,i #aai? ,,congress #b;d ,session ,h4 ,r4 #hgaj ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,may #g1 #bjbf,mr4 ,subramanyam 7= himself & ,mr4 ,mc,cormick7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,arm$ ,s]vices ,a ,,bill ,to am5d title #aj1 ,unit$ ,/ates ,code1 to require ! ,secret>y ( ,def5se to implem5t resili5t capabilities to recov] critical ,dep>tm5t ( ,def5se data 9 ! ev5t su* data is lo/1 degrad$1 or de/roy$1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,national ,def5se ,data ,resili5ce ,act4 #b4 ,data recov]y requirem5ts & /rategy 7a7 ,data recov]y requirem5ts ,*apt] #ai ( title #aj1 ,unit$ ,/ates ,code1 is am5d$ by ins]t+ aft] section #cia;b ! foll[+ new section3 #cia;c4 ,data recov]y requirem5ts 7a7 ,m&atory recov]y "t objectives 7#a7 ,! ,secret>y ( ,def5se %all1 ) respect to ea* elem5t ( ! ,dep>tm5t ( ,def5se1 c>ry out ! foll[+3 7,a7 ,designate data z "o ( ! foll[+ types1 z applicable3 7i7 ,critical data4 7ii7 ,important data4 7iii7 ,necess>y data4 7,b7 ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is section1 e/abli% m&atory recov]y "t objectives = data s designat$ z critical data4 7,c7 ,n lat] ?an #bgj days aft] ! date ( ! enactm5t ( ?is section1 e/abli% m&atory recov]y "t objectives = data s designat$ z important data or necess>y data4 7#b7 ,ea* recov]y "t objective e/abli%$ "u p>agraph 7#a7 %all satisfy ! foll[+ requirem5ts3 7,a7 ,be bas$ ^u ! type ( data to :i* su* objective applies1 includ+ ) respect to ?reat exposure4 7,b7 ,be updat$ 9 response to intellig5ce on evolv+ ?reats f /ate & non-/ate actors1 includ+ ! ,p's ,republic ( ,*9a4 7#c7 ,n lat] ?an "o ye> aft] ! date ( ! enactm5t ( ?is section & annually !reaft]1 ! ,secret>y ( ,def5se %all1 = ea* elem5t ( ! ,dep>tm5t ( ,def5se1 submit to ! congressional def5se committees an auditable recov]y c]tification report t includes in=mation relat+ to ! foll[+3 7,a7 ,ea* recov]y "t objective t is e/abli%$ "u p>agraph 7#a7 & applies to su* elem5t4 7,b7 ,:e!r su* objective satisfies ! requirem5ts li/$ 9 p>agraph 7#b74 7b7 ,data recov]y capability requirem5ts 7#a7 ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is section1 ! ,secret>y ( ,def5se %all1 = data designat$ z critical data pursuant to subp>agraph 7,a7 ( subsection 7a77#a71 field data recov]y capabilities t satisfy ! foll[+ requirem5ts3 7,a7 ,prioritize provid+ critical s]vices 9 support ( national def5se4 7,b7 ,include ! foll[+3 7i7 ,immutable backups t satisfy ! foll[+ requirem5ts3 7,i7 ,pres]ve logically sep>at$ copies ( data4 7,,ii7 ,are selectively segm5t$ or isolat$ f ext]nal networks by means ( s(tw>e1 firewalls1 or o!r controls4 7ii7 ,cont9u\s monitor+ ( backup environm5ts to detect tamp]+1 insid] ?reats1 & malici\s corruption4 7iii7 ,annual recov]y ex]cises t simulate sophi/icat$ nation-/ate cyb]attacks design$ to cripple data sy/ems4 7iv7 ,audits 9 :i* ext]nal or int]nal indep5d5t gr\ps mimic tactics1 te*niques1 & proc$ures ( cyb]attacks to assess & validate ! ability ( ea* elem5t ( ! ,dep>tm5t ( ,def5se to c>ry out ! objectives e/abli%$ "u su* subsection ) respect to reali/ic ?reat conditions4 7#b7 ,n lat] ?an #bgj days aft] ! date ( ! enactm5t ( ?is section1 ! ,secret>y ( ,def5se %all1 = data designat$ z important data or necess>y data pursuant to subsection 7a77#a77;,a71 field data recov]y capabilities describ$ 9 p>agraph 7#a74 7c7 ,approv$ te*nology /&>ds ,9 field+ a data recov]y capability "u subsection 7b71 ! ,secret>y ( ,def5se may n adopt te*nology unless ! foll[+ requirem5ts are satisfi$3 7#a7 ,su* te*nology is li/$ 9 an inv5tory ( ! ,dep>tm5t ( ,def5se = c]tifi$ cyb]security & data protection te*nology4 7#b7 ,if su* te*nology is te*nology = recov]+ or repair+ damag$ or lo/ data1 su* te*nology provides = ! foll[+3 7,a7 ,immutable /orage4 7,b7 ,robu/ recov]y capabilities4 7,c7 ,full audit trails4 7,d7 ,cont9u\s monitor+ = data integrity & anomal\s activity4 7d7 ,def9itions ,9 ?is section3 7#a7 ,! t]m critical data means data1 s vital to ! ,unit$ ,/ates1 t ! incapacity or de/ruction ( su* data w\ld h a debilitat+ impact on security1 national economic security1 national public heal? or safety1 or any comb9ation !re(4 7#b7 ,! t]m data recov]y capability means a te*nology1 process1 or gov]nance framework to ensure rapid1 secure1 & v]ifiable recov]y aft] a de/ructive cyb]attack4 7#c7 ,! t]m important data means data t is important to ! ,unit$ ,/ates & ! incapacity or de/ruction ( su* data w\ld h a significant impact on security1 national economic security1 national public heal? or safety1 or any comb9ation !re(4 7#d7 ,! t]m necess>y data means data1 ! incapacity or de/ruction ( :i* w\ld h a measurable impact on security1 national economic security1 national public heal? or safety1 or any comb9ation !re(4 7#e7 ,! t]m recov]y "t objective means ! maximum all[able "t ! ,secret>y ( ,def5se det]m9es necess>y to re/ore critical functions & data foll[+ a cyb]attack4 4 7b7 ,cl]ical am5dm5t ,! table ( sections = *apt] #ai ( title #aj1 ,unit$ ,/ates ,code1 is am5d$ by ins]t+ aft] ! item relat+ to section #cia;b ! foll[+ new item3 #cia;c4 ,data recov]y requirem5ts4 4 7c7 ,data recov]y /rategy 7#a7 ,n lat] ?an #ij days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,def5se %all submit to ! congressional def5se committees a data recov]y /rategy = ! ,dep>tm5t ( ,def5se t includes in=mation relat+ to ! foll[+3 7,a7 ,recov]y "t objectives = su* /rategy4 7,b7 ,! te*nology necess>y = su* objectives4 7,c7 ,ov]sight processes ) respect to su* /rategy4 7,d7 ,! funds necess>y to c>ry out su* /rategy4 7#b7 ,! /rategy "u p>agraph 7#a7 %all be submitt$ 9 unclassifi$ =m1 b may conta9 a classifi$ annex4 7#c7 ,9 ?is subsection1 ! t]m recov]y "t objective means ! maximum all[able "t ! ,secret>y ( ,def5se det]m9es necess>y to re/ore critical functions & data foll[+ a cyb]attack4