,,id ,union ,cal5d> ,no4 #geb #aae? ,,congress #b;d ,session ,s4 #abha ,report ,no4 #aae-ifd ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,april #ah1 #bjah ,ref]r$ to ! ,committee on ,homel& ,security ,septemb] #be1 #bjah ,report$ ) an am5dm5t1 committ$ to ! ,committee ( ! ,:ole ,h\se on ! ,/ate ( ! ,union1 & ord]$ to be pr9t$ ,/rike out all aft] ! enact+ clause & ins]t ! "p pr9t$ 9 italic ,= text ( introduc$ bill1 see copy ( bill z introduc$ on ,april #ah1 #bjah ,an ,act ,to e/abli% a bug b\nty pilot program )9 ! ,dep>tm5t ( ,homel& ,security1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,hack ! ,dep>tm5t ( ,homel& ,security ,act ( #bjah or ! ,hack ,,dhs ,act4 #b4 ,dep>tm5t ( ,homel& ,security bug b\nty pilot program 7a7 ,def9itions ,9 ?is section3 7#a7 ,bug b\nty program ,! t]m bug b\nty program means a program "u :i*-- 7,a7 individuals1 organizations1 & companies are tempor>ily au?oriz$ to id5tify & report vuln]abilities ( appropriate in=mation sy/ems ( ! ,dep>tm5t2 & 7,b7 eligible individuals1 organizations1 & companies receive comp5sation 9 ex*ange = su* reports4 7#b7 ,dep>tm5t ,! t]m ,dep>tm5t means ! ,dep>tm5t ( ,homel& ,security4 7#c7 ,eligible individual1 organization1 or company ,! t]m eligible individual1 organization1 or company means an individual1 organization1 or company t meets su* crit]ia z ! ,secret>y det]m9es 9 ord] to receive comp5sation 9 compliance ) ,f$]al laws4 7#d7 ,in=mation sy/em ,! t]m in=mation sy/em has ! mean+ giv5 t t]m by section #cejb ( title #dd1 ,unit$ ,/ates ,code4 7#e7 ,pilot program ,! t]m pilot program means ! bug b\nty pilot program requir$ to be e/abli%$ "u subsection 7b77#a74 7#f7 ,secret>y ,! t]m ,secret>y means ! ,secret>y ( ,homel& ,security4 7b7 ,e/abli%m5t ( pilot program 7#a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 ! ,secret>y %all e/abli%1 )9 ! ,(fice ( ! ,*ief ,in=mation ,(fic]1 a bug b\nty pilot program to m9imize vuln]abilities ( appropriate in=mation sy/ems ( ! ,dep>tm5t4 7#b7 ,requirem5ts ,9 e/abli%+ & conduct+ ! pilot program1 ! ,secret>y %all-- 7,a7 designate appropriate in=mation sy/ems to be includ$ 9 ! pilot program2 7,b7 provide comp5sation to eligible individuals1 organizations1 & companies = reports ( previ\sly unid5tifi$ security vuln]abilities )9 ! in=mation sy/ems designat$ "u subp>agraph 7,a72 7,c7 e/abli% crit]ia = individuals1 organizations1 & companies to be consid]$ eligible = comp5sation "u ! pilot program 9 compliance ) ,f$]al laws2 7,d7 consult ) ! ,attorney ,g5]al on h[ to ensure t approv$ individuals1 organizations1 or companies t comply ) ! requirem5ts ( ! pilot program are protect$ f prosecution "u section #ajcj ( title #ah1 ,unit$ ,/ates ,code1 & simil> provisions ( law1 & civil lawsuits = specific activities au?oriz$ "u ! pilot program2 7,e7 consult ) ! ,secret>y ( ,def5se & ! heads ( o!r dep>tm5ts & ag5cies t h implem5t$ programs to provide comp5sation = reports ( previ\sly undisclos$ vuln]abilities 9 in=mation sy/ems1 reg>d+ lessons t may be appli$ f su* programs2 & 7,f7 develop an exp$iti\s process by :i* an individual1 organization1 or company c regi/] ) ! ,dep>tm5t1 submit to a backgr\nd *eck z det]m9$ by ! ,dep>tm5t1 & receive a det]m9ation z to eligibility2 & 7,g7 engage qualifi$ int]e/$ p]sons1 includ+ non-gov]nm5t sector repres5tatives1 ab\t ! /ructure ( ! pilot program z con/ructive & to ! ext5t practicable4 7#c7 ,contract ,9 e/abli%+ ! pilot program1 ! ,secret>y1 subject to ! availability ( appropriations1 may aw>d "o or m competitive contracts to an entity1 z necess>y1 to manage ! pilot program4 7c7 ,report ,n lat] ?an #ahj days aft] ! date on :i* ! pilot program is complet$1 ! ,secret>y ( ,homel& ,security %all submit to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate & ! ,committee on ,homel& ,security ( ! ,h\se ( ,repres5tatives a report on ! pilot program1 :i* %all include-- 7#a7 ! numb] ( individuals1 organizations1 or companies t p>ticipat$ 9 ! pilot program1 brok5 d[n by ! numb] ( individuals1 organizations1 or companies t-- 7,a7 regi/]$2 7,b7 7 det]m9$ eligible2 7,c7 submitt$ security vuln]abilities2 & 7,d7 receiv$ comp5sation2 7#b7 ! numb] & sev]ity ( vuln]abilities report$ z "p ( ! pilot program2 7#c7 ! numb] ( previ\sly unid5tifi$ security vuln]abilities rem$iat$ z a result ( ! pilot program2 7#d7 ! curr5t numb] ( out/&+ previ\sly unid5tifi$ security vuln]abilities & ,dep>tm5t rem$iation plans2 7#e7 ! av]age l5g? ( "t betwe5 ! report+ ( security vuln]abilities & rem$iation ( ! vuln]abilities2 7#f7 ! types ( comp5sation provid$ "u ! pilot program2 & 7#g7 ! lessons le>n$ f ! pilot program4 7d7 ,au?orization ( appropriations ,!re are au?oriz$ to be appropriat$ to ! ,dep>tm5t #bej1jjj = fiscal ye> #bjai to c>ry out ?is ,act4 ,septemb] #be1 #bjah ,report$ ) an am5dm5t1 committ$ to ! ,committee ( ! ,:ole ,h\se on ! ,/ate ( ! ,union1 & ord]$ to be pr9t$