,i  #aad? ,,congress  #b;d ,session  ,h4
 ,r4 #fdgc  ,,9 ,,! ,,h\se ,,(          
,,repres5tatives  ,decemb] #g1 #bjaf,mr4
 ,upton introduc$ ! foll[+ bill2 :i* 0  
ref]r$ to ! ,committee on ,en]gy &      
,comm]ce  ,a ,,bill  ,to express ! s5se 
( ,congress t in=mation security is     
critical to ! economic security ( !     
,unit$ ,/ates & to direct ! ,assi/ant   
,secret>y ( ,comm]ce = ,communications &
 ,in=mation to submit to ,congress a    
report on ! co/s ( in=mation security4  
#a4 ,s5se ( ,congress on in=mation      
security ,x is ! s5se ( ,congress t--   
7#a7 in=mation is vital to all indu/ries
 ( ! ,unit$ ,/ates = dome/ic &          
int]national comm]ce2  7#b7 ! mod]n     
,unit$ ,/ates economy relies increas+ly 
on digital in=mation sy/ems2 &  7#c7    
in=mation security is !re=e critical to 
! economic security ( ! ,unit$ ,/ates & 
%\ld be protect$ 9 a mann] t cont9ues to
 promote economic gr[?4  #b4 ,,ntia     
report on co/s ( in=mation security to  
,unit$ ,/ates economy  7a7 ,9 g5]al ,n  

lat] ?an #b ye>s aft] ! date ( !        
enactm5t ( ?is ,act1 ! ,assi/ant        
,secret>y ( ,comm]ce = ,communications &
 ,in=mation %all submit to ,congress a  
report on ! direct & indirect co/s (    
in=mation security to ! economy ( !     
,unit$ ,/ates4 ,9 prep>+ su* report1 !  
,assi/ant ,secret>y %all use exi/+      
comm]cial indices & o!r publicly        
available in=mation4  7b7 ,requir$      
consid]ations ,! report requir$ by      
subsection 7a7 %all conta9 an e/imate ( 
! co/s describ$ 9 su* subsection4 ,9    
prep>+ su* e/imate1 ! ,assi/ant         
,secret>y %all consid] co/s t include ! 
co/ (--  7#a7 keep+ in=mation sy/ems    
secure2  7#b7 actions necess>y to       
mitigate compromise ( in=mation sy/ems2 
7#c7 measures us$ to h$ge aga9/ su*     
compromise2 &  7#d7 economic loss or h>m
 caus$ by su* compromise4  #c4          
,def9itions ,9 ?is ,act3 7#a7 ,in=mation
 security ,! t]m in=mation security     
means protect+ in=mation & in=mation    
sy/ems f unau?oriz$ access1 use1        

disclosure1 disruption1 modification1 or
 de/ruction 9 ord] to provide--  7,a7   
integrity1 :i* means gu>d+ aga9/ improp]
 in=mation modification or de/ruction1 &
 includes ensur+ in=mation              
nonrepudiation & au!nticity2  7,b7      
confid5tiality1 :i* means pres]v+       
au?oriz$ re/rictions on access &        
disclosure1 includ+ means = protect+    
p]sonal privacy & propriet>y in=mation2 
7,c7 availability1 :i* means ensur+     
timely & reliable access to & use (     
in=mation2 &  7,d7 au!ntication1 :i*    
means utiliz+ digital cr$5tials to      
assure ! id5tity ( us]s & validate _!   
access4  7#b7 ,in=mation sy/em ,! t]m   
in=mation sy/em means any equipm5t or   
int]connect$ sy/em or subsy/ems (       
equipm5t t is us$ 9 ! automatic         
acquisition1 /orage1 manipulation1      
managem5t1 movem5t1 control1 display1   
swit*+1 int]*ange1 transmission1 or     
reception ( data or in=mation1 &        
includes--  7,a7 networks & comput]s &  
o!r network-enabl$ devices2  7,b7       

ancill>y equipm5t2  7,c7 s(tw>e1        
firmw>e1 & relat$ proc$ures2  7,d7      
s]vices1 includ+ support s]vices2 &     
7,e7 relat$ res\rces4