,i #aaf? ,,congress #b;d ,session ,h4 ,r4 #gcca ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,june #be1 #bjbj,mr4 ,langev9 7= himself1 ,mr4 ,gallagh]1 ,mrs4 ,c>olyn ,b4 ,maloney ( ,new ,york1 ,mr4 ,katko1 ,mr4 ,rupp]sb]g]1 & ,mr4 ,hurd ( ,texas7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,ov]sight & ,re=m1 & 9 addition to ! ,committees on ,arm$ ,s]vices1 ,=eign ,affairs1 & ,intellig5ce 7,p]man5t ,select71 = a p]iod to be subsequ5tly det]m9$ by ! ,speak]1 9 ea* case = consid]ation ( su* provisions z fall )9 ! jurisdiction ( ! committee conc]n$ ,a ,,bill ,to e/abli% ! ,(fice ( ! ,national ,cyb] ,director1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,national ,cyb] ,director ,act4 #b4 ,national ,cyb] ,director 7a7 ,e/abli%m5t ,!re is e/abli%$1 )9 ! ,executive ,(fice ( ! ,presid5t1 ! ,(fice ( ! ,national ,cyb] ,director 79 ?is section ref]r$ to z ! ,(fice74 7b7 ,national ,cyb] ,director 7#a7 ,9 g5]al ,! ,(fice %all be head$ by ! ,national ,cyb] ,director 79 ?is section ref]r$ to z ! ,director7 :o %all be appo9t$ by ! ,presid5t1 by & ) ! advice & cons5t ( ! ,s5ate4 ,z an ex]cise ( ! rulemak+ p[] ( ! ,s5ate1 any nom9ation ( ! ,director submitt$ to ! ,s5ate = confirmation1 & ref]r$ to a committee1 %all be jo9tly ref]r$ to ! ,homel& ,security & ,gov]nm5tal ,affairs & ! ,arm$ ,s]vices ,committees ( ! ,s5ate4 ,! ,director %all hold (fice at ! pleasure ( ! ,presid5t1 & %all be entitl$ to receive ! same pay & all[ances z are provid$ = level ,i ( ! ,executive ,s*$ule "u section #ecab ( title #e1 ,unit$ ,/ates ,code4 7#b7 ,deputy directors ,!re %all be two ,deputy ,national ,cyb] ,directors1 to be appo9t$ by ! ,presid5t1 :o %all hold (fice at ! pleasure ( ! ,presid5t1 & :o %all report to ! ,director1 z foll[s3 7,a7 ,! ,deputy ,national ,cyb] ,director = ,/rategy1 ,capabilities1 & ,budget4 7,b7 ,! ,deputy ,national ,cyb] ,director = ,plans & ,op]ations4 7c7 ,duties ( ! ,national ,cyb] ,director 7#a7 ,9 g5]al ,subject to ! au?ority1 direction1 & control ( ! ,presid5t1 ! ,director %all-- 7,a7 s]ve z ! pr9cipal advisor to ! ,presid5t on cyb]security /rategy & policy2 7,b7 9 consultation ) appropriate ,f$]al dep>tm5ts & ag5cies1 develop ! ,unit$ ,/ates ,national ,cyb] ,/rategy1 :i* %all include elem5ts relat$ to ,f$]al dep>tm5ts & ag5cies-- 7i7 in=mation security2 & 7ii7 programs & policies int5d$ to improve ! ,unit$ ,/ates cyb]security po/ure2 7,c7 9 consultation ) appropriate ,f$]al dep>tm5ts & ag5cies & ^u approval ( ! ,national ,cyb] ,/rategy by ! ,presid5t1 sup]vise implem5tation ( ! /rategy by-- 7i7 9 consultation ) ! ,director ( ! ,(fice ( ,managem5t & ,budget1 monitor+ & assess+ ! effectiv5ess1 includ+ co/-effectiv5ess1 ( ,f$]al dep>tm5ts & ag5cies' implem5tation ( ! /rategy2 7ii7 mak+ recomm5dations relevant to *anges 9 ! organization1 p]sonnel & res\rce allocation1 & policies ( ,f$]al dep>tm5ts & ag5cies to ! ,director ( ! ,(fice ( ,managem5t & ,budget & heads ( su* dep>tm5ts & ag5cies 9 ord] to implem5t ! /rategy2 7iii7 review+ ! annual budget proposal = ea* ,f$]al dep>tm5t or ag5cy & c]tify+ to ! head ( ea* ,f$]al dep>tm5t or ag5cy & ! ,director ( ! ,(fice ( ,managem5t & ,budget :e!r ! dep>tm5t or ag5cy proposal is consi/5t ) ! /rategy2 7iv7 cont9u\sly assess+ & mak+ relevant recomm5dations to ! ,presid5t on ! appropriate level ( integration & int]op]ability across ! ,f$]al cyb]security op]ations c5t]s2 7v7 coord9at+ ) ! ,f$]al ,*ief ,in=mation ,(fic]1 ! ,f$]al ,*ief ,in=mation ,security ,(fic]1 ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy1 & ! ,director ( ,national ,in/itute ( ,/&>ds & ,te*nology on ! developm5t & implem5tation ( policies & guidel9es relat$ to issues ( ,f$]al dep>tm5t & ag5cy in=mation security2 & 7vi7 report+ annually to ! ,presid5t & ! ,congress on ! /ate ( ! ,unit$ ,/ates cyb]security po/ure1 ! effectiv5ess ( ! /rategy1 & ! /atus ( ,f$]al dep>tm5ts & ag5cies' implem5tation ( ! /rategy2 7,d7 lead jo9t int]ag5cy plann+ = ! ,f$]al ,gov]nm5t's integrat$ response to cyb]attacks & cyb] campaigns ( significant consequ5ce1 to include-- 7i7 coord9at+ ) relevant ,f$]al dep>tm5ts & ag5cies 9 ! developm5t (1 = ! approval ( ! ,presid5t1 jo9t1 integrat$ op]ational plans1 processes1 & playbooks = incid5t response t feature-- 7,i7 cle> l9es ( au?ority & l9es ( ef=t across ! ,f$]al ,gov]nm5t2 7,,ii7 au?orities t h be5 delegat$ to an appropriate level to facilitate effective op]ational responses across ! ,f$]al ,gov]nm5t2 & 7,,iii7 support = ! integration ( def5sive cyb] plans & capabilities ) (f5sive cyb] plans & capabilities 9 a mann] consi/5t ) improv+ ! ,unit$ ,/ates cyb]security po/ure2 7ii7 ex]cis+ ^! op]ational plans1 processes1 & playbooks2 7iii7 updat+ ^! op]ational plans1 processes1 & playbooks = incid5t response z ne$$ 9 coord9ation ) ongo+ (f5sive cyb] plans & op]ations2 & 7iv7 ensur+ ^! plans1 processes1 & playbooks are prop]ly coord9at$ ) relevant private sector entities1 z appropriate2 7,e7 direct ! ,f$]al ,gov]nm5t's response to cyb]attacks & cyb] campaigns ( significant consequ5ce1 to include-- 7i7 develop+ = ! approval ( ! ,presid5t1 ) ! heads ( relevant ,f$]al dep>tm5ts & ag5cies indep5d5tly or ?r\gh ! ,national ,security ,c\ncil z direct$ by ! ,presid5t1 op]ational priorities1 requirem5ts1 & tasks2 7ii7 coord9at+1 deconflict+1 & ensur+ ! execution ( op]ational activities 9 incid5t response2 & 7iii7 coord9at+ op]ational activities ) relevant private sector entities2 7,f7 engage ) private sector lead]s on cyb]security & em]g+ te*nology issues ) ! support (1 & 9 coord9ation )1 ! ,cyb]security & ,infra/ructure ,security ,ag5cy & o!r ,f$]al dep>tm5ts & ag5cies1 z appropriate2 7,g7 annually report to ,congress on cyb]security ?reats & issues fac+ ! nation1 includ+ any new or em]g+ te*nologies t may impact national security1 economic prosp]ity1 or en=c+ ! rule ( law2 & 7,h7 be responsible = su* o!r functions z ! ,presid5t may direct4 7#b7 ,delegation ( au?ority ,! ,director may-- 7,a7 s]ve z ! s5ior repres5tative on any body t ! ,presid5t may e/abli% = ! purpose ( provid+ ! ,presid5t advice on cyb]security2 7,b7 be emp[]$ to conv5e ,national ,security ,c\ncil1 ,national ,economic ,c\ncil & ,homel& ,security ,c\ncil meet+s1 ) ! concurr5ce ( ! ,national ,security ,advisor1 ,homel& ,security ,advisor1 or ,director ( ! ,national ,economic ,c\ncil1 z appropriate2 7,c7 be includ$ z a p>ticipant 9 prep>ations = &1 if appropriate1 execution ( cyb]security summits & o!r int]national meet+s at :i* cyb]security is a major topic2 7,d7 delegate any ( ! ,director's functions1 p[]s1 & duties to su* (fic]s & employees ( ! ,(fice z he may designate2 & 7,e7 au?orize su* successive re-delegations ( su* functions1 p[]s1 & duties to su* (fic]s & employees ( ! ,(fice z he may deem appropriate4 7d7 ,att5dance & p>ticipation 9 ,national ,security ,c\ncil meet+s ,section #aja7;c77#b7 ( ! ,national ,security ,act ( #aidg 7#ej ,u4,s4,c4 #cjba7;c77#b77 is am5d$ by /rik+ & ! ,*airman ( ! ,jo9t ,*iefs ( ,/aff & ins]t+ ! ,*airman ( ! ,jo9t ,*iefs ( ,/aff1 & ! ,national ,cyb] ,director4 7e7 ,p[]s ( ! ,director ,! ,director may1 = ! purposes ( c>ry+ out ! ,director's functions "u ?is section-- 7#a7 subject to ! civil s]vice & classification laws1 select1 appo9t1 employ1 & fix ! comp5sation ( su* (fic]s & employees z are necess>y & prescribe _! au?ority & duties1 except t n m ?an #ge individuals may be employ$ )\t reg>d to any provision ( law regulat+ ! employm5t or comp5sation at rates n to exce$ ! basic rate ( basic pay payable = level ,,iv ( ! ,executive ,s*$ule "u section #ecae ( title #e1 ,unit$ ,/ates ,code2 7#b7 employ exp]ts & consultants 9 accordance ) section #caji ( title #e1 ,unit$ ,/ates ,code1 & comp5sate individuals s employ$ = ea* day 7includ+ travel "t7 at rates n 9 excess ( ! maximum rate ( basic pay = grade ,,gs-#ae z provid$ 9 section #eccb ( su* title1 & :ile su* exp]ts & consultants are s s]v+ away f _! homes or regul> place ( bus9ess1 to pay su* employees travel exp5ses & p] diem 9 lieu ( subsi/5ce at rates au?oriz$ by section #egjc ( su* title #e = p]sons 9 ,f$]al ,gov]nm5t s]vice employ$ int]mitt5tly2 7#c7 promulgate su* rules & regulations z may be necess>y to c>ry out ! functions1 p[]s1 & duties ve/$ 9 ! ,director2 7#d7 utilize1 ) _! cons5t1 ! s]vices1 p]sonnel1 & facilities ( o!r ,f$]al ag5cies2 7#e7 ent] into & p]=m su* contracts1 leases1 coop]ative agreem5ts1 or o!r transactions z may be necess>y 9 ! conduct ( ! "w ( ! ,(fice & on su* t]ms z ! ,director may det]m9e appropriate1 ) any ,f$]al ag5cy1 or ) any public or private p]son or entity2 7#f7 accept volunt>y & uncomp5sat$ s]vices1 not)/&+ ! provisions ( section #acdb ( title #ca1 ,unit$ ,/ates ,code2 7#g7 adopt an (ficial seal1 :i* %all be judicially notic$2 & 7#h7 provide1 :]e au?oriz$ by law1 copies ( docum5ts to p]sons at co/1 except t any funds s receiv$ %all be cr$it$ to1 & be available = use f1 ! acc\nt f :i* exp5ditures relat+ !reto 7 made4 7f7 ,def9itions ,9 ?is section3 7#a7 ,cyb]security po/ure ,! t]m cyb]security po/ure means ! ability to id5tify & protect1 & detect1 respond to & recov] f intrusions 91 in=mation sy/ems ! compromise ( :i* c\ld con/itute a cyb] attack or cyb] campaign ( significant consequ5ce4 7#b7 ,cyb] attacks & cyb] campaigns ( significant consequ5ce ,! t]m cyb] attacks & cyb] campaigns ( significant consequ5ce means an incid5t or s]ies ( incid5ts t h ! purpose or effect (-- 7,a7 caus+ a significant disruption to ! availability ( a ,f$]al in=mation sy/em2 7,b7 h>m+1 or o!rwise significantly compromis+ ! provision ( s]vice by1 a comput] or network ( comput]s t support "o or m entities 9 a critical infra/ructure sector2 7,c7 significantly compromis+ ! provision ( s]vices by "o or m entities 9 a critical infra/ructure sector2 7,d7 caus+ a significant misappropriation ( funds or economic res\rces1 trade secrets1 p]sonal id5tifi]s1 or f9ancial in=mation = comm]cial or competitive advantage or private f9ancial ga92 or 7,e7 o!rwise con/itut+ a significant ?reat to ! national security1 =eign policy1 or economic heal? or f9ancial /ability ( ! ,unit$ ,/ates4 7#c7 ,incid5t ,! t]m incid5t has ! mean+ giv5 t t]m 9 section #ceeb ( title #dd1 ,unit$ ,/ates ,code4 7#d7 ,in=mation security ,! t]m in=mation security has ! mean+ giv5 t t]m 9 section #ceeb ( title #dd1 ,unit$ ,/ates ,code4