Strengthening American Cybersecurity Act of 2022
Latest action · Mar 2, 2022 Held at the desk.
Progress
Where this bill reached, and when. A stage with no date was not reached; one that failed a vote and later carried shows the date it carried.
- IntroducedFeb 8, 2022
- Passed SenateMar 1, 2022
- Passed HouseNot reached
- To the PresidentNot reached
- Became lawNot reached
Summary
Strengthening American Cybersecurity Act of 2022
This bill addresses cybersecurity threats against critical infrastructure and the federal government.
The Cybersecurity and Infrastructure Security Agency (CISA) must perform ongoing and continuous assessments of federal risk posture.
An agency, within a specified time frame, must (1) determine whether notice to any individual potentially affected by a breach is appropriate based on a risk assessment; and (2) as appropriate, provide written notice to each individual potentially affected.
Each agency must (1) provide information relating to a major incident to specified parties, and (2) develop specified training for individuals with access to federal information or information systems.
The bill requires reporting and other actions to address cybersecurity incidents.
Entities that own or operate critical infrastructure must report cyber incidents and ransom payments within specified time frames.
The bill limits the use and disclosure of reported information.
The bill establishes (1) an interagency council to standardize federal reporting of cybersecurity threats, (2) a task force on ransomware attacks, and (3) a pilot program to identify information systems vulnerable to such attacks.
The bill provides statutory authority for the Federal Risk and Authorization Management Program (FedRAMP) within the General Services Administration (GSA).
FedRAMP is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud computing products and services.
The bill establishes a FedRAMP Board to examine the operations of FedRAMP and the Federal Secure Cloud Advisory Committee.
Cosponsors 15
Members who signed on, in the order they did. Signatures ran from Feb 8, 2022 to Feb 28, 2022; 1 is an original cosponsor, there from the day it was introduced.
| Seat | Cosponsor | Signed on | |
|---|---|---|---|
| R-OH | Rob Portman | Original | Feb 8, 2022 |
| D-CA | Alex Padilla | Feb 10, 2022 | |
| I-ME | Angus S. King Jr. | Feb 10, 2022 | |
| D-NV | Jacky Rosen | Feb 10, 2022 | |
| R-ID | James E. Risch | Feb 10, 2022 | |
| D-GA | Jon Ossoff | Feb 10, 2022 | |
| R-FL | Marco Rubio | Feb 10, 2022 | |
| D-VA | Mark R. Warner | Feb 10, 2022 | |
| R-NC | Richard Burr | Feb 10, 2022 | |
| D-PA | Robert P. Casey Jr. | Feb 10, 2022 | |
| R-MO | Roy Blunt | Feb 10, 2022 | |
| R-ME | Susan M. Collins | Feb 10, 2022 | |
| R-TX | John Cornyn | Feb 17, 2022 | |
| D-CO | John W. Hickenlooper | Feb 17, 2022 | |
| D-CO | Michael F. Bennet | Feb 28, 2022 |
Actions 8
Everything that happened, newest first.
- Mar 2, 2022Message on Senate action sent to the House.
- Mar 2, 2022Received in the House.
- Mar 2, 2022Held at the desk.
- Mar 1, 2022Measure laid before Senate by unanimous consent. (consideration: CR S896-919)
- Mar 1, 2022Passed/agreed to in Senate: Passed Senate with amendments by Unanimous Consent. (text: CR S897-919)
- Feb 9, 2022Read the second time. Placed on Senate Legislative Calendar under General Orders. Calendar No. 265.
- Feb 8, 2022Introduced in Senate
- Feb 8, 2022Introduced in the Senate. Read the first time. Placed on Senate Legislative Calendar under Read the First Time.
In the Congressional Record 4
Days the Record’s own index lists this bill, newest first, with the pages and the members it names. Pages starting H are the House, S the Senate, E Extensions of Remarks.
| Where | In the Record | Members | Date |
|---|---|---|---|
| Senate | Debate and remarks S930–S932 | Rob Portman R-OH | Mar 2, 2022 |
| Senate | Debate and remarks S896–S919Text printed S897–S919Amendments S890, S897 | Charles E. Schumer D-NY, Gary C. Peters D-MI (amendment), Rob Portman R-OH (amendment), Roger F. Wicker R-MS (amendment) | Mar 1, 2022 |
| Senate | Debate and remarks S581 | Charles E. Schumer D-NY | Feb 9, 2022 |
| Senate | Debate and remarks S578 | Christopher Murphy D-CT | Feb 8, 2022 |
Amendments 2
Amendments offered to this bill.
| Amendment | Description | Offered by | Status |
|---|---|---|---|
| SA 4953 | To amend the Federal Cybersecurity Enhancement Act of 2015 to require Federal agencies to obtain exemptions from certain cybersecurity requirements in order to avoid compliance with those requirements. | Gary C. Peters D-MI | Amendment SA 4953 agreed to in Senate by Unanimous Consent. |
| SA 4954 | To improve the bill. | Roger F. Wicker R-MS | Amendment SA 4954 agreed to in Senate by Unanimous Consent. |
Related bills 3
Companion bills and other measures the record links to this one.
| Bill | Title | Relationship | Latest action |
|---|---|---|---|
| S 3099 | Federal Secure Cloud Improvement and Jobs Act of 2021 | Related bill | May 24, 2022 |
| HR 6497 | Federal Information Security Modernization Act of 2022 | Related bill | Feb 2, 2022 |
| HR 8956 | FedRAMP Authorization Act | Related bill | Oct 11, 2022 |
Titles 13
Every title it has carried, official and short, at each stage.
- Official Title as Introduced
- A bill to improve the cybersecurity of the Federal Government, and for other purposes.
- Short Title(s) as Introduced
- Strengthening American Cybersecurity Act of 2022
- Short Title(s) as Passed Senate
- Strengthening American Cybersecurity Act of 2022
- Short Title(s) as Introduced for portions of this bill
- Federal Secure Cloud Improvement and Jobs Act of 2022
- Cyber Incident Reporting for Critical Infrastructure Act of 2022
- Federal Information Security Modernization Act of 2022
- Short Title(s) as Passed Senate for portions of this bill
- Federal Information Security Modernization Act of 2022
- Cyber Incident Reporting for Critical Infrastructure Act of 2022
- Federal Secure Cloud Improvement and Jobs Act of 2022
- Short Titles for portions of this bill from PCS (Placed on Senate Calendar) bill text
- Federal Secure Cloud Improvement and Jobs Act of 2022
- Federal Information Security Modernization Act of 2022
- Cyber Incident Reporting for Critical Infrastructure Act of 2022
- Short Title(s) from PCS (Placed on Senate Calendar) bill text
- Strengthening American Cybersecurity Act of 2022
Subjects
Assigned by the Library of Congress. Policy area: Government Operations and Politics.
- Administrative law and regulatory procedures
- Advisory bodies
- Civil actions and liability
- Computer security and identity theft
- Computers and information technology
- Congressional oversight
- Criminal investigation, prosecution, interrogation
- Department of Homeland Security
- Employment and training programs
- Executive agency funding and structure
- Federal officials
- Government employee pay, benefits, personnel management
- Government information and archives
- Government Operations and Politics
- Government studies and investigations
- Infrastructure development
- Performance measurement
- Public contracts and procurement
- Right of privacy
- Technology assessment
- Telephone and wireless communication
Text 2
Each version as it was printed, newest first.
- Mar 1, 2022Engrossed in Senate
- Feb 9, 2022Placed on Calendar Senate
Everything here is as published by Congress: the summary is the Congressional Research Service's, the action wording is the clerks', and the subjects are the Library of Congress's. How far it got is read from the actions themselves, taking the most recent one of each kind, so a bill that failed a vote and later passed is shown as having passed. Records come from this bill on Congress.gov and govinfo.gov; cost estimates are the Congressional Budget Office's, and the hearings are the printed hearings GovInfo publishes, which can appear months after the hearing.
