,i #aai? ,,congress #a/ ,session ,h4 ,r4 #fcae ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,novemb] #be1 #bjbe,mr4 ,valadao 7= himself & ,mr4 ,deluzio7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,h\se ,adm9i/ration1 & 9 addition to ! ,committee on ,sci5ce1 ,space1 & ,te*nology1 = a p]iod to be subsequ5tly det]m9$ by ! ,speak]1 9 ea* case = consid]ation ( su* provisions z fall )9 ! jurisdiction ( ! committee conc]n$ ,a ,,bill ,to am5d ! ,help ,am]ica ,vote ,act ( #bjjb to require ! ,election ,assi/ance ,commission to provide = ! conduct ( p5etration te/+ z "p ( ! te/+ & c]tification ( vot+ sy/ems & to provide = ! e/abli%m5t ( an ,indep5d5t ,security ,te/+ & ,coord9at$ ,vuln]ability ,disclosure ,pilot ,program = ,election ,sy/ems4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,/r5g!n+ ,election ,cyb]security to ,uphold ,respect = ,elections ?r\gh ,indep5d5t ,te/+ ,act or ! ,,secure ,,x ,act4 #b4 ,requir+ p5etration te/+ z "p ( ! te/+ & c]tification ( vot+ sy/ems ,section #bca ( ! ,help ,am]ica ,vote ,act ( #bjjb 7#eb ,u4,s4,c4 #bjiga7 is am5d$ by add+ at ! end ! foll[+ new subsection3 7e7 ,requir$ p5etration te/+ 7#a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is subsection1 ! ,commission %all provide = ! conduct ( p5etration te/+ z "p ( ! te/+1 c]tification1 dec]tification1 & rec]tification ( vot+ sy/em h>dw>e & s(tw>e by accr$it$ laboratories "u ?is section4 7#b7 ,accr$itation ,! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology %all recomm5d to ! ,commission entities ! ,director proposes be accr$it$ to c>ry out p5etration te/+ "u ?is subsection & c]tify compliance ) ! p5etration te/+-relat$ guidel9es requir$ by ?is subsection4 ,! ,commission %all vote on ! accr$itation ( any entity recomm5d$4 ,! requirem5ts = su* accr$itation %all be a subset ( ! requirem5ts = accr$itation ( laboratories "u subsection 7b7 & %all only be bas$ on consid]ation ( an entity's compet5ce to conduct p5etration te/+ "u ?is subsection4 4 #c4 ,indep5d5t security te/+ & coord9at$ cyb]security vuln]ability disclosure program = election sy/ems 7a7 ,9 g5]al ,subtitle ,d ( title ,,ii ( ! ,help ,am]ica ,vote ,act ( #bjjb 7#db ,u4,s4,c4 #aedja et seq47 is am5d$ by add+ at ! end ! foll[+ new "p3 #g ,indep5d5t security te/+ & coord9at$ cyb]security vuln]ability disclosure pilot program = election sy/ems #big4 ,indep5d5t security te/+ & coord9at$ cyb]security vuln]ability disclosure pilot program = election sy/ems 7a7 ,e/abli%m5t ,! ,commission1 9 consultation ) ! ,secret>y1 %all e/abli% an ,indep5d5t ,security ,te/+ & ,coord9at$ ,vuln]ability ,disclosure ,pilot ,program = ,election ,sy/ems 7,,vdp-,e7 79 ?is section ref]r$ to z ! program7 9 ord] to te/ = & disclose cyb]security vuln]abilities 9 election sy/ems4 7b7 ,duration ,! program %all be conduct$ = a p]iod ( #e ye>s4 7c7 ,requirem5ts ,9 c>ry+ out ! program1 ! ,commission1 9 consultation ) ! ,secret>y1 %all-- 7#a7 e/abli% a me*anism by :i* an election sy/ems v5dor may make _! election sy/em 7includ+ vot+ ma*9es & s\rce code7 available to cyb]security rese>*]s p>ticipat+ 9 ! program2 7#b7 provide = ! vett+ ( cyb]security rese>*]s prior to _! p>ticipation 9 ! program1 includ+ ! conduct ( backgr\nd *ecks2 7#c7 e/abli% t]ms ( p>ticipation t-- 7,a7 describe ! scope ( te/+ p]mitt$ "u ! program2 7,b7 require rese>*]s to-- 7i7 notify ! v5dor1 ! ,commission1 & ! ,secret>y ( any cyb]security vuln]ability !y id5tify ) respect to an election sy/em2 & 7ii7 o!rwise keep su* vuln]ability confid5tial = #ahj days aft] su* notification2 7,c7 require ! good fai? p>ticipation ( all p>ticipants 9 ! program2 & 7,d7 require an election sy/em v5dor1 aft] receiv+ notification ( a critical or high vuln]ability 7z def9$ by ! ,national ,in/itute ( ,/&>ds & ,te*nology7 9 an election sy/em ( ! v5dor1 to-- 7i7 s5d a pat* or prop\nd "s o!r fix or mitigation = su* vuln]ability to ! appropriate ,/ate & local election (ficials1 9 consultation ) ! rese>*] :o discov]$ x2 & 7ii7 notify ! ,commission & ! ,secret>y t su* pat* has be5 s5t to su* (ficials2 7#d7 9 ! case :]e a pat* or fix to address a vuln]ability disclos$ "u p>agraph 7#c77;,b77i7 is int5d$ to be appli$ to a sy/em c]tifi$ by ! ,commission1 provide-- 7,a7 = ! exp$it$ review ( su* pat* or fix )9 #ij days aft] receipt by ! ,commission2 & 7,b7 if su* review is n complet$ by ! la/ day ( su* #ij-;day p]iod1 t su* pat* or fix %all be deem$ to be c]tifi$ by ! ,commission2 & 7#e7 #ahj days aft] ! disclosure ( a vuln]ability "u p>agraph 7#c77;,b77i71 notify ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy ( ! vuln]ability = inclusion 9 ! database ( ,common ,vuln]abilities & ,exposures4 7d7 ,volunt>y p>ticipation2 safe h>bor 7#a7 ,volunt>y p>ticipation ,p>ticipation 9 ! program %all be volunt>y = election sy/ems v5dors & rese>*]s4 7#b7 ,safe h>bor ,rese>* conduct$ "u ! program1 & any subsequ5t publication ( su* rese>*1 %all be treat$ z foll[s3 7,a7 ,! rese>* & publication %all be treat$ z au?oriz$ 9 accordance ) section #ajcj ( title #ah1 ,unit$ ,/ates ,code 7commonly kn[n z ! ,comput] ,fraud & ,abuse ,act71 7& simil> ,/ate laws71 & ! election sy/em v5dor w n initiate or support legal action aga9/ ! rese>*] = accid5tal1 good fai? violations ( ! program4 7,b7 ,! rese>* & publication %all be exempt f ! anti-circumv5tion rule ( section #abja ( title #ag1 ,unit$ ,/ates ,code 7commonly kn[n z ! ,digital ,mill5nium ,copyright ,act71 & ! election sy/em v5dor w n br+ a claim aga9/ a rese>*] = circumv5tion ( te*nology controls4 7#c7 ,rule ( con/ruction ,no?+ 9 ?is subsection may be con/ru$ to limit or o!rwise affect any exception to ! g5]al prohibition aga9/ ! circumv5tion ( te*nological measures "u subp>agraph 7,a7 ( section #abja7;a77#a7 ( title #ag1 ,unit$ ,/ates ,code1 includ+ ) respect to any use t is except$ f t g5]al prohibition by ! ,libr>ian ( ,congress "u subp>agraphs 7,b7 ?r\gh 7,d7 ( su* section #abja7;a77#a74 7#d7 ,exempt f disclosure ,cyb]security vuln]abilities discov]$ "u ! program %all be exempt f section #eeb ( title #e1 ,unit$ ,/ates ,code 7commonly ref]r$ to z ! ,fre$om ( ,in=mation ,act74 7e7 ,def9itions ,9 ?is section3 7#a7 ,cyb]security vuln]ability ,! t]m cyb]security vuln]ability means1 ) respect to an election sy/em1 any security vuln]ability t affects ! election sy/em4 7#b7 ,election infra/ructure ,! t]m election infra/ructure means-- 7,a7 /orage facilities1 poll+ places1 & c5traliz$ vote tabulation locations us$ to support ! adm9i/ration ( elections = public (fice2 & 7,b7 relat$ in=mation & communications te*nology1 includ+-- 7i7 vot] regi/ration databases2 7ii7 election managem5t sy/ems2 7iii7 vot+ ma*9es2 7iv7 electronic mail & o!r communications sy/ems 7includ+ electronic mail & o!r sy/ems ( v5dors :o h ent]$ into contracts ) election ag5cies to support ! adm9i/ration ( elections1 manage ! election process1 & report & display election results72 & 7v7 o!r sy/ems us$ to manage ! election process & to report & display election results on behalf ( an election ag5cy4 7#c7 ,election sy/em ,! t]m election sy/em means any in=mation sy/em t is "p ( an election infra/ructure1 includ+ any relat$ in=mation & communications te*nology describ$ 9 p>agraph 7#b77;,b74 7#d7 ,election sy/em v5dor ,! t]m election sy/em v5dor means any p]son provid+1 support+1 or ma9ta9+ an election sy/em on behalf ( a ,/ate or local election (ficial4 7#e7 ,in=mation sy/em ,! t]m in=mation sy/em has ! mean+ giv5 ! t]m 9 section #cejb ( title #dd1 ,unit$ ,/ates ,code4 7#f7 ,secret>y ,! t]m ,secret>y means ! ,secret>y ( ,homel& ,security4 7#g7 ,security vuln]ability ,! t]m security vuln]ability has ! mean+ giv5 ! t]m 9 section #ajb ( ! ,cyb]security ,in=mation ,%>+ ,act ( #bjae 7#f ,u4,s4,c4 #aeja74 4 7b7 ,cl]ical am5dm5t ,! table ( cont5ts ( su* ,act is am5d$ by add+ at ! end ( ! items relat+ to subtitle ,d ( title ,,ii ! foll[+3 ,,"p #g--;,indep5d5t security te/+ & coord9at$ cyb]security vuln]ability disclosure program = election systems,sec4 #big4 ,indep5d5t security te/+ & coord9at$ cyb]security vuln]ability disclosure program = election sy/ems4 4