,,ib  ,union ,cal5d> ,no4 #aea  #aaf?   
,,congress  #a/ ,session  ,h4 ,r4 #cgaj 
,report ,no4 #aaf-aic  ,,9 ,,! ,,h\se   
,,( ,,repres5tatives  ,july #aa1 #bjai  
,ms4 ,jackson ,lee 7= h]self1 ,mr4      
,payne1 & ,mr4 ,langev97 introduc$ !    
foll[+ bill2 :i* 0 ref]r$ to !          
,committee on ,homel& ,security  ,augu/ 
#cj1 #bjai ,committ$ to ! ,committee ( !
 ,:ole ,h\se on ! ,/ate ( ! ,union &    
ord]$ to be pr9t$  ,a ,,bill  ,to am5d !
 ,homel& ,security ,act ( #bjjb to      
provide = ! rem$iation ( cyb]security   
vuln]abilities1 & = o!r purposes4  #a4  
,%ort title ,?is ,act may be cit$ z !   
,cyb]security ,vuln]ability ,rem$iation 
,act4  #b4 ,cyb]security vuln]abilities 
,section #bbji ( ! ,homel& ,security    
,act ( #bjjb 7#f ,u4,s4,c4 #fei7 is     
am5d$--  7#a7 9 subsection 7a7-- 7,a7 9 
p>agraph 7#e71 by /rik+ & aft] !        
semicolon at ! end2  7,b7 by r$esignat+ 
p>agraph 7#f7 z p>agraph 7#g72 &  7,c7  
by ins]t+ aft] p>agraph 7#e7 ! foll[+   
new p>agraph3  7#f7 ! t]m cyb]security  

vuln]ability has ! mean+ giv5 ! t]m     
security vuln]ability 9 section #ajb ( !
 ,cyb]security ,in=mation ,%>+ ,act (   
#bjae 7#f ,u4,s4,c4 #aeja72 &  4  7#b7 9
 subsection 7c7--  7,a7 9 p>agraph      
7#e7-- 7i7 9 subp>agraph 7,a71 by /rik+ 
& aft] ! semicolon at ! end2  7ii7 by   
r$esignat+ subp>agraph 7,b7 z           
subp>agraph 7,c72  7iii7 by ins]t+ aft] 
subp>agraph 7,a7 ! foll[+ new           
subp>agraph3  7,b7 %>+ mitigation       
protocols to c\nt] cyb]security         
vuln]abilities pursuant to subsection   
7n72 &  2 &  7iv7 9 subp>agraph 7,c71 z 
s r$esignat$1 by ins]t+ & mitigation    
protocols to c\nt] cyb]security         
vuln]abilities 9 accordance )           
subp>agraph 7,b7 be=e ) ,f$]al2  7,b7 9 
p>agraph 7#g77;,c71 by /rik+ %>+ &      
ins]t+ %>e2 &  7,c7 9 p>agraph 7#i71 by 
ins]t+ mitigation protocols to c\nt]    
cyb]security vuln]abilities1 aft]       
measures12  7#c7 9 subsection           
7e77#a77;,g71 by /rik+ ! semicolon aft] 
& at ! end2 &  7#d7 by add+ at ! end !  

foll[+ new subsection3  7n7 ,protocols  
,to c\nt] cyb]security vuln]abilities ,!
 ,director may1 z appropriate1 id5tify1 
develop1 & dissem9ate actionable        
protocols to mitigate cyb]security      
vuln]abilities1 includ+ 9 circum/ances 9
 :i* su* vuln]abilities exi/ because    
s(tw>e or h>dw>e is no long] support$ by
 a v5dor4  4  #c4 ,report on            
cyb]security vuln]abilities  7a7 ,report
 ,n lat] ?an "o ye> aft] ! date ( !     
enactm5t ( ?is ,act1 ! ,director ( !    
,cyb]security & ,infra/ructure ,security
 ,ag5cy ( ! ,dep>tm5t ( ,homel&         
,security %all submit to ! ,committee on
 ,homel& ,security ( ! ,h\se (          
,repres5tatives & ! ,committee on       
,homel& ,security & ,gov]nm5tal ,affairs
 ( ! ,s5ate a report on h[ ! ,ag5cy     
c>ries out subsection 7m7 ( section     
#bbji ( ! ,homel& ,security ,act ( #bjjb
 to coord9ate vuln]ability disclosures1 
includ+ disclosures ( cyb]security      
vuln]abilities 7z su* t]m is def9$ 9 su*
 section71 & subsection 7n7 ( su*       

section 7z add$ by section #b7 to       
dissem9ate actionable protocols to      
mitigate cyb]security vuln]abilities1 t 
includes ! foll[+3  7#a7 ,a description 
( ! policies & proc$ures relat+ to !    
coord9ation ( vuln]ability disclosures4 
7#b7 ,a description ( ! levels (        
activity 9 fur!rance ( su* subsections  
7m7 & 7n7 ( su* section #bbji4  7#c7    
,any plans to make fur!r improvem5ts to 
h[ in=mation provid$ pursuant to su*    
subsections c be %>$ 7z su* t]m is def9$
 9 su* section #bbji7 betwe5 ! ,dep>tm5t
 & indu/ry & o!r /akehold]s4  7#d7 ,any 
available in=mation on ! degree to :i*  
su* in=mation 0 act$ ^u by indu/ry & o!r
 /akehold]s4  7#e7 ,a description ( h[  
privacy & civil lib]ties are pres]v$ 9 !
 collection1 ret5tion1 use1 & %>+ (     
vuln]ability disclosures4  7b7 ,=m ,!   
report requir$ "u subsection 7b7 %all be
 submitt$ 9 unclassifi$ =m b may conta9 
a classifi$ annex4  #d4 ,competition    
relat+ to cyb]security vuln]abilities ,!
 ,"u ,secret>y = ,sci5ce & ,te*nology ( 

! ,dep>tm5t ( ,homel& ,security1 9      
consultation ) ! ,director ( !          
,cyb]security & ,infra/ructure ,security
 ,ag5cy ( ! ,dep>tm5t1 may e/abli% an   
inc5tive-bas$ program t all[s indu/ry1  
individuals1 academia1 & o!rs to compete
 9 provid+ rem$iation solutions =       
cyb]security vuln]abilities 7z su* t]m  
is def9$ 9 section #bbji ( ! ,homel&    
,security ,act ( #bjjb1 z am5d$ by      
section #b74  ,augu/ #cj1 #bjai         
,committ$ to ! ,committee ( ! ,:ole     
,h\se on ! ,/ate ( ! ,union & ord]$ to  
be pr9t$