H.R. 1128 · 114th Congress
Department of Veterans Affairs Cyber Security Protection Act
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 114th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
2 cosponsors · 2 D
0 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
Directs the Assistant Secretary of Veterans Affairs for Information and Technology to submit to the congressional veterans committees (under current law only to the Secretary of Veterans Affairs) quarterly reports on Department of Veterans Affairs (VA) compliance with federally-required information security improvements.
What it does: CRS summary · Introduced in House · Feb 26, 2015
Department of Veterans Affairs Cyber Security Protection Act
Directs the Assistant Secretary of Veterans Affairs for Information and Technology to submit to the congressional veterans committees (under current law only to the Secretary of Veterans Affairs) quarterly reports on Department of Veterans Affairs (VA) compliance with federally-required information security improvements.
Directs the Assistant Secretary to submit to such committees: (1) quarterly, a plan of action to address critical known VA information security vulnerabilities; and (2) annually, a plan for identifying and replacing VA operating systems that are out-of-date or unsupported.
Directs the Assistant Secretary to ensure that any software or Internet applications used on VA operating systems are secure from vulnerabilities that could affect the confidentiality of sensitive personal information on veterans.
Directs the Secretary to:
- report quarterly to such committees on any incidents of failure to comply with established information security policies, any actions taken in response to such incidents, and certain related information;
- submit a strategic plan to such committees for improving VA information security and to update such plan at least every two years; and
- report to such committees within five years on information security protection and accountability of the VA for information security breeches and incidents.
Requires VA contractors with access to sensitive personal information to provide protective measures to safeguard from possible information security threats any information provided by the VA that will be resident on, or transiting through, information systems controlled by that contractor.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Department of Veterans Affairs Cyber Security Protection Act
Latest action (Mar 19, 2015): Subcommittee Hearings Held.
Policy area: Armed Forces and National Security · Origin: House · Introduced: Feb 26, 2015
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.