H.R. 8403 · 117th Congress
Proactive Cyber Initiatives Act of 2022
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 117th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
D
SwalwellSponsorNo cosponsors.
Specifically, each department or agency must (1) conduct regular penetration testing on the information systems of such department or agency; and (2) provide to the Cybersecurity and Infrastructure Security Agency (CISA) and the Office of Management and Budget a report on the results of such testing, including identifying any risks discovered and describing…
What it does: CRS summary · Introduced in House · Jul 15, 2022
Proactive Cyber Initiatives Act of 2022
This bill addresses proactive cybersecurity initiatives.
Specifically, each department or agency must (1) conduct regular penetration testing on the information systems of such department or agency; and (2) provide to the Cybersecurity and Infrastructure Security Agency (CISA) and the Office of Management and Budget a report on the results of such testing, including identifying any risks discovered and describing how cybersecurity may be improved.
CISA must issue guidance to facilitate the implementation of such requirements.
Further, CISA must report to Congress, including an analysis of
- whether increased engagement is needed from national laboratories and the private sector to assist with the protection of the information systems of agencies through the use of active defense techniques, deception technologies, and penetration testing;
- the feasibility and benefits of consolidating within CISA proactive cybersecurity initiatives; and
- whether CISA requires additional authorities or resources to carry out proactive cybersecurity initiatives for agencies.
The bill directs the Office of the National Cyber Director to deconflict overlapping cybersecurity jurisdiction between agencies.
The Government Accountability Office must report to Congress on penetration testing and active defense techniques, and study innovative uses of proactive cybersecurity initiatives.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Proactive Cyber Initiatives Act of 2022
Latest action (Jul 15, 2022): Referred to the Committee on Oversight and Reform, and in addition to the Committee on Armed Services, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
Policy area: Government Operations and Politics · Origin: House · Introduced: Jul 15, 2022
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.