,,ii  #aaf? ,,congress  #a/ ,session    
,s4 #cae  ,,9 ,,! ,,s5ate ,,( ,,!       
,,unit$ ,,/ates  ,janu>y #ca1 #bjai ,ms4
 ,hassan 7= h]self & ,mr4 ,portman7     
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,homel& ,security & ,gov]nm5tal ,affairs
  ,a ,,bill  ,to au?orize cyb] hunt &   
incid5t response teams at ! ,dep>tm5t ( 
,homel& ,security1 & = o!r purposes4    
#a4 ,%ort title  ,?is ,act may be cit$ z
 ! ,,dhs ,cyb] ,hunt & ,incid5t         
,response ,teams ,act ( #bjai4  #b4     
,dep>tm5t ( ,homel& ,security cyb] hunt 
& incid5t response teams  7a7 ,9 g5]al  
,section #bbji ( ! ,homel& ,security    
,act ( #bjjb 7#f ,u4,s4,c4 #fei7 is     
am5d$-- 7#a7 9 subsection               
7d77#a77;,b77iv71 by ins]t+ 1 includ+   
cyb]security speciali/s aft] entities2  
7#b7 by r$esignat+ subsections 7f7 ?r\gh
 7m7 z subsections 7g7 ?r\gh 7n71       
respectively2  7#c7 by ins]t+ aft]      
subsection 7e7 ! foll[+3  7f7 ,cyb] hunt
 & incid5t response teams  7#a7 ,9 g5]al

 ,! ,c5t] %all ma9ta9 cyb] hunt &       
incid5t response teams = ! purpose (    
lead+ ,f$]al asset response activities &
 provid+ timely te*nical assi/ance to   
,f$]al & non-,f$]al entities1 includ+   
across all critical infra/ructure       
sectors1 reg>d+ actual or pot5tial      
security incid5ts1 z appropriate & ^u   
reque/1 includ+--  7,a7 assi/ance to    
asset own]s & op]ators 9 re/or+ s]vices 
foll[+ a cyb] incid5t2  7,b7            
id5tification & analysis ( cyb]security 
risk & unau?oriz$ cyb] activity2  7,c7  
mitigation /rategies to prev5t1 det]1 & 
protect aga9/ cyb]security risks2  7,d7 
recomm5dations to asset own]s & op]ators
 = improv+ ov]all network & control     
sy/ems security to l[] cyb]security     
risks1 & o!r recomm5dations1 z          
appropriate2 &  7,e7 su* o!r            
capabilities z ! ,secret>y det]m9es     
appropriate4  7#b7 ,associat$ metrics ,!
 ,c5t] %all cont9ually assess & evaluate
 ! cyb] hunt & incid5t response teams & 
! op]ations ( ^? cyb] hunt & incid5t    

response teams us+ robu/ metrics4  7#c7 
,report ,at ! conclusion ( ea* ( ! fir/ 
#d fiscal ye>s aft] ! date ( enactm5t ( 
! ,,dhs ,cyb] ,hunt & ,incid5t ,response
 ,teams ,act ( #bjai1 ! ,c5t] %all      
submit to ! ,committee on ,homel&       
,security & ,gov]nm5tal ,affairs ( !    
,s5ate & ! ,committee on ,homel&        
,security ( ! ,h\se ( ,repres5tatives a 
report t includes--  7,a7 in=mation     
relat+ to ! metrics us$ = evaluation &  
assessm5t ( ! cyb] hunt & incid5t       
response teams & op]ations "u p>agraph  
7#b71 includ+ ! res\rces & /aff+ ( ^?   
cyb] hunt & incid5t response teams2 &   
7,b7 = ! p]iod cov]$ by ! report-- 7i7 !
 total numb] ( incid5t response reque/s 
receiv$2  7ii7 ! numb] ( incid5t        
response tickets op5$2 &  7iii7 a       
/atem5t (--  7,i7 all int]ag5cy /aff+ ( 
cyb] hunt & incid5t response teams2 &   
7,,ii7 ! int]ag5cy collaborations       
e/abli%$ to support cyb] hunt & incid5t 
response teams4  7#d7 ,cyb]security     
speciali/s ,aft] notice to1 & ) !       

approval (1 ! entity reque/+ action by  
or te*nical assi/ance f ! ,c5t]1 !      
,secret>y may include cyb]security      
speciali/s f ! private sector on a cyb] 
hunt & incid5t response team4  2 &  7#d7
 9 subsection 7g71 z s r$esignat$-- 7,a7
 9 p>agraph 7#a71 by ins]t+ 1 or any    
team or activity ( ! ,c5t]1 aft] ,c5t]2 
&  7,b7 9 p>agraph 7#b71 by ins]t+ 1 or 
any team or activity ( ! ,c5t]1 aft]    
,c5t]4  7b7 ,no additional funds        
au?oriz$ ,no additional funds are       
au?oriz$ to be appropriat$ to c>ry out !
 requirem5ts ( ?is ,act & ! am5dm5ts    
made by ?is ,act4 ,su* requirem5ts %all 
be c>ri$ out us+ am\nts o!rwise au?oriz$
 to be appropriat$4