,i #aaeth ,,congress #b;d ,session ,h4 ,r4 #ehbb ,,in ,,the ,,house ,,of ,,representatives ,may #ae1 #bjah,mr4 ,langevin 7for himself1 ,mr4 ,ted ,lieu of ,california1 ,mrs4 ,dingell1 ,mr4 ,khanna1 ,ms4 ,clarke of ,new ,york1 ,mr4 ,richmond1 ,mr4 ,heck1 ,ms4 ,jayapal1 ,ms4 ,norton1 ,ms4 ,velzquez1 ,mr4 ,rush1 and ,mr4 ,ruppersberger7 introduced the following bill2 which was referred to the ,committee on ,oversight and ,government ,reform ,a ,,bill ,to establish a ,national ,office for ,cyberspace1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,executive ,cyberspace ,coordination ,act of #bjah4 #b4 ,national ,office for ,cyberspace 7a7 ,coordination of ,federal information policy ,subchapter ,,ii of chapter #ce of title #dd1 ,united ,states ,code1 is amended-- 7#a7 in section #ceeb7;b71 by adding at the end the following new paragraphs3 7#h7 ,the term ,director means the ,director of the ,national ,office for ,cyberspace4 7#i7 ,the term information infrastructure means the underlying framework that information systems and assets rely on in processing1 storing1 or transmitting information electronically4 2 7#b7 in section #ceec7;a7-- 7,a7 in paragraph 7#e71 by striking 2 and and inserting a semicolon2 7,b7 in paragraph 7#f71 by striking the period at the end and inserting a semicolon2 and 7,c7 by inserting after paragraph 7#f7 the following new paragraphs3 7#g7 reviewing at least annually1 and approving or disapproving1 agency information security programs required under section #ceed7;b72 7#h7 coordinating the defense of information infrastructure operated by agencies in the case of a large-scale attack on information infrastructure1 as determined by the ,director2 7#i7 coordinating information security training for ,federal employees with the ,director of the ,office of ,personnel ,management2 7#aj7 ensuring the adequacy of protections for privacy and civil liberties in carrying out the responsibilities of the ,director under this subchapter2 7#aa7 making recommendations that the ,director determines are necessary to ensure risk-based security of the ,federal information infrastructure and information infrastructure that is owned1 operated1 controlled1 or licensed for use by1 or on behalf of1 the ,department of ,defense1 a military department1 or another element of the intelligence community to-- 7,a7 the ,director of the ,office of ,management and ,budget2 7,b7 the head of an agency2 or 7,c7 to ,congress with regard to the reprogramming of funds2 7#ab7 ensuring1 in consultation with the ,administrator of the ,office of ,information and ,regulatory ,affairs1 that the efforts of agencies relating to the development of regulations1 rules1 requirements1 or other actions applicable to the national information infrastructure are complementary2 7#ac7 when directed by the ,president1 carrying out the responsibilities for national security and emergency preparedness communications described in section #gjf of the ,communications ,act of #aicd 7#dg ,u4,s4,c4 #fjf7 to ensure integration and coordination2 and 7#ad7 as assigned by the ,president1 other duties relating to the security and resiliency of cyberspace4 2 7#c7 by adding at the end of section #ceed1 the following new subsection3 7f7 ,budget assessment and reporting 7#a7 ,agency submission ,the head of each agency shall submit to the ,director a budget each year for the following fiscal year relating to the protection of information infrastructure for such agency1 by a date determined by the ,director that is before ,july #a of each year4 ,such budget shall include-- 7,a7 a review of any threats to information technology for such agency2 7,b7 a plan to secure the information infrastructure for such agency based on threats to information technology1 using the ,national ,institute of ,standards and ,technology guidelines and recommendations2 7,c7 a review of compliance by such agency with any previous year plan described in subparagraph 7,b72 and 7,d7 a report on the development of the credentialing process to enable secure authentication of identity and authorization for access to the information infrastructure of such agency4 7#b7 ,assessment and certification ,the ,director shall assess and certify the adequacy of each budget submitted under paragraph 7#a74 7#c7 ,agency recommendations ,not later than ,july #a of each year1 the ,director shall submit to the head of each agency budget recommendations1 including requests for specific initiatives that are consistent with the priorities of the ,president relating to the protection of information infrastructure4 ,such budget recommendations shall-- 7,a7 apply to the next budget year scheduled for formulation under chapter #aa of title #ca1 and each of the #d subsequent fiscal years2 and 7,b7 address funding priorities developed in the ,national ,office for ,cyberspace4 7#d7 ,recommendations to the ,president ,the ,director shall make recommendations to the ,president that the ,director determines are appropriate regarding changes in the organization1 management1 and budget of each agency relating to the protection of information infrastructure in each such agency1 and changes in the allocation of personnel to and within such agency1 including monetary penalties or incentives necessary to encourage and maintain accountability of any agency1 or senior agency official1 for efforts to secure the information infrastructure of such agency4 2 and 7#d7 by adding at the end the following new section3 #cefj4 ,national ,office for ,cyberspace 7a7 ,establishment ,there is established within the ,executive ,office of the ,president an office to be known as the ,national ,office for ,cyberspace4 7b7 ,director 7#a7 ,in general ,there shall be at the head of the ,national ,office for ,cyberspace a ,director1 who shall be appointed by the ,president by and with the advice and consent of the ,senate4 ,the ,director of the ,national ,office for ,cyberspace shall administer all functions designated to such ,director under sections #ceec and #ceee and collaborate to the extent practicable with the heads of appropriate agencies1 the private sector1 and international partners4 ,the ,office shall serve as the principal office for coordinating issues relating to cyberspace1 including achieving an assured1 reliable1 secure1 and survivable information infrastructure and related capabilities for the ,federal ,government1 while promoting national economic interests1 security1 and civil liberties4 7#b7 ,basic pay ,the ,director of the ,national ,office for ,cyberspace shall be paid at the rate of basic pay for level ,,iii of the ,executive ,schedule4 7c7 ,staff ,the ,director of the ,national ,office for ,cyberspace may appoint and fix the pay of additional personnel as the ,director considers appropriate4 7d7 ,experts and consultants ,the ,director of the ,national ,office for ,cyberspace may procure temporary and intermittent services under section #caji7;b7 of title #e4 4 7b7 ,technical and conforming amendments ,the table of sections for subchapter ,,ii of chapter #ce of title #dd1 ,united ,states ,code1 is amended by adding at the end the following3 #cefj4 ,national ,office for ,cyberspace4 4 7c7 ,national strategy required ,not later than one year after the date of the enactment of this ,act1 the ,director of the ,national ,office for ,cyberspace shall establish a national strategy for improving agency information security4 7d7 ,effective date ,this section1 and the amendments made by this section1 shall take effect #ahj days after the date of the enactment of this ,act4