,,ii  #aaf? ,,congress  #a/ ,session    
,s4 #eib  ,,9 ,,! ,,s5ate ,,( ,,!       
,,unit$ ,,/ates  ,febru>y #bh1 #bjai,mr4
 ,re$ 7= himself1 ,ms4 ,coll9s1 ,mr4    
,w>n]1 ,mr4 ,k5n$y1 & ,mr4 ,jones7      
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,bank+1 ,h\s+1 & ,urban ,affairs  ,a    
,,bill  ,to am5d ! ,securities ,ex*ange 
,act ( #aicd to promote transp>5cy 9 !  
ov]sight ( cyb]security risks at        
publicly trad$ companies4  #a4 ,%ort    
title ,?is ,act may be cit$ z !         
,cyb]security ,disclosure ,act ( #bjai4 
#b4 ,cyb]security transp>5cy ,!         
,securities ,ex*ange ,act ( #aicd 7#ae  
,u4,s4,c4 #gh;a et seq47 is am5d$ by    
ins]t+ aft] section #ad;,b 7#ae         
,u4,s4,c4 #ghn-#b7 ! foll[+3  #ad;,c4   
,cyb]security transp>5cy  7a7           
,def9itions ,9 ?is section-- 7#a7 ! t]m 
cyb]security means any action1 /ep1 or  
measure to detect1 prev5t1 det]1        
mitigate1 or address any cyb]security   
?reat or any pot5tial cyb]security      

?reat2  7#b7 ! t]m cyb]security ?reat-- 
7,a7 means an action1 n protect$ by !   
,fir/ ,am5dm5t to ! ,con/itution ( !    
,unit$ ,/ates1 on or ?r\gh an in=mation 
sy/em t may result 9 an unau?oriz$ ef=t 
to adv]sely impact ! security1          
availability1 confid5tiality1 or        
integrity ( an in=mation sy/em or       
in=mation t is /or$ on1 process$ by1 or 
transit+ an in=mation sy/em2 &  7,b7    
does n include any action t solely      
involves a violation ( a consum] t]m (  
s]vice or a consum] lic5s+ agreem5t2    
7#c7 ! t]m in=mation sy/em-- 7,a7 has ! 
mean+ giv5 ! t]m 9 section #cejb ( title
 #dd1 ,unit$ ,/ates ,code2 &  7,b7      
includes indu/rial control sy/ems1 su* z
 sup]visory control & data acquisition  
sy/ems1 di/ribut$ control sy/ems1 &     
programmable logic controll]s2  7#d7 !  
t]m ,,ni/ means ! ,national ,in/itute ( 
,/&>ds & ,te*nology2 &  7#e7 ! t]m      
report+ company means any company t is  
an issu]--  7,a7 ! securities ( :i* are 
regi/]$ "u section #ab2 or  7,b7 t is   

requir$ to file reports "u section      
#ae7;d74  7b7 ,requirem5t ,to issue     
rules ,n lat] ?an #cfj days aft] ! date 
( enactm5t ( ?is section1 ! ,commission 
%all issue f9al rules to require ea*    
report+ company1 9 ! annual report ( !  
report+ company submitt$ "u section #ac 
or section #ae7;d7 or 9 ! annual proxy  
/atem5t ( ! report+ company submitt$ "u 
section #ad7;a7--  7#a7 to disclose :e!r
 any memb] ( ! gov]n+ body1 su* z ! bo>d
 ( directors or g5]al p>tn]1 ( ! report+
 company has exp]tise or exp]i5ce 9     
cyb]security & 9 su* detail z necess>y  
to fully describe ! nature ( ! exp]tise 
or exp]i5ce2 &  7#b7 if no memb] ( !    
gov]n+ body ( ! report+ company has     
exp]tise or exp]i5ce 9 cyb]security1 to 
describe :at o!r aspects ( ! report+    
company's cyb]security 7 tak5 into      
acc\nt by any p]son1 su* z an (ficial   
s]v+ on a nom9at+ committee1 t is       
responsible = id5tify+ & evaluat+       
nom9ees = memb]%ip to ! gov]n+ body4    
7c7 ,cyb]security exp]tise or exp]i5ce  

,= purposes ( subsection 7b71 !         
,commission1 9 consultation ) ,,ni/1    
%all def9e :at con/itutes exp]tise or   
exp]i5ce 9 cyb]security us+ commonly    
def9$ roles1 specialties1 k1 skills1 &  
abilities1 su* z ^? provid$ 9 ,,ni/     
,special ,publication #hjj-aha1 entitl$ 
,national ,initiative = ,cyb]security   
,education 7,,nice7 ,cyb]security       
,work=ce ,framework1 or any successor   
!reto4  4