Loading…
DHS Software Supply Chain Risk Management Act of 2021
Legislative Progress
Momentum (last 30 days)
0
score
0 actions · 0 new cosponsors · 0 votes
Speed vs cohort
82pct
92d open
vs 9,698 other HR bills in the 117th — cohort avg 63d
DHS Software Supply Chain Risk Management Act of 2021 This bill requires the Management Directorate of the Department of Homeland Security (DHS) to issue guidance regarding new and existing contracts relating to the procurement of information and communications technology or services. The bill requires contractors to submit to DHS a bill of materials, a certification that each item in the bill of materials is free from certain security vulnerabilities or defects affecting the security of the end product or service, a notification of any identified vulnerability or defect, and a plan to mitigate, repair, or resolve any identified vulnerability or defect. The Government Accountability Office must report to specified congressional committees with (1) a review of this bill's implementation; (2) information regarding DHS engagement with industry; (3) an assessment of how guidance issued pursuant to this bill complies with Executive Order 14208, relating to improving the nation's cybersecurity; and (4) any recommendations related to improving the supply chain for covered contracts.
Yes
412
No
2
Present
0
Not Voting
17
Party Breakdown
These links require the bill number to appear in the filing's source-reported specific issue text. Client expenses and lobbying-firm income are separate disclosure fields.
Filing registrants (3)
2022 · fourth_quarter · Homeland Security
H.R. 1251, Cyber Diplomacy Act of 2021 H.R. 2225, National Science Foundation for the Future Act H.R. 2471, Consolidated Appropriations Act, 2022, including provisions relating to Cyber Incident Reporting for Critical Infrastructure Act of 2022, protection technical amendments and related rulemaking H.R. 2617, Consolidated Appropriations Act, 2023 H.R. 2795, DHS Blue Campaign Enhancement Act H.R. 3388, Protecting Critical Infrastructure Act of 2021 H.R. 3593, Department of Energy Science for the Future Act H.R. 4431, Department of Homeland Security Appropriations Act, 2022 H.R. 4611, DHS Software Supply Chain Risk Management Act of 2021 H.R. 5440, Cyber Incident Reporting for Critical Infrastructure Act of 2021 H.R. 6497, Federal Information Security Modernization Act of 2022 H.R. 7900/H.R. 7776/S. 4543, National Defense Authorization Act for Fiscal Year 2023 H.R. 8152, American Data Privacy and Protection (ADPPA) Act H.R. 8257/S. 4678, Department of Homeland Security Appropriations Act, 2023 S. 1260, United States Innovation and Competition Act of 2021 S. 1316, Cyber Response and Recovery Act of 2021 S. 1350, National Risk Management Act of 2021 S. 2407, Cyber Incident Notification Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021 S. 2875, Cyber Incident Reporting Act of 2021 S. 2902, A bill to modernize Federal information security management, and for other purposes S. 2991, Countering Human Trafficking Act of 2021 S. 3290, National MEP Supply Chain Database Act of 2021 S. 3600, Strengthening American Cybersecurity Act of 2022 S. 5298, A bill to provide the Under Secretary for Science and Technology of the Department of Homeland Security with the authority to temporarily extend the duration of protections provided under the SAFETY Act, and for other purposes Draft legislation titled USA Telecom Act Draft legislation titled Data Security and Breach Notification Act of 2021 Draft legislation titled Cyber SAFETY Act Draft legislation titled National Data Breach Notification Act Draft legislation titled Ransomware Exposure Act Draft legislation titled Securing Systemically Important Critical Infrastructure Act Request for Information on the Cyber Incident Reporting for Critical Infrastructure Act of 2022; Cybersecurity and Infrastructure Security Agency, Department of Homeland Security (87 Fed. Reg. 55,833-55,836, September 12, 2022) Various issues relating to cybersecurity protections; cyber incident disclosure, notification, and reporting of breaches, hacks, and other security incidents, including federal preemption and liability protections; Internet of Things (IoT) security and core capability baselines; deepening business and governmental operational collaboration against foreign cyber threats; increased cybersecurity risk during the coronavirus pandemic; information sharing between the public and private sectors; data breach notification; data breaches, including the 2020 SolarWinds, the 2021 Microsoft Exchange server and the 2021 Colonial Pipeline; The National Cyber Directorate; continuation of the National Space Council; Executive Order 14017 on Securing Americas Critical Supply Chains; Executive Order 13984, Taking Additional Steps to Address the National Emergency with Respect to Significant Malicious Cyber-Enabled Activities; extension of section 3610 of the CARES Act (P.L. 116-134); Implementation of National Defense Authorization Act, (P.L. 116-92); FY2022 Cybersecurity and Infrastructure Security (CISA) Appropriations; provisions on printed circuit boards in the FY2022 National Defense Authorization Act; Cyber Threat Information Collaboration Environment (CTICE) program; U.S. Department of Homeland Securitys SAFETY Act Program; DoD Cybersecurity Maturity Model Certification (CMMC) 2.0; NIST request for information, Evaluating and Improving NIST Cybersecurity Resources: The Cybersecurity Framework and Cybersecurity Supply Chain Risk Management; NIST comment request, Consumer Cybersecurity Labeling Pilots: The Approach and Contributions; section 889, National Defense Authorization Act for FY 2019 (P.L. 115-232); SEC proposed rules, Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure (file no. S7-09-22); legislative proposal in support of the National Security Industrial Base (NSIB)/Defense Industrial Base (DIB) workforce; draft White House national cybersecurity strategy; cross-sector cyber Performance goals (CPGs) common baseline: controls list draft dashboard report language and protections extension bill language related to the SAFETY Act
Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Motion to reconsider laid on the table Agreed to without objection.
On motion to suspend the rules and pass the bill, as amended Agreed to by the Yeas and Nays: (2/3 required): 412 - 2 (Roll no. 319). (text: CR 9/29/2021 H5535)
HousePassed/agreed to in House: On motion to suspend the rules and pass the bill, as amended Agreed to by the Yeas and Nays: (2/3 required): 412 - 2 (Roll no. 319).(text: CR 9/29/2021 H5535)
HouseConsidered as unfinished business. (consideration: CR H5698-5699)
At the conclusion of debate, the Yeas and Nays were demanded and ordered. Pursuant to the provisions of clause 8, rule XX, the Chair announced that further proceedings on the motion would be postponed.
DEBATE - The House proceeded with forty minutes of debate on H.R. 4611.
Considered under suspension of the rules. (consideration: CR H5535-5536)
Bills with similar content found using semantic analysis.
Sources: Congress.gov · House Clerk roll-call votes
| house |
| On Motion to Suspend the Rules and Pass, as Amended |
Passed |
| October 20, 2021 |
Client expense: $20,990,000 · Firm income: Not reported
Government targets: Bureau of Industry and Security (BIS), Central Intelligence Agency (CIA), Commerce, Dept of (DOC), Defense, Dept of (DOD), Executive Office of the President (EOP), Federal Aviation Administration (FAA), Federal Bureau of Investigation (FBI), Federal Communications Commission (FCC), Federal Trade Commission (FTC), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Justice, Dept of (DOJ), Natl Economic Council (NEC), Natl Institute of Standards & Technology (NIST), Natl Security Agency (NSA), Natl Security Council (NSC), Natl Telecommunications & Information Administration (NTIA), Office of Management & Budget (OMB), SENATE, Securities & Exchange Commission (SEC), State, Dept of (DOS), Transportation, Dept of (DOT), White House Office
2022 · third_quarter · Homeland Security
H.R. 1251, Cyber Diplomacy Act of 2021 H.R. 2225, National Science Foundation for the Future Act H.R. 2471, Consolidated Appropriations Act, 2022, including provisions relating to Division Y, Cyber Incident Reporting for Critical Infrastructure Act of 2022 H.R. 2795, DHS Blue Campaign Enhancement Act H.R. 3388, Protecting Critical Infrastructure Act of 2021 H.R. 3593, Department of Energy Science for the Future Act H.R. 4431, Department of Homeland Security Appropriations Act, 2022 H.R. 4611, DHS Software Supply Chain Risk Management Act of 2021 H.R. 5440, Cyber Incident Reporting for Critical Infrastructure Act of 2021 H.R. 6497, Federal Information Security Modernization Act of 2022 H.R. 7900/S. 4543, National Defense Authorization Act for Fiscal Year 2023 H.R. 8152, American Data Privacy and Protection (ADPPA) Act H.R. 8257/S. 4678, Department of Homeland Security Appropriations Act, 2023 S. 1260, United States Innovation and Competition Act of 2021 S. 1316, Cyber Response and Recovery Act of 2021 S. 1350, National Risk Management Act of 2021 S. 2407, Cyber Incident Notification Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021 S. 2875, Cyber Incident Reporting Act of 2021 S. 2902, A bill to modernize Federal information security management, and for other purposes S. 2991, Countering Human Trafficking Act of 2021 S. 3290, National MEP Supply Chain Database Act of 2021 S. 3600, Strengthening American Cybersecurity Act of 2022 Draft legislation titled USA Telecom Act Draft legislation titled Data Security and Breach Notification Act of 2021 Draft legislation titled Cyber SAFETY Act Draft legislation titled National Data Breach Notification Act Draft legislation titled Ransomware Exposure Act Draft legislation titled Securing Systemically Important Critical Infrastructure Act Various issues relating to cybersecurity protections; cyber incident disclosure, notification, and reporting of breaches, hacks, and other security incidents, including federal preemption and liability protections; Internet of Things (IoT) security and core capability baselines; deepening business and governmental operational collaboration against foreign cyber threats; increased cybersecurity risk during the coronavirus pandemic; information sharing between the public and private sectors; data breach notification; data breaches, including the 2020 SolarWinds, the 2021 Microsoft Exchange server and the 2021 Colonial Pipeline; The National Cyber Directorate; continuation of the National Space Council; Executive Order 14017 on Securing Americas Critical Supply Chains; Executive Order 13984, Taking Additional Steps to Address the National Emergency with Respect to Significant Malicious Cyber-Enabled Activities; extension of section 3610 of the CARES Act (P.L. 116-134); implementation of National Defense Authorization Act, (P.L. 116-92); FY2022 Cybersecurity and Infrastructure Security (CISA) Appropriations; provisions on printed circuit boards in the FY2022 National Defense Authorization Act; Cyber Threat Information Collaboration Environment (CTICE) program; U.S. Department of Homeland Securitys SAFETY Act Program; DoD Cybersecurity Maturity Model Certification (CMMC) 2.0; NIST request for information, Evaluating and Improving NIST Cybersecurity Resources: The Cybersecurity Framework and Cybersecurity Supply Chain Risk Management; NIST comment request, Consumer Cybersecurity Labeling Pilots: The Approach and Contributions; section 889, National Defense Authorization Act for FY 2019 (P.L. 115-232); SEC proposed rules, Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure; legislative proposal in support of the National Security Industrial Base (NSIB)/Defense Industrial Base (DIB) workforce; draft White House national cybersecurity strategy; cross-sector cyber Performance goals (CPGs) common baseline: controls list
Client expense: $23,940,000 · Firm income: Not reported
Government targets: Bureau of Industry and Security (BIS), Central Intelligence Agency (CIA), Commerce, Dept of (DOC), Defense, Dept of (DOD), Executive Office of the President (EOP), Federal Aviation Administration (FAA), Federal Bureau of Investigation (FBI), Federal Communications Commission (FCC), Federal Trade Commission (FTC), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Justice, Dept of (DOJ), Natl Economic Council (NEC), Natl Institute of Standards & Technology (NIST), Natl Security Agency (NSA), Natl Security Council (NSC), Natl Telecommunications & Information Administration (NTIA), Office of Management & Budget (OMB), SENATE, Securities & Exchange Commission (SEC), State, Dept of (DOS), Transportation, Dept of (DOT), White House Office
2022 · second_quarter · Homeland Security
H.R. 1251, Cyber Diplomacy Act of 2021 H.R. 2225, National Science Foundation for the Future Act H.R. 2471, Consolidated Appropriations Act, 2022, including provisions relating to Division Y, Cyber Incident Reporting for Critical Infrastructure Act of 2022 H.R. 2795, DHS Blue Campaign Enhancement Act H.R. 3388, Protecting Critical Infrastructure Act of 2021 H.R. 3593, Department of Energy Science for the Future Act H.R. 4350/S. 1605, National Defense Authorization Act for Fiscal Year 2022 H.R. 4431, Department of Homeland Security Appropriations Act, 2022 H.R. 4521, America Creating Opportunities for Manufacturing, Pre-Eminence in Technology, and Economic Strength (America COMPETES) Act of 2022 H.R. 4611, DHS Software Supply Chain Risk Management Act of 2021 H.R. 5440, Cyber Incident Reporting for Critical Infrastructure Act of 2021 H.R. 6497, Federal Information Security Modernization Act of 2022 H.R. 7900, National Defense Authorization Act for Fiscal Year 2023 H.R. 8152, American Data Privacy and Protection (ADPPA) Act S. 1260, United States Innovation and Competition Act of 2021 S. 1316, Cyber Response and Recovery Act of 2021 S. 1350, National Risk Management Act of 2021 S. 2407, Cyber Incident Notification Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021 S. 2875, Cyber Incident Reporting Act of 2021 S. 2902, A bill to modernize Federal information security management, and for other purposes S. 2991, Countering Human Trafficking Act of 2021 S. 3290, National MEP Supply Chain Database Act of 2021 S. 3600, Strengthening American Cybersecurity Act of 2022 S. 3894, Advancing Cybersecurity Through Continuous Diagnostics and Mitigation Act Draft legislation titled USA Telecom Act Draft legislation titled Data Security and Breach Notification Act of 2021 Draft legislation titled Cyber SAFETY Act Draft legislation titled National Data Breach Notification Act Draft legislation titled Ransomware Exposure Act Draft legislation titled Securing Systemically Important Critical Infrastructure Act Draft legislation titled Making appropriations for the Department of Homeland Security for the fiscal year ending September 30, 2023, and for other purposes Draft legislation titled Making appropriations for the Departments of Commerce and Justice, Science, and Related Agencies for the fiscal year ending September 30, 2023, and for other purposes Various issues relating to cybersecurity protections; cyber incident disclosure, notification, and reporting of breaches, hacks, and other security incidents, including federal preemption and liability protections; Internet of Things (IoT) security and core capability baselines; deepening business and governmental operational collaboration against foreign cyber threats; increased cybersecurity risk during the coronavirus pandemic; information sharing between the public and private sectors; data breach notification; data breaches, including the 2020 SolarWinds, the 2021 Microsoft Exchange server and the 2021 Colonial Pipeline; The National Cyber Directorate; continuation of the National Space Council; extension of Section 3610 of the CARES Act (P.L. 116-134); implementation and funding for the CHIPS for America Act, included as part of the FY 2021 National Defense Authorization Act (P.L. 116-283); Executive Order 14017 on Securing Americas Critical Supply Chains; Executive Order 13984, Taking Additional Steps to Address the National Emergency with Respect to Significant Malicious Cyber-Enabled Activities; FY2022 Cybersecurity and Infrastructure Security (CISA) Appropriations; provisions on printed circuit boards in the FY2022 National Defense Authorization Act; Cyber Threat Information Collaboration Environment (CTICE) program; U.S. Department of Homeland Securitys SAFETY Act Program; DoD Cybersecurity Maturity Model Certification (CMMC) 2.0; NIST request for information, Evaluating and Improving NIST Cybersecurity Resources: The Cybersecurity Framework and Cybersecurity Supply Chain Risk Management; Executive Order 14028, NIST comment request, Consumer Cybersecurity Labeling Pilots: The Approach and Contributions; section 889, National Defense Authorization Act for FY 2019 (P.L. 115-232); SEC proposed rules, Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure; support anti-terrorism by Fostering Effective Technologies Act of 2002 (SAFETY Act); legislative proposal in support of the National Security Industrial Base (NSIB)/Defense Industrial Base (DIB) workforce; the Continuous Diagnostics and Mitigation (CDM) Program at the Cybersecurity and Infrastructure Security Agency (CISA)
Client expense: $15,800,000 · Firm income: Not reported
Government targets: Bureau of Industry and Security (BIS), Central Intelligence Agency (CIA), Commerce, Dept of (DOC), Defense, Dept of (DOD), Executive Office of the President (EOP), Federal Aviation Administration (FAA), Federal Bureau of Investigation (FBI), Federal Communications Commission (FCC), Federal Trade Commission (FTC), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Justice, Dept of (DOJ), Natl Economic Council (NEC), Natl Institute of Standards & Technology (NIST), Natl Security Agency (NSA), Natl Security Council (NSC), Natl Telecommunications & Information Administration (NTIA), Office of Management & Budget (OMB), SENATE, Securities & Exchange Commission (SEC), State, Dept of (DOS), Transportation, Dept of (DOT), White House Office
2022 · first_quarter · Homeland Security
H.R. 1251, Cyber Diplomacy Act of 2021 H.R. 2225, National Science Foundation for the Future Act H.R. 2471, Consolidated Appropriations Act, 2022 H.R. 2795, DHS Blue Campaign Enhancement Act H.R. 3388, Protecting Critical Infrastructure Act of 2021 H.R. 3593, Department of Energy Science for the Future Act H.R. 4350/S. 1605, National Defense Authorization Act for Fiscal Year 2022 H.R. 4431, Department of Homeland Security Appropriations Act, 2022 H.R. 4521, America Creating Opportunities for Manufacturing, Pre-Eminence in Technology, and Economic Strength (America COMPETES) Act of 2022 H.R. 4611, DHS Software Supply Chain Risk Management Act of 2021 H.R. 5440, Cyber Incident Reporting for Critical Infrastructure Act of 2021 H.R. 6497, Federal Information Security Modernization Act of 2022 S. 1260, United States Innovation and Competition Act of 2021 S. 1316, Cyber Response and Recovery Act of 2021 S. 1350, National Risk Management Act of 2021 S. 2407, Cyber Incident Notification Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021 S. 2875, Cyber Incident Reporting Act of 2021 S. 2902, Federal Information Security Modernization Act of 2021 S. 3290, National MEP Supply Chain Database Act of 2021 S. 3511, Satellite Cybersecurity Act S. 3600, Strengthening American Cybersecurity Act of 2022 Draft legislation titled USA Telecom Act Draft legislation titled Data Security and Breach Notification Act of 2021 Draft legislation titled Cyber SAFETY Act Draft legislation titled National Data Breach Notification Act Draft legislation titled Ransomware Exposure Act Draft legislation titled Securing Systemically Important Critical Infrastructure Act Draft legislation on Department of Homeland Security international cybersecurity Nomination of Chris Magnus to be Commissioner of Customs and Border Protection Nomination of Dimitri Kusnezov to be Under Secretary for Science and Technology of the Department of Homeland Security Nomination of Kenneth Wainstein to be Under Secretary for Intelligence and Analysis of the Department of Homeland Security Various issues relating to cybersecurity protections; cyber incident disclosure, notification, and reporting of breaches, hacks, and other security incidents, including federal preemption and liability protections; Internet of Things (IoT) security and core capability baselines; deepening business and governmental operational collaboration against foreign cyber threats; increased cybersecurity risk during the coronavirus pandemic; information sharing between the public and private sectors; data breach notification; data breaches, including the 2020 SolarWinds, the 2021 Microsoft Exchange server and the 2021 Colonial Pipeline; The National Cyber Directorate; continuation of the National Space Council; extension of Section 3610 of the CARES Act (P.L. 116-134); implementation and funding for the CHIPS for America Act, included as part of the FY 2021 National Defense Authorization Act; funding for implementation of the CHIPS for America Act, enacted as part of the FY2020 National Defense Authorization Act, (P.L. 116-92); Executive Order 14017 on Securing Americas Critical Supply Chains; Executive Order 13984, Taking Additional Steps to Address the National Emergency with Respect to Significant Malicious Cyber-Enabled Activities; FY2022 Cybersecurity and Infrastructure Security (CISA) Appropriations; provisions on printed circuit boards in the FY2022 National Defense Authorization Act; Cyber Threat Information Collaboration Environment (CTICE) program; U.S. Department of Homeland Securitys SAFETY Act Program; DoD Cybersecurity Maturity Model Certification (CMMC) 2.0; FTC proposed rule, Standards for Safeguarding Customer Information; NIST request for information, Evaluating and Improving NIST Cybersecurity Resources: The Cybersecurity Framework and Cybersecurity Supply Chain Risk Management; NIST request for information, cybersecurity labeling for consumer IoT products and software; section 889, National Defense Authorization Act for FY 2019 (P.L. 115-232); SEC proposed rules, Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure; support anti-terrorism by Fostering Effective Technologies Act of 2002 (SAFETY Act)
Client expense: $18,660,000 · Firm income: Not reported
Government targets: Bureau of Industry and Security (BIS), Central Intelligence Agency (CIA), Commerce, Dept of (DOC), Defense, Dept of (DOD), Executive Office of the President (EOP), Federal Aviation Administration (FAA), Federal Bureau of Investigation (FBI), Federal Communications Commission (FCC), Federal Trade Commission (FTC), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Justice, Dept of (DOJ), Natl Economic Council (NEC), Natl Institute of Standards & Technology (NIST), Natl Security Agency (NSA), Natl Security Council (NSC), Natl Telecommunications & Information Administration (NTIA), Office of Management & Budget (OMB), SENATE, Securities & Exchange Commission (SEC), State, Dept of (DOS), Transportation, Dept of (DOT), White House Office
2021 · fourth_quarter · Homeland Security
H.R. 1251, Cyber Diplomacy Act of 2021 H.R. 2225, National Science Foundation for the Future Act H.R. 2795, DHS Blue Campaign Enhancement Act H.R. 3388, Protecting Critical Infrastructure Act of 2021 H.R. 3593, Department of Energy Science for the Future Act H.R. 4350/S. 1605, National Defense Authorization Act for Fiscal Year 2022 H.R. 4431, Department of Homeland Security Appropriations Act, 2022 H.R. 4611, DHS Software Supply Chain Risk Management Act of 2021 H.R. 5440, Cyber Incident Reporting for Critical Infrastructure Act of 2021 H.R. 5479, Supply CHAIN Act H.R. 5491, Securing Systemically Important Critical Infrastructure Act H.R. 5492, Manufacturing Economy And National Security (MEANS) Act H.R. 5495, Building Resilient Supply Chains Act H.R. 5505, Supply Chain Security and Resilience Act S. 1260, United States Innovation and Competition Act of 2021 S. 1316, Cyber Response and Recovery Act of 2021 S. 1350, National Risk Management Act of 2021 S. 1419, Protecting Critical Boards and Electronics Through Transparency and Enduring Reinvestment (PCBETTER) Act of 2021 S. 2407, Cyber Incident Notification Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021, including provisions relating to the revised Cyber Threat Information Collaboration Environment (CTICE) legislation S. 2792, National Defense Authorization Act for Fiscal Year 2022 S. 2875, Cyber Incident Reporting Act of 2021 S. 2902, A bill to modernize Federal information security management, and for other purposes S. 3290, National MEP Supply Chain Database Act of 2021 Draft legislation titled USA Telecom Act Draft legislation titled Data Security and Breach Notification Act of 2021 Draft legislation titled Cyber SAFETY Act Draft legislation titled National Data Breach Notification Act Draft legislation titled Ransomware Exposure Act Draft legislation titled Securing Systemically Important Critical Infrastructure Act Draft legislation titled To Establish the Supply Chain Resiliency and Crisis Response Office in the Department of Commerce, and for other purposes Draft legislation titled Customs Modernization Act of 2021 Draft legislation titled National Defense Authorization Act for FY 2022 Nomination of Chris Magnus to be Commissioner of Customs and Border Protection Various issues relating to cybersecurity protections; cyber incident disclosure, notification, and reporting of breaches, hacks, and other security incidents, including federal preemption and liability protections; Internet of Things (IoT) security and core capability baselines; deepening business and governmental operational collaboration against foreign cyber threats; increased cybersecurity risk during the coronavirus pandemic; information sharing between the public and private sectors; data breach notification; data breaches, including the 2020 SolarWinds, the 2021 Microsoft Exchange server and the 2021 Colonial Pipeline; National Cyber Directorate; continuation of the National Space Council; extension of Section 3610 of the CARES Act (P.L. 116-134); implementation and funding for the CHIPS for America Act, included as part of the FY 2021 National Defense Authorization Act; Executive Order 14017 on Securing Americas Critical Supply Chains; Executive Order 13873, Securing the Information and Communications Technology and Services Supply Chain; Executive Order 13984, Taking Additional Steps to Address the National Emergency with Respect to Significant Malicious Cyber-Enabled Activities; Executive Order 14028, Improving the Nations Cybersecurity (May 12, 2021), including NIST definition of critical software; FY2022 Cybersecurity and Infrastructure Security (CISA) Appropriations; provisions on printed circuit boards in the FY2022 National Defense Authorization Act; Cyber Threat Information Collaboration Environment (CTICE) program; Cyberspace Solarium Commission report (March 2020); DoD Cybersecurity Maturity Model Certification (CMMC) (January 2020); FCC proposed rule, Protecting Against National Security Threats to the Communications Supply Chain Through the Equipment Authorization Program and the Competitive Bidding Program; NIST Draft Baseline Security Criteria for Consumer IoT Devices; NIST draft Baseline Criteria for Consumer Software Cybersecurity Labeling; SEC potential proposal on cybersecurity risk governance, cyber hygiene, and incident reporting; Congestion at ports of Los Angeles and Long Beach
Client expense: $19,560,000 · Firm income: Not reported
Government targets: Agriculture, Dept of (USDA), Army, Dept of (Corps of Engineers), Bureau of Citizenship & Immigration Services (BCIS), Bureau of Industry and Security (BIS), Bureau of Reclamation, Commerce, Dept of (DOC), Commodity Futures Trading Commission (CFTC), Consumer Financial Protection Bureau (CFPB), Council on Environmental Quality (CEQ), Defense, Dept of (DOD), Education, Dept of, Energy, Dept of, Environmental Protection Agency (EPA), Equal Employment Opportunity Commission (EEOC), Executive Office of the President (EOP), Federal Aviation Administration (FAA), Federal Bureau of Investigation (FBI), Federal Communications Commission (FCC), Federal Deposit Insurance Corporation (FDIC), Federal Emergency Management Agency (FEMA), Federal Energy Regulatory Commission (FERC), Federal Reserve System, Federal Trade Commission (FTC), General Services Administration (GSA), HOUSE OF REPRESENTATIVES, Health & Human Services, Dept of (HHS), Homeland Security, Dept of (DHS), Interior, Dept of (DOI), Internal Revenue Service (IRS), Intl Trade Administration (ITA), Justice, Dept of (DOJ), Labor, Dept of (DOL), Natl Aeronautics & Space Administration (NASA), Natl Economic Council (NEC), Natl Highway Traffic Safety Administration (NHTSA), Natl Institute of Standards & Technology (NIST), Natl Labor Relations Board (NLRB), Natl Science Foundation (NSF), Natl Security Council (NSC), Natl Telecommunications & Information Administration (NTIA), Occupational Safety & Health Administration (OSHA), Office of Management & Budget (OMB), Office of Science & Technology Policy (OSTP), Office of the Comptroller of the Currency (OCC), Patent & Trademark Office (PTO), Pension Benefit Guaranty Corporation (PBGC), SENATE, Securities & Exchange Commission (SEC), Small Business Administration (SBA), State, Dept of (DOS), Transportation, Dept of (DOT), Treasury, Dept of, U.S. Copyright Office, U.S. Customs & Border Protection, U.S. Fish & Wildlife Service (USFWS), U.S. Trade Representative (USTR), White House Office
2021 · fourth_quarter · Science/Technology
Issues related to mobile device cyber security: S. 2875, Cyber Incident Reporting Act; S. 2902, the Federal Information Security Modernization Act of 2021. Issues related to federal initiatives to provide security for mobile devices: H.R.4611, DHS Software Supply Chain Risk Management Act. Issues related to mobile device security and zero trust architecture: S. 3058, Department of Homeland Security Appropriations Act, 2022; H.R. 2685 - Understanding Cybersecurity of Mobile Networks Act.
Client expense: Not reported · Firm income: $20,000
Government targets: HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), SENATE
2021 · fourth_quarter · Science/Technology
Issues and discussions related to innovation, cybersecurity, AI, IT modernization. H.R. 5491 Securing Systematically Important Critical Infrastructure Act; P.L. 117-58, H.R. 3684 Infrastructure Investment and Jobs Act; S. 2875 Cyber Incident Reporting Act of 2021; S. 2407 Cyber Incident Notification Act of 2021; H.R. 5440 Cyber Incident Reporting for Critical Infrastructure Act of 2021; S. 3035 Government Ownership & Oversight of Data in Artificial Intelligence Act of 2021; S. 2491 Defense of U.S. Infrastructure Act; H.R. 4611 DHS Software Supply Chain Risk Management Act of 2021; H.R. 2685 Understanding Cybersecurity of Mobile Networks Act; S. 1260 U.S. Innovation & Competition Act; H.R. 1833 DHS Industrial Control Systems Capabilities Enhancement Act of 2021; S. 2439 DHS Industrial Control Systems Capabilities Enhancement Act of 2021; S. 2520 State & Local Government Cybersecurity Act
Client expense: $100,000 · Firm income: Not reported
Government targets: Defense, Dept of (DOD), Energy, Dept of, Executive Office of the President (EOP), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Natl Security Council (NSC), Office of Management & Budget (OMB), SENATE, White House Office
2021 · third_quarter · Science/Technology
Issues and discussions related to innovation, cybersecurity, AI, IT, technology modernization. Senate Amendment to H.R. 3684 Infrastructure Investment and Jobs Act; H.R. 5491 Securing Systematically Important Critical Infrastructure Act; S. 2491 Defense of U.S. Infrastructure Act; S. 2407 Cyber Incident Notification Act of 2021; H.R. 5440 Cyber Incident Reporting for Critical Infrastructure Act of 2021; S. 2875 Cyber Incident Reporting Act of 2021;[Draft] Ransomware Exposure Act; S. 1260 U.S. Innovation & Competition Act; S. 1400 Protecting Resources on the Electric Grid with Cybersecurity Technology (PROTECT) Act of 2021; [Draft] Defense Supply Chain Security Act of 2021; H.R. 1251 Cyber Diplomacy Act of 2021; H.R. 3243 Pipeline Security Act; H.R. 1833 DHS Industrial Control Systems Capabilities Enhancement Act of 2021; S. 2439 DHS Industrial Control Systems Capabilities Enhancement Act of 2021; H.R. 3138 State and Local Cybersecurity Improvement Act; S. 2520 State & Local Government Cybersecurity Act; H.R. 3119 Energy Emergency Leadership Act; H.R. 3608 Improving Contractor Cybersecurity Act; H.R. 2931 Enhancing Grid Security through Public-Private Partnerships Act; H.R. 2980 Cybersecurity Vulnerability Remediation Act; H.R. 3264 Domains Critical to Homeland Security Act; H.R. 4611 DHS Software Supply Chain Risk Management Act of 2021
Client expense: $70,000 · Firm income: Not reported
Mr. Thompson (MS) moved to suspend the rules and pass the bill, as amended.
Placed on the Union Calendar, Calendar No. 85.
Reported (Amended) by the Committee on Homeland Security. H. Rept. 117-120.
Congress.gov source codes: 5000, H12200
Ordered to be Reported (Amended) by Voice Vote.
Committee Consideration and Mark-up Session Held.
Subcommittee on Oversight, Management, and Accountability Discharged.
Referred to the Subcommittee on Oversight, Management, and Accountability.
Referred to the House Committee on Homeland Security.
Introduced in House
Congress.gov source codes: 1000, Intro-H
| House |
| Referred to |
| July 21, 2021 |
| July 21, 2021 |
Government targets: Defense, Dept of (DOD), Energy, Dept of, Executive Office of the President (EOP), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Natl Security Council (NSC), Office of Management & Budget (OMB), SENATE, Transportation, Dept of (DOT), White House Office