,,ib ,union ,calendar ,no4 #eah #aafth  
,,congress  #b;d ,session  ,h4 ,r4 #agca
 ,report ,no4 #aaf-fcc ,,in ,,the       
,,house ,,of ,,representatives  ,march  
#ac1 #bjai,mr4 ,himes 7for himself1 ,mr4
 ,heck1 and ,mr4 ,meeks7 introduced the 
following bill2 which was referred to   
the ,committee on ,financial ,services  
,december #h1 #bjbj,reported with an    
amendment1 committed to the ,committee  
of the ,whole ,house on the ,state of   
the ,union1 and ordered to be           
printed,strike out all after the        
enacting clause and insert the part     
printed in italic,for text of introduced
 bill1 see copy of bill as introduced on
 ,march #ac1 #bjai  ,a ,,bill  ,to amend
 the ,securities ,exchange ,act of #aicd
 to promote transparency in the         
oversight of cybersecurity risks at     
publicly traded companies4  #a4 ,short  
title ,this ,act may be cited as the    
,cybersecurity ,disclosure ,act of      
#bjai4  #b4 ,cybersecurity transparency 
,the ,securities ,exchange ,act of #aicd

 7#ae ,u4,s4,c4 #gh;a et seq47 is       
amended by inserting after section      
#ad;,b 7#ae ,u4,s4,c4 #ghn-#b7 the      
following3  #ad;,c4 ,cybersecurity      
transparency  7a7 ,definitions ,in this 
section-- 7#a7 the term cybersecurity   
means any action1 step1 or measure to   
detect1 prevent1 deter1 mitigate1 or    
address any cybersecurity threat or any 
potential cybersecurity threat2  7#b7   
the term cybersecurity threat-- 7,a7    
means an action1 not protected by the   
,first ,amendment to the ,constitution  
of the ,united ,states1 on or through an
 information system that may result in  
an unauthorized effort to adversely     
impact the security1 availability1      
confidentiality1 or integrity of an     
information system or information that  
is stored on1 processed by1 or          
transiting an information system2 and   
7,b7 does not include any action that   
solely involves a violation of a        
consumer term of service or a consumer  
licensing agreement2  7#c7 the term     

information system-- 7,a7 has the       
meaning given the term in section #cejb 
of title #dd1 ,united ,states ,code2 and
  7,b7 includes industrial control      
systems1 such as supervisory control and
 data acquisition systems1 distributed  
control systems1 and programmable logic 
controllers2  7#d7 the term ,,nist means
 the ,national ,institute of ,standards 
and ,technology2 and  7#e7 the term     
reporting company means any company that
 is an issuer-- 7,a7 the securities of  
which are registered under section #ab2 
or  7,b7 that is required to file       
reports under section #ae7;d74  7b7     
,requirement to issue rules ,not later  
than #cfj days after the date of        
enactment of this section1 the          
,commission shall issue final rules to  
require each reporting company1 in the  
annual report of the reporting company  
submitted under section #ac or section  
#ae7;d7 or in the annual proxy statement
 of the reporting company submitted     
under section #ad7;a7-- 7#a7 to disclose

 whether any member of the governing    
body1 such as the board of directors or 
general partner1 of the reporting       
company has expertise or experience in  
cybersecurity and in such detail as     
necessary to fully describe the nature  
of the expertise or experience2 and     
7#b7 if no member of the governing body 
of the reporting company has expertise  
or experience in cybersecurity1 to      
describe what other aspects of the      
reporting company's cybersecurity were  
taken into account by any person1 such  
as an official serving on a nominating  
committee1 that is responsible for      
identifying and evaluating nominees for 
membership to the governing body4  7c7  
,cybersecurity expertise or experience  
,for purposes of subsection 7b71 the    
,commission1 in consultation with       
,,nist1 shall define what constitutes   
expertise or experience in cybersecurity
 using commonly defined roles1          
specialties1 knowledge1 skills1 and     
abilities1 such as those provided in    

,,nist ,special ,publication #hjj-aha1  
titled ,national ,initiative for        
,cybersecurity ,education 7,,nice7      
,cybersecurity ,workforce ,framework1 or
 any successor thereto4  4  ,december   
#h1 #bjbj,reported with an amendment1   
committed to the ,committee of the      
,whole ,house on the ,state of the      
,union1 and ordered to be printed