,i  #aaith ,,congress  #ast ,session    
,h4 ,r4 #hjg  ,,in ,,the ,,house ,,of   
,,representatives  ,january #bh1        
#bjbe,mr4 ,nunn of ,iowa 7for himself   
and ,mr4 ,gottheimer7 introduced the    
following bill2 which was referred to   
the ,committee on ,financial ,services  
,a ,,bill  ,to direct the ,secretary of 
the ,treasury to submit a report on     
coordination in the public and private  
sectors in responding to ransomware     
attacks on financial institutions1 and  
for other purposes4  #a4 ,short title   
,this ,act may be cited as the ,public  
and ,private ,sector ,ransomware        
,response ,coordination ,act of #bjbe4  
#b4 ,report on coordination in the      
public and private sectors in responding
 to ransomware attacks on financial     
institutions  7a7 ,in general ,not later
 than one year after the date of the    
enactment of this section1 the          
,secretary of the ,treasury shall submit
 to the appropriate congressional       
committees a report that describes the  

following3  7#a7 ,the current level of  
coordination and collaboration between  
the public and private sectors1         
including entities in the public and    
private sectors that manage             
cybersecurity1 in response to1 and for  
the prevention of1 a ransomware attack  
on a financial institution4  7#b7 ,the  
coordination among relevant governmental
 agencies in response to1 and for the   
prevention of1 a ransomware attack on a 
financial institution4  7#c7 ,whether   
relevant governmental agencies have     
timely access to relevant information   
reported by a financial institution     
following a ransomware attack on the    
financial institution4  7#d7 ,the       
utility of such information to any      
relevant governmental agency in the     
prevention or investigation of a        
ransomware attack on a financial        
institution1 or the prosecution of a    
person responsible for such attack4     
7#e7 ,an analysis of reporting          
requirements applicable to a financial  

institution with respect to a ransomware
 attack in relation to the utility to   
any relevant governmental agency of the 
reported information in the prevention  
or investigation of a ransomware attack 
on a financial institution1 or the      
prosecution of a person responsible for 
such attack4  7#f7 ,whether further     
legislation is required to increase the 
utility and timely access of such       
information to any relevant governmental
 agency following a ransomware attack on
 a financial institution4  7#g7 ,any    
recommended policy initiatives to       
bolster public-private partnerships1    
increase incident report sharing1 and   
decrease incident response time4  7#h7  
,the extent to which1 and reasons that1 
financial institutions withhold or delay
 reporting to relevant governmental     
agencies information about a ransomware 
attack4  7#i7 ,any feedback on the      
contents of the report received from    
cybersecurity and ransomware response   
entities that provide services to       

financial institutions4  7b7 ,form of   
report ,the report described in         
subsection 7a7 shall be submitted in    
unclassified form1 but may include a    
classified annex4  7c7 ,briefing ,not   
later than #ae months after the date of 
the enactment of this section1 the      
,secretary of the ,treasury shall brief 
the appropriate congressional committees
 on the findings of the report described
 in subsection 7a74  7d7 ,definitions   
,in this section3  7#a7 ,appropriate    
congressional committees ,the term      
appropriate congressional committees    
means-- 7,a7 the ,committee on          
,financial ,services of the ,house of   
,representatives2  7,b7 the ,permanent  
,select ,committee on ,intelligence of  
the ,house of ,representatives2  7,c7   
the ,committee on ,banking1 ,housing1   
and ,urban ,affairs of the ,senate2 and 
7,d7 the ,select ,committee on          
,intelligence of the ,senate4  7#b7     
,cybersecurity and ransomware incident  
response entity ,the term cybersecurity 

and ransomware incident response entity 
means an entity that provides incident  
responses1 managed services1 or advisory
 services that--  7,a7 supports         
investigation and risk management       
related to ransomware attacks in the    
public and private sectors2  7,b7       
strengthens cybersecurity technology in 
the financial sector2 and  7,c7 reduces 
overall cyber risk in the financial     
sector by assessing the security posture
 of a financial institution1 assisting a
 financial institution with regulatory  
compliance1 and providing               
recommendations to a financial          
institution for recovery after a        
ransomware attack and prevention of any 
future attacks4  7#c7 ,financial        
institution ,the term financial         
institution has the meaning given that  
term under section #ecab7;a7 of title   
#ca1 ,united ,states ,code4