H.R. 1259, Computer Security Enhancement Act Sponsor: Rep. Constance Morella, R-Md. Introduced: March 28, 2001 Committee: House Science Description: H.R. 1259 seeks to enhance the ability of the National Institute of Standards and Technology (NIST) to improve computer security. The bill would require NIST to help federal agencies protect computer networks, to promote federal compliance with existing computer information security and privacy guidelines, and to help the government respond to unauthorized access to computer systems. NIST also would have to develop uniform standards and guidelines for federal security and privacy. The bill identifies the National Security Agency's security guidelines as a benchmark for NIST.
H.R. 2435, Cyber Security Information Act Sponsor: Tom Davis, R-Va. Introduced: July 10, 2001 Committee: Committees: House Government Reform, Judiciary Description: H.R. 2435 would exempt businesses from added liability when they share information about their cyber-security efforts. Bill sponsor Tom Davis, R-Va., said companies have been unwilling to share information about computer viruses and other network vulnerabilities with each other and with the government because of three concerns: antitrust prosecution; new lawsuits; and potential disclosure, via the Freedom of Information Act, of confidential information shared with the government. The legislation is designed to address those concerns.
H.R. 3316, Computer Security Enhancement and Research Act Sponsor: Rep. Brian Baird, D-Wash. Introduced: Nov. 16, 2001 Committee: House Science Description: H.R. 3316 seeks to promote research on computer security. The bill would require the National Institute of Standards and Technology to create a program to support computer-security research at colleges and for-profit research institutions, and joint projects among such institutions. The measure would authorize $275 million toward that end from fiscal 2003 through fiscal 2007, and the money would go toward post-doctoral research fellowships, among other things.
H.R. 3382, Nuclear Security Act Sponsor: Rep. Edward Markey, D-Mass. Introduced: Nov. 29, 2001 Committee: House Energy and Commerce Description: H.R. 3382 seeks to strengthen security at sensitive nuclear facilities. Among other things, the bill would require the government to assess the potential of cyber terrorism at such facilities. A Senate companion measure, S. 1746, was introduced.
H.R. 3394, Cyber Security Research and Development Act Sponsor: Rep. Sherwood Boehlert, R-N.Y. Introduced: Dec. 4, 2001 Committees: House Science, Education and the Workforce Description: H.R. 3394 aims to better protect the nation's critical information infrastructures in the wake of the Sept. 11 terrorist attacks. The bill would authorize nearly $880 million over five years to create new cyber-security programs within the National Science Foundation (NSF) and the National Institute of Standards and Technology (NIST). New NSF programs would include cyber-security research centers, undergraduate program grants and competitive fellowship grants. The bill also would create new NIST fellowships to attract more researchers to the field of computer and network security. Other new NIST programs would include an in-house research program and a grant program to support joint studies by academic and industry researchers. The House Science Committee approved the measure by voice vote two days after it was introduced.
H.R. 3426, Federal Emergency Procurement Flexibility Act Sponsor: Rep. Tom Davis, R-Va. Introduced: Dec. 6, 2001 Committee: House Government Reform Description: H.R. 3426 would give federal agencies purchasing flexibility when they are procuring property and services designed to defend against terrorism. The bill would streamline the procurement process when it involves buying technology or other goods for use in humanitarian or peacekeeping operations, or for preventing cyber attacks or other types of terrorism. The measure also would expand to all agencies the authority that allows the Defense Department to use approaches other than contracts to buy research and development for new technologies to fight terrorism. A Senate companion bill, S. 1780, was introduced the same day.
H.R. 3844, Federal Information Security Management Act Sponsor: Rep. Tom Davis, R-Va. Introduced: March 5, 2002 Committee: House Government Reform, Science Description: H.R. 3844 aims to strengthen the federal government's information security by developing management standards for security risks. Under the measure, the White House Office of Management and Budget would oversee federal agencies' information-security policies and require agencies to identify risks to their systems. OMB would have to establish an information-security incident center, and the bill would make security standards developed by the National Institute of Standards and Technology compulsory for federal agencies. The measure would permanently reauthorize the Government Information Security Reform Act.
H.R. 4059, Homeland Security Block Grant Act Sponsor: Rep. Michael McNulty, D-N.Y. Introduced: March 20, 2002 Committee: House Transportation and Infrastructure, Judiciary, Energy and Commerce Description: H.R. 4059 would authorize block grants to states, local governments and Indian tribes to help them develop homeland security plans. The money could be used to improve cyber security and protect critical infrastructures, among other things. The bill would authorize $3 billion in local government grants for fiscal 2002 -- with 1 percent reserved for Indian tribes and 70 percent for urban areas -- and a separate $500 million for statewide use. A Senate companion bill, S. 2038, was introduced the same day.
!-- begin bill text -->
H.R. 5671, Information Security Act Sponsor: Rep. Christopher John, D-La. Introduced: Oct. 16, 2002 Committee: House Government Reform Description: H.R. 5671 seeks to ensure the best possible security precautions within the proposed Homeland Security Department. The security measures would include a standards-based e-mail encryption system and a communications system that would support multiple platforms, among other things.
H. Con. Res. 22 Sponsor: Rep. Jim Saxton, R-N.J. Introduced: Feb. 6, 2001 Committee: House Education and the Workforce, Judiciary Description: H. Con. Res. 22 would express the sense of Congress that cyber terrorism is an emerging threat to U.S. national security and the nation's electronic infrastructure. The resolution would call for: a partnership between the federal government and private industry to combat cyber terrorism; a revised legal framework for the prosecution of hackers and cyber terrorists; and the completion of an interagency study to assess the threat of cyber terrorism.
Senate
S. 1407, Critical Infrastructures Protection Act Sponsor: Sen. Pete Domenici, R-N.M. Introduced: Sept. 5, 2001 Committee: Senate Armed Services Description: S. 1407 seeks to bolster President Bush's efforts to coordinate the government's oversight of the nation's critical infrastructure. Sen. Pete Domenici, R-N.M., introduced the bill a few weeks before Bush is signed an executive order creating the President's Critical Infrastructure Protection and Continuity Board, which will require scientific models for implementing a cyber-security framework. S. 1407 would support that effort by reiterating security policy objectives and designating the National Infrastructure Simulation and Analysis Center in Domenici's home state as a core research tool for the board. The bill also would authorize $8 million in fiscal 2002.
S. 1456, Critical Infrastructure Information Security Act Sponsor: Sen. Robert Bennett, R-Utah Introduced: Sept. 24, 2001 Committee: Senate Governmental Affairs Description: S. 1456 aims to increase the sharing of information about critical infrastructures and potential threats against them. The bill would allow critical infrastructure entities to voluntarily submit sensitive information that could not be disclosed under the Freedom of Information Act. The measure also would require government agencies to analyze information they receive and determine the tactical and strategic implications. And it would exempt from antitrust law organizations formed solely for gathering and analyzing critical infrastructure information.
S. 1568, Cyber Terrorism Prevention Act Sponsor: Sen. Orrin Hatch, R-Utah Introduced: Oct. 18, 2001 Committee: Senate Judiciary Description: S. 1568 seeks to prevent cyber terrorism by, among other things, requiring the FBI to develop and support at least 10 computer forensic laboratories. The centers would examine computer evidence intercepted in criminal investigations, train federal state and local law enforcers on combating computer-related crime, and facilitate information sharing on such crimes. The bill would authorize $50 million a year toward the centers.
S. 1737, Homeland Security Block Grant Act Sponsor: Sen. Hillary Rodham Clinton, D-N.Y. Introduced: Nov. 28, 2001 Committee: Senate Judiciary Description: S. 1737 would authorize block grants to local governments to help them improve security and public safety. Backed by groups like the U.S. Conference of Mayors and National Association of Police Organizations, the bill would authorize $3 billion in funding, with 70 percent going directly to more than 1,000 cities and counties. The remaining 30 percent would be sent to the states to distribute to smaller communities. The homeland security grants could be used to buy new equipment and technologies to improve communication, improve cyber security, and help communities coordinate timely information-sharing systems.
S. 1746, Nuclear Security Act Sponsor: Sen. Harry Reid, D-Nev. Introduced: Nov. 29, 2001 Committee: Senate Environment and Public Works Description: S. 1746 seeks to strengthen security at sensitive nuclear facilities. Among other things, the bill would require the government to assess the potential of cyber terrorism at such facilities. A House companion measure, H.R. 3382, was introduced.
S. 1780, Federal Emergency Procurement Flexibility Act Sponsor: Sen. Fred Thompson, R-Tenn. Introduced: Dec. 6, 2001 Committee: Senate Governmental Affairs Description: S. 1780 would give federal agencies purchasing flexibility when they are procuring property and services designed to defend against terrorism. The bill would streamline the procurement process when it involves buying technology or other goods for use in humanitarian or peacekeeping operations, or for preventing cyber attacks or other types of terrorism. The measure also would expand to all agencies the authority that allows the Defense Department to use approaches other than contracts to buy research and development for new technologies to fight terrorism. A House companion bill, H.R. 3426, was introduced the same day.
S. 1900, Cyber Terrorism Preparedness Act Sponsor: Sen. John Edwards, D-N.C. Introduced: Jan. 28, 2002 Committee: Senate Commerce, Science and Transportation Description: S. 1900 seeks to protect the nation from cyber terrorism and cyber crime by identifying "best practices" that the government and private sector could implement to address such threats. The bill would create a consortium of academic and private-sector experts to identify those best practices, to conduct cyber-security research, and to study whether and how to condition federal technology contracts on the contractors' implementation of cyber-security protections. The legislation also would require the National Institute of Standards and Technology to implement the best practices within government. The bill is one of two cyber-security measures that Sen. John Edwards, D-N.C., introduced the same day. The other measure is S. 1901.
S. 1989, National Cyber Security Defense Team Authorization Act Sponsor: Sen. Charles Schumer, D-N.Y. Introduced: March 5, 2002 Committee: Senate Judiciary Description: S. 1989 would create a cyber-security team of experts from the Commerce, Defense, Justice, State and Treasury departments, and the FBI and CIA. The president and his National Security Council would oversee the team, whose mission would be to determine areas of vulnerability in the government's electronic infrastructure for power, water, communications or other systems. The team would recommend ways for federal agencies to correct their cyber weaknesses.
S. 2037, Science and Technology Emergency Mobilization Act Sponsor: Sen. Ron Wyden, D-Ore. Introduced: March 20, 2002 Committee: Senate Commerce, Science and Transportation Description: S. 2037 would establish a National Emergency Technology Guard, or NET Guard, of science and technology experts to advise the government on tech issues during times of emergency. The bill also would require that the National Institute of Standards and Technology establish a center to evaluate new technology for emergency response. Finally, it would authorize a pilot project to help local law enforcement and emergency-response teams evaluate their communication systems. The Senate Commerce, Science and Transportation Committee approved the measure June 27, 2002, and the Senate passed it by voice vote July 18.
S. 2038, Homeland Security Block Grant Act Sponsor: Sen. Hillary Rodham Clinton, D-N.Y. Introduced: March 20, 2002 Committee: Senate Environment and Public Works Description: S. 2038 would authorize block grants to states, local governments and Indian tribes to help them develop homeland security plans. The money could be used to improve cyber security and protect critical infrastructures, among other things. The bill would authorize $3 billion in local government grants for fiscal 2002 -- with 1 percent reserved for Indian tribes and 70 percent for urban areas -- and a separate $500 million for statewide use. A House companion bill, H.R. 4059, was introduced the same day.
S. 2182, Cyber Security Research and Development Act Sponsor: Sen. Ron Wyden, D-Ore. Introduced: April 17, 2002 Committee: Senate Commerce, Science and Transportation Final Action:Passed by the Senate Description: S. 2182 would authorize cyber-security fellowships and programs through the National Science Foundation (NSF) and National Institute of Standards and Technology (NIST). Under the bill, NSF would award grants to create centers at colleges for the study of computer and network security. The agency also would create grant programs for undergraduate and graduate students in related fields. NIST would create a grant program for colleges and universities that partner with for-profit companies to research computer security. The House passed its companion bill, H.R. 3394, on a 400-12 vote Feb. 7, 2002.
S. 3067, Government Information Security Reform Act Sponsor: Sen. Fred Thompson, R-Tenn. Introduced: Oct. 7, 2002 Committee: Senate Governmental Affairs Description: S.3067 would permanently reauthorize and strengthen a law that requires federal agencies to develop and implement security policies, and that requires the White House Office of Management and Budget to make sure that the agencies craft plans to improve computer security. The law, which seeks to prevent hackers and cyber terrorists from accessing sensitive information such as taxpayer data, was set to expire Nov. 29, 2002. Congress ultimately cleared expansive language on computer security as part of the broader bill, H.R. 5005, to create the Homeland Security Department.