,i  #aah? ,,congress  #a/ ,session  ,h4 
,r4 #dbfe  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,june #ba1 #bjbc,mr4  
,ryan introduc$ ! foll[+ bill2 :i* 0    
ref]r$ to ! ,committee on ,arm$ ,s]vices
  ,a ,,bill  ,to direct ! ,comptroll]   
,g5]al ( ! ,unit$ ,/ates to conduct a   
/udy & submit a report ab\t !           
effectiv5ess ( ! proc$ural safegu>ds us$
 by ! ,secret>y ( ,def5se to protect    
classifi$ in=mation f insid] ?reats1 & =
 o!r purposes4  #a4 ,%ort title ,?is    
,act may be cit$ z ! ,insid] ,?reat     
,assessm5t ,act or ,,itaa4  #b4 ,,gao   
/udy on protect+ classifi$ in=mation f  
insid] ?reats )9 ! ,dep>tm5t ( ,def5se  
7a7 ,/udy ,! ,comptroll] ,g5]al ( !     
,unit$ ,/ates %all conduct a /udy to    
assess ! ability ( ! ,secret>y ( ,def5se
 to mitigate insid] ?reats to classifi$ 
in=mation & sy/ems 9 :i* classifi$      
in=mation is /or$ )9 ! ,dep>tm5t (      
,def5se1 includ+--  7#a7 ! ext5t to :i* 
! ,secret>y takes timely action to      
address ea* security defici5cy id5tifi$ 

9 ea* annual report submitt$ pursuant to
 ! policy ( ! ,director ( ,national     
,intellig5ce titl$ ! ,national ,insid]  
,?reat ,policy & ,m9imum ,/&>ds =       
,executive ,bran* ,insid] ,?reat        
,programs to ! head ( an executive ag5cy
 by a designat$ s5ior (ficial reg>d+ !  
process or /atus ( an insid] ?reat      
program2  7#b7 ! ext5t to :i* !         
,secret>y uses in=mation sy/em security 
controls 7includ+ audits1 limit$ access 
controls1 & configuration managem5t7 =  
sy/ems 9 :i* classifi$ in=mation is     
/or$2  7#c7 ! ext5t to :i* ! ,secret>y  
uses controls to limit ! ability (      
individuals :o are eligible = access to 
classifi$ in=mation 9 accordance )      
,executive ,ord] #abifh 7#fj ,f$4 ,reg4 
#djbde2 relat+ to access to classifi$   
in=mation71 or any successor !reto1 &   
,executive ,ord] #ajhfe 7#be ,f$4 ,reg4 
#aehc2 relat+ to safegu>d+ classifi$    
in=mation )9 indu/ry71 or any successor 
!reto1 f remov+ su* classifi$ in=mation 
f a sy/em or facility 9 :i* su*         

classifi$ in=mation is /or$2 &  7#d7 any
 o!r relat$ matt]s t ! ,comptroll]      
,g5]al deems appropriate4  7b7          
,prelim9>y brief+2 f9al report ,n lat]  
?an #ahj days aft] ! date ( ! enactm5t (
 ?is ,act1 ! ,comptroll] ,g5]al %all--  
7#a7 provide to ! ,committee on ,arm$   
,s]vices ( ! ,h\se ( ,repres5tatives a  
brief+ reg>d+ ! prelim9>y f9d+s ( ! /udy
 conduct$ "u subsection 7a72 &  7#b7    
submit to su* ,committee a f9al report  
reg>d+ ! f9d+s ( ! /udy conduct$ "u     
subsection 7a7 at su* "t & 9 su* =mat z 
is mutually agre$ ^u by su* ,committee &
 ! ,comptroll] ,g5]al at ! "t ( ! brief+
 describ$ 9 p>agraph 7#a74  7c7         
,def9itions ,9 ?is section3  7#a7 ,! t]m
 designat$ s5ior (ficial means1 )       
respect to an insid] ?reat program1 an  
individual designat$ by ! head ( an     
executive ag5cy to be pr9cipally        
responsible )9 su* ag5cy = e/abli%+ a   
process to ga!r1 integrate1 c5trally    
analyze1 & respond to in=mation f       
c\nt]9tellig5ce1 security1 in=mation    

assurance1 human res\rces1 law en=cem5t1
 & o!r relevant s\rces ) in=mation      
indicative ( a pot5tial insid] ?reat4   
7#b7 ,! t]m executive ag5cy has ! mean+ 
giv5 to su* t]m 9 section #aje ( title  
#e1 ,unit$ ,/ates ,code4  7#c7 ,! t]m   
insid] ?reat means1 ) respect to !      
,dep>tm5t ( ,def5se1 a ?reat pres5t$ by 
a p]son :o-- 7,a7 has1 or once _h1      
au?oriz$ access to in=mation1 a         
facility1 a network1 a p]son1 or a      
res\rce ( ! ,dep>tm5t2 &  7,b7 witt+ly1 
or unwitt+ly1 commits-- 7i7 an act 9    
contrav5tion ( law or policy t result$  
91 or might result 91 h>m ?r\gh ! loss  
or degradation ( gov]nm5t or company    
in=mation1 res\rces1 or capabilities2 or
  7ii7 a de/ructive act1 :i* may include
 physical h>m to ano!r 9 ! workplace4   
7#d7 ,! t]m insid] ?reat program means a
 program ( an executive ag5cy e/abli%$  
to det]1 detect1 & mitigate insid]      
?reats )9 ! ag5cy 9 accordance ) !      
policy set out by ! ,insid] ,?reat ,task
 ,=ce e/abli%$ "u ,executive ,ord]      

#acehg 7#ej ,u4,s4,c4 #cafa note2 relat+
 to proc$ures to access classifi$       
in=mation74