,i  #aai? ,,congress  #a/ ,session  ,h4 
,r4 #hjg  ,,9 ,,! ,,h\se ,,(            
,,repres5tatives  ,janu>y #bh1 #bjbe,mr4
 ,nunn ( ,i[a 7= himself & ,mr4         
,got!im]7 introduc$ ! foll[+ bill2 :i* 0
 ref]r$ to ! ,committee on ,f9ancial    
,s]vices  ,a ,,bill  ,to direct !       
,secret>y ( ! ,treasury to submit a     
report on coord9ation 9 ! public &      
private sectors 9 respond+ to ransomw>e 
attacks on f9ancial in/itutions1 & = o!r
 purposes4  #a4 ,%ort title ,?is ,act   
may be cit$ z ! ,public & ,private      
,sector ,ransomw>e ,response            
,coord9ation ,act ( #bjbe4  #b4 ,report 
on coord9ation 9 ! public & private     
sectors 9 respond+ to ransomw>e attacks 
on f9ancial in/itutions  7a7 ,9 g5]al ,n
 lat] ?an "o ye> aft] ! date ( !        
enactm5t ( ?is section1 ! ,secret>y ( ! 
,treasury %all submit to ! appropriate  
congressional committees a report t     
describes ! foll[+3  7#a7 ,! curr5t     
level ( coord9ation & collaboration     
betwe5 ! public & private sectors1      

includ+ entities 9 ! public & private   
sectors t manage cyb]security1 9        
response to1 & = ! prev5tion (1 a       
ransomw>e attack on a f9ancial          
in/itution4  7#b7 ,! coord9ation among  
relevant gov]nm5tal ag5cies 9 response  
to1 & = ! prev5tion (1 a ransomw>e      
attack on a f9ancial in/itution4  7#c7  
,:e!r relevant gov]nm5tal ag5cies h     
timely access to relevant in=mation     
report$ by a f9ancial in/itution foll[+ 
a ransomw>e attack on ! f9ancial        
in/itution4  7#d7 ,! utility ( su*      
in=mation to any relevant gov]nm5tal    
ag5cy 9 ! prev5tion or inve/igation ( a 
ransomw>e attack on a f9ancial          
in/itution1 or ! prosecution ( a p]son  
responsible = su* attack4  7#e7 ,an     
analysis ( report+ requirem5ts          
applicable to a f9ancial in/itution )   
respect to a ransomw>e attack 9 relation
 to ! utility to any relevant gov]nm5tal
 ag5cy ( ! report$ in=mation 9 !        
prev5tion or inve/igation ( a ransomw>e 
attack on a f9ancial in/itution1 or !   

prosecution ( a p]son responsible = su* 
attack4  7#f7 ,:e!r fur!r legislation is
 requir$ to increase ! utility & timely 
access ( su* in=mation to any relevant  
gov]nm5tal ag5cy foll[+ a ransomw>e     
attack on a f9ancial in/itution4  7#g7  
,any recomm5d$ policy initiatives to    
bol/] public-private p>tn]%ips1 increase
 incid5t report %>+1 & decrease incid5t 
response "t4  7#h7 ,! ext5t to :i*1 &   
reasons t1 f9ancial in/itutions )hold or
 delay report+ to relevant gov]nm5tal   
ag5cies in=mation ab\t a ransomw>e      
attack4  7#i7 ,any fe$back on ! cont5ts 
( ! report receiv$ f cyb]security &     
ransomw>e response entities t provide   
s]vices to f9ancial in/itutions4  7b7   
,=m ( report ,! report describ$ 9       
subsection 7a7 %all be submitt$ 9       
unclassifi$ =m1 b may include a         
classifi$ annex4  7c7 ,brief+ ,n lat]   
?an #ae mon?s aft] ! date ( ! enactm5t (
 ?is section1 ! ,secret>y ( ! ,treasury 
%all brief ! appropriate congressional  
committees on ! f9d+s ( ! report        

describ$ 9 subsection 7a74  7d7         
,def9itions ,9 ?is section3  7#a7       
,appropriate congressional committees ,!
 t]m appropriate congressional          
committees means-- 7,a7 ! ,committee on 
,f9ancial ,s]vices ( ! ,h\se (          
,repres5tatives2  7,b7 ! ,p]man5t       
,select ,committee on ,intellig5ce ( !  
,h\se ( ,repres5tatives2  7,c7 !        
,committee on ,bank+1 ,h\s+1 & ,urban   
,affairs ( ! ,s5ate2 &  7,d7 ! ,select  
,committee on ,intellig5ce ( ! ,s5ate4  
7#b7 ,cyb]security & ransomw>e incid5t  
response entity ,! t]m cyb]security &   
ransomw>e incid5t response entity means 
an entity t provides incid5t responses1 
manag$ s]vices1 or advisory s]vices t-- 
7,a7 supports inve/igation & risk       
managem5t relat$ to ransomw>e attacks 9 
! public & private sectors2  7,b7       
/r5g!ns cyb]security te*nology 9 !      
f9ancial sector2 &  7,c7 r$uces ov]all  
cyb] risk 9 ! f9ancial sector by assess+
 ! security po/ure ( a f9ancial         
in/itution1 assi/+ a f9ancial in/itution

 ) regulatory compliance1 & provid+     
recomm5dations to a f9ancial in/itution 
= recov]y aft] a ransomw>e attack &     
prev5tion ( any future attacks4  7#c7   
,f9ancial in/itution ,! t]m f9ancial    
in/itution has ! mean+ giv5 t t]m "u    
section #ecab7;a7 ( title #ca1 ,unit$   
,/ates ,code4