S. 3600 · 117th Congress
Strengthening American Cybersecurity Act of 2022
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Passed the Senate without a recorded vote, then expired. It passed by voice vote or unanimous consent, which don't record how each member voted, but didn't become law before the 117th Congress ended.
D
PetersSponsor15 cosponsors · 7 D, 7 R, 1 I
R
Portman
RB
R
Blunt
RB
R
Burr
SC
R
Collins
BC
D
Casey
AK
I
King
JO
D
Ossoff
AP
D
Padilla
JR
R
Risch
MR
R
Rubio
JR
D
Rosen
MW
D
Warner
JC
R
Cornyn
JH
D
Hickenlooper
MB
D
Bennet1 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
- Senate Introduced Feb 8, 2022
- Senate Passed Mar 1, 2022
This bill addresses cybersecurity threats against critical infrastructure and the federal government.
What it does: CRS summary · Passed Senate · Mar 1, 2022
Strengthening American Cybersecurity Act of 2022
This bill addresses cybersecurity threats against critical infrastructure and the federal government.
The Cybersecurity and Infrastructure Security Agency (CISA) must perform ongoing and continuous assessments of federal risk posture.
An agency, within a specified time frame, must (1) determine whether notice to any individual potentially affected by a breach is appropriate based on a risk assessment; and (2) as appropriate, provide written notice to each individual potentially affected.
Each agency must (1) provide information relating to a major incident to specified parties, and (2) develop specified training for individuals with access to federal information or information systems.
The bill requires reporting and other actions to address cybersecurity incidents.
Entities that own or operate critical infrastructure must report cyber incidents and ransom payments within specified time frames.
The bill limits the use and disclosure of reported information.
The bill establishes (1) an interagency council to standardize federal reporting of cybersecurity threats, (2) a task force on ransomware attacks, and (3) a pilot program to identify information systems vulnerable to such attacks.
The bill provides statutory authority for the Federal Risk and Authorization Management Program (FedRAMP) within the General Services Administration (GSA).
FedRAMP is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud computing products and services.
The bill establishes a FedRAMP Board to examine the operations of FedRAMP and the Federal Secure Cloud Advisory Committee.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Strengthening American Cybersecurity Act of 2022
Latest action (Mar 2, 2022): Held at the desk.
Policy area: Government Operations and Politics · Origin: Senate · Introduced: Feb 8, 2022
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
- Senate Introduced Feb 8, 2022
- Senate Passed Mar 1, 2022
No recorded floor vote found.