VotedBy VotedBy ⌕
Election Day · Tue, Nov 3See how your members of Congress voted →

S. 4785 · 116th Congress

Risk-Informed Spending for Cybersecurity Act

Key: what the circles and colors mean

Each circle is a bill. The ring fills as it moves through Congress:

IntroducedPassed one chamberPassed both chambersBecame law (gold)Resolution agreed to (full, dark)Failed or vetoed (gray)

Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.

Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.

Never voted on. It didn't reach a floor vote before the 116th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.

1 cosponsor · 1 D

1 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.

This bill requires the Office of Management and Budget, in coordination with the Cybersecurity and Infrastructure Security Agency, to develop a standard model for creating a risk-based budget for cybersecurity spending.

What it does: CRS summary · Introduced in Senate · Oct 1, 2020

Risk-Informed Spending for Cybersecurity Act

This bill requires the Office of Management and Budget, in coordination with the Cybersecurity and Infrastructure Security Agency, to develop a standard model for creating a risk-based budget for cybersecurity spending.

The risk-based budget must (1) be developed by identifying and prioritizing cybersecurity risks and vulnerabilities through analysis of threat intelligence, incident data, and tactics, techniques, procedures, and capabilities of cyber threats; and (2) allocate resources based on the risks identified and prioritized.

Within two years of the development of the model, federal agencies must begin using the model to develop annual cybersecurity and information technology budget requests.

Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov

About this bill and sources

Official title: Risk-Informed Spending for Cybersecurity Act

Latest action (Oct 1, 2020): Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

Policy area: Economics and Public Finance · Origin: Senate · Introduced: Oct 1, 2020

Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)

No recorded floor vote found.