protected

 in a manner that continues to promote  
economic growth4  #b4 ,,ntia report on  
costs of information security to ,united
 ,states economy  7a7 ,in general ,not  
later than #b years after the date of   
the enactment of this ,act1 the         
,assistant ,secretary of ,commerce for  
,communications and ,information shall  
submit to ,congress a report on the     
direct and indirect costs of information
 security to the economy of the ,united 
,states4 ,in preparing such report1 the 
,assistant ,secretary shall use existing
 commercial indices and other publicly  
available information4  7b7 ,required   
considerations ,the report required by  
subsection 7a7 shall contain an estimate
 of the costs described in such         
subsection4 ,in preparing such estimate1
 the ,assistant ,secretary shall        
consider costs that include the cost    
of--  7#a7 keeping information systems  
secure2  7#b7 actions necessary to      
mitigate compromise of information      
systems2  7#c7 measures used to hedge   

against such compromise2 and  7#d7      
economic loss or harm caused by such    
compromise4  #c4 ,definitions ,in this  
,act3 7#a7 ,information security ,the   
term information security means         
protecting information and information  
systems from unauthorized access1 use1  
disclosure1 disruption1 modification1 or
 destruction in order to provide--  7,a7
 integrity1 which means guarding against
 improper information modification or   
destruction1 and includes ensuring      
information nonrepudiation and          
authenticity2  7,b7 confidentiality1    
which means preserving authorized       
restrictions on access and disclosure1  
including means for protecting personal 
privacy and proprietary information2    
7,c7 availability1 which means ensuring 
timely and reliable access to and use of
 information2 and  7,d7 authentication1 
which means utilizing digital           
credentials to assure the identity of   
users and validate their access4  7#b7  
,information system ,the term           

information system means any equipment  
or interconnected system or subsystems  
of equipment that is used in the        
automatic acquisition1 storage1         
manipulation1 management1 movement1     
control1 display1 switching1            
interchange1 transmission1 or reception 
of data or information1 and includes--  
7,a7 networks and computers and other   
network-enabled devices2  7,b7 ancillary
 equipment2  7,c7 software1 firmware1   
and related procedures2  7,d7 services1 
including support services2 and  7,e7   
related resources4