,,ii  #aag? ,,congress  #b;d ,session   
,s4 #chfc  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,m>* #ag1 #bjbb,ms4    
,ros5 7= h]self & ,mrs4 ,blackburn7     
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,vet]ans' ,affairs  ,a ,,bill  ,to      
require ! ,secret>y ( ,vet]ans ,affairs 
to obta9 an indep5d5t cyb]security      
assessm5t ( in=mation sy/ems ( !        
,dep>tm5t ( ,vet]ans ,affairs1 & = o!r  
purposes4  #a4 ,%ort title ,?is ,act may
 be cit$ z ! ,/r5g!n+ ,,va ,cyb]security
 ,act ( #bjbb4  #b4 ,indep5d5t          
cyb]security assessm5t ( in=mation      
sy/ems ( ,dep>tm5t ( ,vet]ans ,affairs  
7a7 ,indep5d5t assessm5t requir$  7#a7  
,9 g5]al ,n lat] ?an #fj days aft] !    
date ( ! enactm5t ( ?is ,act1 !         
,secret>y ( ,vet]ans ,affairs %all ent] 
into an agreem5t ) a f$]ally fund$      
rese>* & developm5t c5t] to provide !   
,secret>y ) an indep5d5t cyb]security   
assessm5t (-- 7,a7 n m ?an #aj & n few] 
?an ?ree high-impact in=mation sy/ems ( 

! ,dep>tm5t ( ,vet]ans ,affairs2 &  7,b7
 ! effectiv5ess ( ! in=mation security  
program & in=mation security managem5t  
sy/em ( ! ,dep>tm5t4  7#b7 ,detail$     
analysis ,! indep5d5t cyb]security      
assessm5t provid$ "u p>agraph 7#a7 %all 
include a detail$ analysis ( ! ability (
 ! ,dep>tm5t-- 7,a7 to ensure !         
confid5tiality1 integrity1 &            
availability ( ! in=mation1 in=mation   
sy/ems1 & devices ( ! ,dep>tm5t2 &  7,b7
 to protect aga9/-- 7i7 advanc$ p]si/5t 
cyb]security ?reats2  7ii7 ransomw>e2   
7iii7 d5ial ( s]vice attacks2  7iv7     
insid] ?reats2  7v7 ?reats f =eign      
actors1 includ+ ,/ate sponsor$ crim9als 
& o!r =eign bas$ crim9als2  7vi7 phi%+2 
7vii7 cr$5tial !ft2  7viii7 cyb]security
 attacks t t>get ! supply *a9 ( !       
,dep>tm5t2  7ix7 ?reats due to remote   
access & telework activity2 &  7x7 o!r  
cyb] ?reats4  7#c7 ,types ( sy/ems ,!   
indep5d5t cyb]security assessm5t provid$
 "u p>agraph 7#a7 %all cov] on-premises1
 remote1 cl\d-bas$1 & mobile in=mation  

sy/ems & devices us$ by1 or 9 support (1
 ,dep>tm5t activities4  7#d7 ,%ad[      
in=mation te*nology ,! indep5d5t        
cyb]security assessm5t provid$ "u       
p>agraph 7#a7 %all include an evaluation
 ( ! use ( in=mation te*nology sy/ems1  
devices1 & s]vices by employees &       
contractors ( ! ,dep>tm5t :o d s )\t !  
elem5ts ( ! ,dep>tm5t t are responsible 
= in=mation te*nology at ! ,dep>tm5t    
kn[+ or approv+ ( su* use4  7#e7        
,me?odology ,9 conduct+ ! cyb]security  
assessm5t provid$ "u p>agraph 7#a71 !   
f$]ally fund$ rese>* & developm5t c5t]  
%all take into acc\nt indu/ry be/       
practices & ! curr5t /ate-(-!-art 9     
cyb]security evaluation & review4  7b7  
,plan  7#a7 ,9 g5]al ,n lat] ?an #abj   
days aft] ! date on :i* an indep5d5t    
assessm5t is provid$ to ! ,secret>y     
pursuant to an agreem5t ent]$ into "u   
subsection 7a7 ) a f$]ally fund$ rese>* 
& developm5t c5t]1 ! ,secret>y %all     
submit to ,congress a plan to address ! 
f9d+s ( ! f$]ally fund$ rese>* &        

developm5t c5t] set =? 9 su* assessm5t4 
7#b7 ,elem5ts ,! plan submitt$ "u       
p>agraph 7#a7 %all include ! foll[+3    
7,a7 ,a co/ e/imate = implem5t+ ! plan4 
7,b7 ,a timel9e = implem5t+ ! plan4     
7,c7 ,su* o!r elem5ts z ! ,secret>y     
consid]s appropriate4  7c7 ,comptroll]  
,g5]al ( ! ,unit$ ,/ates review ,n lat] 
?an #ahj days aft] ! date ( ! submission
 ( ! plan "u 7b77#a71 ! ,comptroll]     
,g5]al ( ! ,unit$ ,/ates %all-- 7#a7    
comm5ce a review (-- 7,a7 ! indep5d5t   
cyb]security assessm5t provid$ "u       
subsection 7a72 &  7,b7 ! response ( !  
,dep>tm5t to su* assessm5t2 &  7#b7     
submit to ,congress a report ( ! results
 ( t review comm5c$ "u p>agraph 7#a71   
includ+ any recomm5dations made to !    
,secret>y reg>d+ ! matt]s cov]$ by !    
report4