,i  #aah? ,,congress  #a/ ,session  ,h4 
,r4 #bhe  ,,9 ,,! ,,h\se ,,(            
,,repres5tatives  ,janu>y #aa1 #bjbc,ms4
 ,jackson ,lee introduc$ ! foll[+ bill2 
:i* 0 ref]r$ to ! ,committee on ,homel& 
,security  ,a ,,bill  ,to am5d ! ,homel&
 ,security ,act ( #bjjb to provide = !  
rem$iation ( cyb]security               
vuln]abilities1 & = o!r purposes4  #a4  
,%ort title ,?is ,act may be cit$ z !   
,cyb]security ,vuln]ability ,rem$iation 
,act4  #b4 ,cyb]security vuln]abilities 
,section #bbji ( ! ,homel& ,security    
,act ( #bjjb 7#f ,u4,s4,c4 #fei7 is     
am5d$-- 7#a7 9 subsection 7a7-- 7,a7 by 
r$esignat+ p>agraphs 7#f7 ?r\gh 7#i7 z  
p>agraphs 7#g7 ?r\gh 7#aj71             
respectively2 &  7,b7 by ins]t+ aft]    
p>agraph 7#e7 ! foll[+ new p>agraph3    
7#f7 ! t]m cyb]security vuln]ability has
 ! mean+ giv5 ! t]m security            
vuln]ability 9 section #ajb ( !         
,cyb]security ,in=mation ,%>+ ,act (    
#bjae 7#f ,u4,s4,c4 #aeja72 &  2  7#b7 9
 subsection 7c7-- 7,a7 9 p>agraph 7#e7--

 7i7 9 subp>agraph 7,a71 by /rik+ & aft]
 ! semicolon at ! end2  7ii7 by         
r$esignat+ subp>agraphs 7,b7 & 7,c7 z   
subp>agraphs 7,c7 & 7,d71 respectively2 
7iii7 by ins]t+ aft] subp>agraph 7,a7 ! 
foll[+ new subp>agraph3  7,b7 %>+       
mitigation protocols to c\nt]           
cyb]security vuln]abilities pursuant to 
subsection 7n72 &  2 &  7iv7 9          
subp>agraph 7,c71 z s r$esignat$1 by    
ins]t+ & mitigation protocols to c\nt]  
cyb]security vuln]abilities 9 accordance
 ) subp>agraph 7,b7 be=e ) ,f$]al2 &    
7,b7 9 p>agraph 7#i71 by ins]t+         
mitigation protocols to c\nt]           
cyb]security vuln]abilities1 aft]       
measures12  7#c7 by r$esignat+ ! second 
subsections 7p7 & 7q7 7relat+ to        
coord9ation on cyb]security = ,,slitt   
entities & a report1 respectively7 z    
subsections 7r7 & 7s71 respectively2 &  
7#d7 by add+ at ! end ! foll[+ new      
subsection3  7t7 ,protocols ,to c\nt]   
c]ta9 cyb]security vuln]abilities ,!    
,director may1 z appropriate1 id5tify1  

develop1 & dissem9ate actionable        
protocols to mitigate cyb]security      
vuln]abilities to in=mation sy/ems &    
indu/rial control sy/ems1 includ+ 9     
circum/ances 9 :i* su* vuln]abilities   
exi/ because s(tw>e or h>dw>e is no     
long] support$ by a v5dor4  4  #c4      
,report on cyb]security vuln]abilities  
7a7 ,report ,n lat] ?an "o ye> aft] !   
date ( ! enactm5t ( ?is ,act1 !         
,director ( ! ,cyb]security &           
,infra/ructure ,security ,ag5cy ( !     
,dep>tm5t ( ,homel& ,security %all      
submit to ! ,committee on ,homel&       
,security ( ! ,h\se ( ,repres5tatives & 
! ,committee on ,homel& ,security &     
,gov]nm5tal ,affairs ( ! ,s5ate a report
 on h[ ! ,ag5cy c>ries out subsection   
7n7 ( section #bbji ( ! ,homel&         
,security ,act ( #bjjb to coord9ate     
vuln]ability disclosures1 includ+       
disclosures ( cyb]security              
vuln]abilities 7z su* t]m is def9$ 9 su*
 section71 & subsection 7t7 ( su*       
section 7z add$ by section #b7 to       

dissem9ate actionable protocols to      
mitigate cyb]security vuln]abilities to 
in=mation sy/ems & indu/rial control    
sy/ems1 t includes ! foll[+3 7#a7 ,a    
description ( ! policies & proc$ures    
relat+ to ! coord9ation ( vuln]ability  
disclosures4  7#b7 ,a description ( !   
levels ( activity 9 fur!rance ( su*     
subsections 7n7 & 7t7 ( su* section     
#bbji4  7#c7 ,any plans to make fur!r   
improvem5ts to h[ in=mation provid$     
pursuant to su* subsections c be %>$ 7z 
su* t]m is def9$ 9 su* section #bbji7   
betwe5 ! ,dep>tm5t & indu/ry & o!r      
/akehold]s4  7#d7 ,any available        
in=mation on ! degree to :i* su*        
in=mation 0 act$ ^u by indu/ry & o!r    
/akehold]s4  7#e7 ,a description ( h[   
privacy & civil lib]ties are pres]v$ 9 !
 collection1 ret5tion1 use1 & %>+ (     
vuln]ability disclosures4  7b7 ,=m ,!   
report requir$ "u subsection 7b7 %all be
 submitt$ 9 unclassifi$ =m b may conta9 
a classifi$ annex4  #d4 ,competition    
relat+ to cyb]security vuln]abilities ,!

 ,"u ,secret>y = ,sci5ce & ,te*nology ( 
! ,dep>tm5t ( ,homel& ,security1 9      
consultation ) ! ,director ( !          
,cyb]security & ,infra/ructure ,security
 ,ag5cy ( ! ,dep>tm5t1 may e/abli% an   
inc5tive-bas$ program t all[s indu/ry1  
individuals1 academia1 & o!rs to compete
 9 id5tify+ rem$iation solutions =      
cyb]security vuln]abilities 7z su* t]m  
is def9$ 9 section #bbji ( ! ,homel&    
,security ,act ( #bjjb1 z am5d$ by      
section #b7 to in=mation sy/ems 7z su*  
t]m is def9$ 9 su* section #bbji7 &     
indu/rial control sy/ems1 includ+       
sup]visory control & data acquisition   
sy/ems4