#aag? ,,congress  #b;d ,session  ,h4 ,r4
 #gbii  ,,an ,,act  ,to require !       
,secret>y ( ,vet]ans ,affairs to obta9  
an indep5d5t cyb]security assessm5t (   
in=mation sy/ems ( ! ,dep>tm5t (        
,vet]ans ,affairs1 & = o!r purposes4    
#a4 ,%ort title ,?is ,act may be cit$ z 
! ,/r5g!n+ ,,va ,cyb]security ,act (    
#bjbb or ! ,,svac ,act ( #bjbb4  #b4    
,indep5d5t cyb]security assessm5t (     
in=mation sy/ems ( ,dep>tm5t ( ,vet]ans 
,affairs  7a7 ,indep5d5t assessm5t      
requir$  7#a7 ,9 g5]al ,n lat] ?an #fj  
days aft] ! date ( ! enactm5t ( ?is     
,act1 ! ,secret>y ( ,vet]ans ,affairs   
%all seek to ent] into an agreem5t ) a  
f$]ally fund$ rese>* & developm5t c5t]  
to provide to ! ,secret>y an indep5d5t  
cyb]security assessm5t (--  7,a7 five   
high-impact in=mation sy/ems ( !        
,dep>tm5t ( ,vet]ans ,affairs2 &  7,b7 !
 effectiv5ess ( ! in=mation security    
program & in=mation security managem5t  
sy/em ( ! ,dep>tm5t4  7#b7 ,detail$     
analysis ,! indep5d5t cyb]security      

assessm5t provid$ "u p>agraph 7#a7 %all 
include a detail$ analysis ( ! ability (
 ! ,dep>tm5t-- 7,a7 to ensure !         
confid5tiality1 integrity1 &            
availability ( ! in=mation1 in=mation   
sy/ems1 & devices ( ! ,dep>tm5t2 &  7,b7
 to protect aga9/-- 7i7 advanc$ p]si/5t 
cyb]security ?reats2  7ii7 ransomw>e2   
7iii7 d5ial ( s]vice attacks2  7iv7     
insid] ?reats2  7v7 ?reats f =eign      
actors1 includ+ /ate sponsor$ crim9als &
 o!r =eign bas$ crim9als2  7vi7 phi%+2  
7vii7 cr$5tial !ft2  7viii7 cyb]security
 attacks t t>get ! supply *a9 ( !       
,dep>tm5t2  7ix7 ?reats due to remote   
access & telework activity2 &  7x7 o!r  
cyb] ?reats4  7#c7 ,types ( sy/ems ,!   
indep5d5t cyb]security assessm5t provid$
 "u p>agraph 7#a7 %all cov] on-premises1
 remote1 cl\d-bas$1 & mobile in=mation  
sy/ems & devices us$ by1 or 9 support (1
 ,dep>tm5t activities4  7#d7 ,%ad[      
in=mation te*nology ,! indep5d5t        
cyb]security assessm5t provid$ "u       
p>agraph 7#a7 %all include an evaluation

 ( ! use ( in=mation te*nology sy/ems1  
devices1 & s]vices by employees &       
contractors ( ! ,dep>tm5t :o d s )\t !  
heads ( ! elem5ts ( ! ,dep>tm5t t are   
responsible = in=mation te*nology at !  
,dep>tm5t kn[+ or approv+ ( su* use4    
7#e7 ,me?odology ,9 conduct+ !          
cyb]security assessm5t to be provid$ "u 
p>agraph 7#a71 ! f$]ally fund$ rese>* & 
developm5t c5t] %all take into acc\nt   
indu/ry be/ practices & ! curr5t        
/ate-(-!-art 9 cyb]security evaluation &
 review4  7b7 ,plan  7#a7 ,9 g5]al ,n   
lat] ?an #abj days aft] ! date on :i* an
 indep5d5t assessm5t is provid$ to !    
,secret>y by a f$]ally fund$ rese>* &   
developm5t c5t] pursuant to an agreem5t 
ent]$ into "u subsection 7a71 !         
,secret>y %all submit to ! ,committees  
on ,vet]ans' ,affairs ( ! ,h\se (       
,repres5tatives & ! ,s5ate a plan to    
address ! f9d+s ( ! f$]ally fund$ rese>*
 & developm5t c5t] set =? 9 su*         
assessm5t4  7#b7 ,elem5ts ,! plan       
submitt$ "u p>agraph 7#a7 %all include !

 foll[+3  7,a7 ,improvem5ts to !        
security controls ( ! in=mation sy/ems (
 ! ,dep>tm5t assess$ "u subsection 7a7  
to-- 7i7 a*ieve ! goals specifi$ 9      
subp>agraph 7,a7 ( p>agraph 7#b7 ( su*  
subsection2 &  7ii7 protect aga9/ !     
?reats specifi$ 9 subp>agraph 7,b7 ( su*
 p>agraph4  7,b7 ,improvem5ts to !      
in=mation security program & in=mation  
security managem5t sy/em ( ! ,dep>tm5t  
to a*ieve su* goals & protect aga9/ su* 
?reats4  7,c7 ,a co/ e/imate = implem5t+
 ! plan4  7,d7 ,a timel9e = implem5t+ ! 
plan4  7,e7 ,su* o!r elem5ts z !        
,secret>y consid]s appropriate4  7c7    
,comptroll] ,g5]al ( ! ,unit$ ,/ates    
evaluation & review ,n lat] ?an #ahj    
days aft] ! date ( ! submission ( ! plan
 "u subsection 7b77#a71 ! ,comptroll]   
,g5]al ( ! ,unit$ ,/ates %all--  7#a7   
comm5ce an evaluation & review (-- 7,a7 
! indep5d5t cyb]security assessm5t      
provid$ "u subsection 7a72 &  7,b7 !    
response ( ! ,dep>tm5t to su* assessm5t2
 &  7#b7 provide to ! ,committees on    

,vet]ans' ,affairs ( ! ,h\se (          
,repres5tatives & ! ,s5ate a brief+ on !
 results ( ! evaluation & review1       
includ+ any recomm5dations made to !    
,secret>y reg>d+ ! matt]s cov]$ by !    
brief+4  ,pass$ ! ,h\se (               
,repres5tatives ,novemb] #ag1           
#bjbb4;,cl]k4