#aag? ,,congress  #a/ ,session  ,h4 ,r4 
#bihj  ,,an ,,act  ,to am5d ! ,homel&   
,security ,act ( #bjjb to provide = !   
rem$iation ( cyb]security               
vuln]abilities1 & = o!r purposes4  #a4  
,%ort title ,?is ,act may be cit$ z !   
,cyb]security ,vuln]ability ,rem$iation 
,act4  #b4 ,cyb]security vuln]abilities 
,section #bbji ( ! ,homel& ,security    
,act ( #bjjb 7#f ,u4,s4,c4 #fei7 is     
am5d$--  7#a7 9 subsection 7a7-- 7,a7 9 
p>agraph 7#e71 by /rik+ & aft] !        
semicolon at ! end2  7,b7 by r$esignat+ 
p>agraph 7#f7 z p>agraph 7#g72 &  7,c7  
by ins]t+ aft] p>agraph 7#e7 ! foll[+   
new p>agraph3  7#f7 ! t]m cyb]security  
vuln]ability has ! mean+ giv5 ! t]m     
security vuln]ability 9 section #ajb ( !
 ,cyb]security ,in=mation ,%>+ ,act (   
#bjae 7#f ,u4,s4,c4 #aeja72 &  4  7#b7 9
 subsection 7c7--  7,a7 9 p>agraph      
7#e7-- 7i7 9 subp>agraph 7,a71 by /rik+ 
& aft] ! semicolon at ! end2  7ii7 by   
r$esignat+ subp>agraph 7,b7 z           
subp>agraph 7,c72  7iii7 by ins]t+ aft] 

subp>agraph 7,a7 ! foll[+ new           
subp>agraph3  7,b7 %>+ mitigation       
protocols to c\nt] cyb]security         
vuln]abilities pursuant to subsection   
7n72 &  2 &  7iv7 9 subp>agraph 7,c71 z 
s r$esignat$1 by ins]t+ & mitigation    
protocols to c\nt] cyb]security         
vuln]abilities 9 accordance )           
subp>agraph 7,b7 be=e ) ,f$]al2  7,b7 9 
p>agraph 7#g77;,c71 by /rik+ %>+ &      
ins]t+ %>e2 &  7,c7 9 p>agraph 7#i71 by 
ins]t+ mitigation protocols to c\nt]    
cyb]security vuln]abilities1 aft]       
measures12  7#c7 9 subsection           
7e77#a77;,g71 by /rik+ ! semicolon aft] 
& at ! end2  7#d7 by r$esignat+         
subsection 7o7 z subsection 7p72 &  7#e7
 by ins]t+ aft] subsection 7n7 foll[+   
new subsection3  7o7 ,protocols to c\nt]
 c]ta9 cyb]security vuln]abilities ,!   
,director may1 z appropriate1 id5tify1  
develop1 & dissem9ate actionable        
protocols to mitigate cyb]security      
vuln]abilities to in=mation sy/ems &    
indu/rial control sy/ems1 includ+ 9     

circum/ances 9 :i* su* vuln]abilities   
exi/ because s(tw>e or h>dw>e is no     
long] support$ by a v5dor4  4  #c4      
,report on cyb]security vuln]abilities  
7a7 ,report ,n lat] ?an #a ye> aft] !   
date ( ! enactm5t ( ?is ,act1 !         
,director ( ! ,cyb]security &           
,infra/ructure ,security ,ag5cy ( !     
,dep>tm5t ( ,homel& ,security %all      
submit to ! ,committee on ,homel&       
,security ( ! ,h\se ( ,repres5tatives & 
! ,committee on ,homel& ,security &     
,gov]nm5tal ,affairs ( ! ,s5ate a report
 on h[ ! ,ag5cy c>ries out subsection   
7n7 ( section #bbji ( ! ,homel&         
,security ,act ( #bjjb to coord9ate     
vuln]ability disclosures1 includ+       
disclosures ( cyb]security              
vuln]abilities 7z su* t]m is def9$ 9 su*
 section71 & subsection 7o7 ( su*       
section 7z add$ by section #b7 to       
dissem9ate actionable protocols to      
mitigate cyb]security vuln]abilities to 
in=mation sy/ems & indu/rial control    
sy/ems1 t includes ! foll[+3 7#a7 ,a    

description ( ! policies & proc$ures    
relat+ to ! coord9ation ( vuln]ability  
disclosures4  7#b7 ,a description ( !   
levels ( activity 9 fur!rance ( su*     
subsections 7n7 & 7o7 ( su* section     
#bbji4  7#c7 ,any plans to make fur!r   
improvem5ts to h[ in=mation provid$     
pursuant to su* subsections c be %>$ 7z 
su* t]m is def9$ 9 su* section #bbji7   
betwe5 ! ,dep>tm5t & indu/ry & o!r      
/akehold]s4  7#d7 ,any available        
in=mation on ! degree to :i* su*        
in=mation 0 act$ ^u by indu/ry & o!r    
/akehold]s4  7#e7 ,a description ( h[   
privacy & civil lib]ties are pres]v$ 9 !
 collection1 ret5tion1 use1 & %>+ (     
vuln]ability disclosures4  7b7 ,=m ,!   
report requir$ "u subsection 7b7 %all be
 submitt$ 9 unclassifi$ =m b may conta9 
a classifi$ annex4  #d4 ,competition    
relat+ to cyb]security vuln]abilities ,!
 ,"u ,secret>y = ,sci5ce & ,te*nology ( 
! ,dep>tm5t ( ,homel& ,security1 9      
consultation ) ! ,director ( !          
,cyb]security & ,infra/ructure ,security

 ,ag5cy ( ! ,dep>tm5t1 may e/abli% an   
inc5tive-bas$ program t all[s indu/ry1  
individuals1 academia1 & o!rs to compete
 9 id5tify+ rem$iation solutions =      
cyb]security vuln]abilities 7z su* t]m  
is def9$ 9 section #bbji ( ! ,homel&    
,security ,act ( #bjjb1 z am5d$ by      
section #b7 to in=mation sy/ems 7z su*  
t]m is def9$ 9 su* section #bbji7 &     
indu/rial control sy/ems1 includ+       
sup]visory control & data acquisition   
sy/ems4  #e4 ,title ,,xxii te*nical &   
cl]ical am5dm5ts  7a7 ,te*nical am5dm5ts
  7#a7 ,homel& ,security ,act ( #bjjb   
,subtitle ,a ( title ,,xxii ( ! ,homel& 
,security ,act ( #bjjb 7#f ,u4,s4,c4    
#fea et seq47 is am5d$-- 7,a7 9 ! fir/  
section #bbae 7#f ,u4,s4,c4 #ffe2 relat+
 to ! duties & au?orities relat+ to 4gov
 int]net doma971 by am5d+ ! section     
enum]ator & head+ to read z foll[s3     
#bbae4 ,duties & au?orities relat+ to   
4gov int]net doma9  2  7,b7 9 ! second  
section #bbae 7#f ,u4,s4,c4 #ffe;b2     
relat+ to ! jo9t cyb] plann+ (fice71 by 

am5d+ ! section enum]ator & head+ to    
read z foll[s3  #bbaf4 ,jo9t cyb] plann+
 (fice  2  7,c7 9 ! ?ird section #bbae  
7#f ,u4,s4,c4 #ffe;c2 relat+ to !       
,cyb]security ,/ate ,coord9ator71 by    
am5d+ ! section enum]ator & head+ to    
read z foll[s3  #bbag4 ,cyb]security    
,/ate ,coord9ator  2  7,d7 9 ! f\r?     
section #bbae 7#f ,u4,s4,c4 #ffe;d2     
relat+ to ,sector ,risk ,managem5t      
,ag5cies71 by am5d+ ! section enum]ator 
& head+ to read z foll[s3  #bbah4       
,sector ,risk ,managem5t ,ag5cies  2    
7,e7 9 section #bbaf 7#f ,u4,s4,c4      
#ffe;e2 relat+ to ! ,cyb]security       
,advisory ,committee71 by am5d+ !       
section enum]ator & head+ to read z     
foll[s3  #bbai4 ,cyb]security ,advisory 
,committee  2 &  7,f7 9 section #bbag   
7#f ,u4,s4,c4 #ffe;f2 relat+ to         
,cyb]security ,education & ,tra9+       
,programs71 by am5d+ ! section enum]ator
 & head+ to read z foll[s3  #bbbj4      
,cyb]security ,education & ,tra9+       
,programs  4  7#b7 ,consolidat$         

,appropriations ,act1 #bjba ,p>agraph   
7#a7 ( section #ijd7;b7 ( division ,u ( 
! ,consolidat$ ,appropriations ,act1    
#bjba 7,public ,law #aaf-bfj7 is am5d$1 
9 ! matt] prec$+ subp>agraph 7,a71 by   
ins]t+ ( #bjjb aft] ,homel& ,security   
,act4  7b7 ,cl]ical am5dm5t ,! table (  
cont5ts 9 section #a7;b7 ( ! ,homel&    
,security ,act ( #bjjb is am5d$ by /rik+
 ! items relat+ to sections #bbad ?r\gh 
#bbag & ins]t+ ! foll[+ new items3      
,sec4 #bbad4 ,national ,asset ,database4
 ,sec4 #bbae4 ,duties & au?orities      
relat+ to 4gov int]net doma94 ,sec4     
#bbaf4 ,jo9t cyb] plann+ (fice4 ,sec4   
#bbag4 ,cyb]security ,/ate ,coord9ator4 
,sec4 #bbah4 ,sector ,risk ,managem5t   
,ag5cies4 ,sec4 #bbai4 ,cyb]security    
,advisory ,committee4 ,sec4 #bbbj4      
,cyb]security ,education & ,tra9+       
,programs4  4  ,pass$ ! ,h\se (         
,repres5tatives ,july #bj1 #bjba4;,cl]k4