,i  #aag? ,,congress  #b;d ,session  ,h4
 ,r4 #ibbh  ,,9 ,,! ,,h\se ,,(          
,,repres5tatives  ,octob] #be1 #bjbb,mr4
 ,griffi? introduc$ ! foll[+ bill2 :i* 0
 ref]r$ to ! ,committee on ,en]gy &     
,comm]ce  ,a ,,bill  ,to am5d ! ,public 
,heal? ,s]vice ,act ) respect to !      
in=mation security policies & practices 
( ! ,national ,in/itutes ( ,heal?1 & =  
o!r purposes4  #a4 ,%ort title ,?is ,act
 may be cit$ z ! ,ensur+ ,cyb]security  
at ! ,,nih ,act ( #bjbb4  #b4 ,,nih     
in=mation security policies & practices 
,section #djb7;b7 ( ! ,public ,heal?    
,s]vice ,act 7#db ,u4,s4,c4 #bhb7;b77 is
 am5d$-- 7#a7 9 p>agraph 7#bd71 by /rik+
 & at ! end2  7#b7 9 p>agraph 7#be71 by 
/rik+ ! p]iod at ! end & ins]t+ 2 &2 &  
7#c7 by add+ at ! end ! foll[+3  7#bf7  
%all1 9 consultation ) ! ,(fice ( !     
,*ief ,in=mation ,(fic]1 ov]see         
in=mation security policies & practices 
( ! ,national ,in/itutes ( ,heal?1      
includ+-- 7,a7 develop+ & ov]see+ !     
implem5tation ( policies1 pr9ciples1    

/&>ds1 & guidel9es on in=mation         
security1 includ+ ?r\gh ensur+ timely   
adoption ( & compliance ) /&>ds         
promulgat$ "u section #aacca ( title    
#dj1 ,unit$ ,/ates ,code1 includ+-- 7i7 
develop+ & report+ a complete inv5tory (
 all major in=mation sy/ems2  7ii7 fully
 develop+ a risk managem5t /rategy &    
assess+ risks = review$ sy/ems2  7iii7  
fully develop+ & docum5t+ sy/em security
 plans2 &  7iv7 consi/5tly au?oriz+     
sy/ems bas$ on def9$ sy/em b\nd>ies2 &  
7,b7 id5tify+ & provid+ in=mation       
security protections comm5surate ) !    
risk & magnitude ( ! h>m t c\ld result f
 ! unau?oriz$ access1 use1 disclosure1  
disruptions1 modification1 or de/ruction
 (-- 7i7 in=mation collect$ or ma9ta9$  
by or on behalf ( ! ,national ,in/itutes
 ( ,heal?2  7ii7 in=mation sy/ems us$ or
 op]at$ by ! ,national ,in/itutes (     
,heal? or by a contractor ( ! ag5cy or  
o!r organization on behalf ( ! ag5cy2 & 
7iii7 coord9at+ in=mation security      
policies & proc$ures ) relat$ in=mation 

res\rces managem5t policies & proc$ures4
  4