Defense of United States Infrastructure Act of 2021

Issues related to cybersecurity Issues related to Internet of Things device cybersecurity Issues related to the Cyberspace Solarium Commission Report Issues related to the Information and Communications Technology and Services Supply Chain S.1260 United States Innovation and Competition Act of 2021 H.R. 5440 Cyber Incident Reporting for Critical Infrastructure Act of 2021 S. 2407 Cyber Notification Act of 2021 S. 2875 Cyber Incident Reporting Act of 2021 S. 2491 Defense of United States Infrastructure Act of 2021 S. 3600 Strengthening American Cybersecurity Act of 2022

Client expense: $890,000 · Firm income: Not reported

Government targets: Commerce, Dept of (DOC), Federal Communications Commission (FCC), HOUSE OF REPRESENTATIVES, SENATE

S.1494 - A bill to protect the privacy of consumers (Jerry Moran, R-KS) , ALL PROVISIONS H.R.3910 - To amend the Gramm-Leach-Bliley Act to give the Bureau of Consumer Financial Protection rulemaking and enforcement authority over the safeguards rule with respect to data aggregators and other financial institutions, and for other purposes (Stephen Lynch, D-MA-8) , ALL PROVISIONS H.R.3911 - To amend the Gramm-Leach-Bliley Act to establish procedures for disclosures by financial institutions of nonpublic personal information, and for other purposes (Stephen Lynch, D-MA-8) , ALL PROVISIONS H.R.3912 - To amend the Gramm-Leach-Bliley Act to require consumers to opt in before a financial institution may share the nonpublic personal information of the consumer with a nonaffiliated third party, and for other purposes (Stephen Lynch, D-MA-8) , ALL PROVISIONS H.R.4513 - To amend the Small Business Act to provide for the establishment of an enhanced cybersecurity assistance and protections for small businesses, and for other purposes (Byron Donalds, R-FL-19) , ALL PROVISIONS S.2499 - A bill to establish data privacy and data security protections for consumers in the United States (Roger Wicker, R-MS) , ALL PROVISIONS S.2491 - Defense of United States Infrastructure Act of 2021 - To amend the Homeland Security Act of 2002 to establish the National Cyber Resilience Assistance Fund, to improve the ability of the Federal Government to assist in enhancing critical infrastructure cyber resilience, to improve security in the national cyber ecosystem, to address Systemically Important Critical Infrastructure, and for other purposes (Angus King, I-ME) , ALL PROVISIONS S.2875 - A bill to amend the Homeland Security Act of 2002 to establish the Cyber Incident Review Office in the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security, and for other purposes (Gary Peters, D-MI) , ALL PROVISIONS S.2926 - A bill to require certain entities to disclose to the Secretary of Homeland Security ransom payments, and for other purposes (Elizabeth Warren, D-MA) , ALL PROVISIONS H.R.5491 - To authorize the Director of the Cybersecurity and Infrastructure Security Agency to designate certain elements of critical infrastructure as systemically important, and for other purposes (John Katko, R-NY-24) , ALL PROVISIONS S.3065 - A bill to establish national data privacy standards in the United States, and for other purposes (Catherine Cortez Masto, D-NV) , ALL PROVISIONS House Version: H.R.5807 - To establish national data privacy standards in the United States, and for other purposes (Filemon Vela, D-TX-34) , ALL PROVISIONS H.R.5936 - To include requirements relating to ransomware attack deterrence for a covered U.S. financial institution in the Consolidated Appropriations Act, 2021, and for other purposes (Patrick McHenry, R-NC-10) , ALL PROVISIONS S.3195 - A bill to provide consumers with foundational data privacy rights, create strong oversight mechanisms, and establish meaningful enforcement (Maria Cantwell, D-WA) , ALL PROVISIONS S.3335 - A bill to provide liability protection for the sharing of information regarding suspected fraudulent, abusive, or unlawful robocalls, illegally spoofed calls, and other illegal calls by or with the registered consortium that conducts private-led efforts to trace back the origin of suspected unlawful robocalls, and for the receipt of such information by the registered consortium, and for other purposes (John Thune, R-SD) , ALL PROVISIONS S.3600 - Strengthening American Cybersecurity Act of 2022 (Gary Peters, D-MI), ALL PROVISIONS H.R.7449 - To establish prohibitions on the use of automated systems in a discriminatory manner, and for other purposes (Anthony Brown, D-MD-4) , ALL PROVISIONS H.R.7598 - To amend the Pallone-Thune Telephone Robocall Abuse Criminal Enforcement and Deterrence Act to provide liability protection for the sharing of information regarding suspected unlawful robocalls by or with the registered consortium that conducts private-led efforts to trace back the origin of suspected unlawful robocalls, and for the receipt of such information by such registered consortium, and for other purposes (Bob Latta, R-OH-5) , ALL PROVISIONS H.R.8152 - To provide consumers with foundational data privacy rights, create strong oversight mechanisms, and establish meaningful enforcement (Frank Pallone Jr., D-NJ-6) , ALL PROVISIONS S.4701 - To provide cybersecurity support for small business concerns through the small business development center program, and for other purposes. (Maggie Hassan, D-NH), ALL PROVISIONS S.4985 - A bill to amend the Cybersecurity Information Sharing Act of 2015 to include voluntary information sharing of cyber threat indicators among cryptocurrency companies, and for other purposes. (Marsha Blackburn, R-TN), ALL PROVISIONS H.R.9161 - To prohibit data brokers from selling and transferring certain sensitive data. (Mary Gay Scanlon, D-PA-5), ALL PROVISIONS H.R.9259 - Cybersecurity Skills Integration Act - To direct the Secretary of Education to establish a pilot program to award competitive grants for the integration of cybersecurity education, and for other purposes. (Jim Langevin, D-RI-2), ALL PROVISIONS H.R.9588 - To amend the Gramm-Leach-Bliley Act to provide a national standard for financial institution data security and breach notification on behalf of all consumers, and for other purposes. (Blaine Luetkemeyer, R-MO-3), ALL PROVISIONS

Client expense: $400,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 1833, The DHS Industrial Control Systems Enhancement Act of 2021;  H.R. 5440 Cyber Incident Reporting for Critical Infrastructure Act; H.R. 3078 Pipeline and LNG Facility Cybersecurity Act H.R. 3243 Pipeline Security Act (H.R. 3243) S. 398, Linemen Legacy Act; Issues related to cyber incident reporting and data breach notifications; Pipeline Security/ Cybersecurity: Guidance on CyberBreach Notification Legislation proposals. S. 1316, Cyber Response and Recovery Act of 2021; S.73, American Drone Security Act of 2021; S. 1350, National Risk Management Act; H.R. 3599 / S. 1097, Federal Rotational Cyber Workforce Program Act; H.R. 4350 National Defense Authorization Act (NDAA) Cyber incident reporting and the impact on critical infrastructure and gas utilities; S. 2269, Protect American Power Infrastructure Act; S. 2407 Cyber Incident Notification Act of 2021; S.2491- Defense of United States Infrastructure Act of 2021 S. 2875 Cyber Incident Reporting Act of 2021; Pipeline Security Act (H.R. 3243): This measure codifies TSAs Pipeline Security Section and clarifies TSAs statutory mandate to protect pipeline infrastructure; Pipeline and LNG Facility Cybersecurity Act (H.R. 3078): Legislation to strengthen the Department of Energys ability to respond to physical and cybersecurity threats to pipelines and LNG facilities; Draft Cyber Incident Notification Act of 2021: Legislation that would institute a mandatory cyber incident reporting scheme for designated critical infrastructure entities; Draft Systemically Important Critical Infrastructure Security Legislation: Legislation that would alter how the federal government treats critical infrastructure security from a siloed industry perspective to a connected multi-industry perspective; Draft Data Breach Legislation: Legislation aimed at combatting cybersecurity attacks aimed at stealing or otherwise compromising personal financial data; National Draft Data Breach Notification Act Draft; Ransomware Exposure Act (Draft); Pipeline Security Authorities (CISA-TSA) Legislation Draft. Cyber Incident Reporting legislation.

Client expense: $280,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 1316, Cyber Response and Recovery Act of 2021; H.R. 3243, Pipeline Security Act; H.R. 3078, Pipeline and LNG Facility Cybersecurity Act; H.R. 4350, National Defense Authorization Act (NDAA); H.R. 5440, Cyber Incident Reporting for Critical Infrastructure Act; S. 73, American Drone Security Act of 2021; S. 2269, Protect American Power Infrastructure Act; S. 2407, Cyber Incident Notification Act of 2021; S. 2491, the Defense of U.S. Infrastructure Act of 2021; S. 2875, Cyber Incident Reporting Act of 2021; Draft Systemically Important Critical Infrastructure Security legislation; Draft Data Breach legislation; Draft Ransomware Exposure legislation; Draft pipeline security authorities (CISA-TSA) legislation.

Client expense: $330,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

**Issues lobbied without specific bill number: Cybersecurity and ransomware S. 2491 National Cyber Resilience Assistance Fund S. 2875 Cyber Incident Review Office **Issues lobbied without specific bill number: Private sector cyber incident reporting requirements S. 3600 Cyber Incident Reporting Legislation for Critical Infrastructure H.R. 8152 Data Privacy Rights and Oversight Mechanisms H.R. 4350 Data Privacy S. 4543 Cybersecurity H.R. 7900 Cybersecurity **Issues lobbied without specific bill number: Cyber Security Strategy **Issues lobbied without specific bill number: Request For Information Extension on Cyber Incident Reporting

Client expense: Not reported · Firm income: $42,000

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 1996 Protections for Financial Institutions H.R. 2068 Safe Harbor for Insurers S. 862 Safe Harbor for Insurers **Issues lobbied without specific bill number: Implementation of Risk-Rating 2.0, Climate risk to the insurance industry, COVID-19 personal and commercial insurance response and role, Federal crop insurance program, National Flood Insurance Program, Prospective pandemic protection H.R. 1270 Private Passenger Automobile Insurers H.R. 1512 Climate Crisis **Issues lobbied without specific bill number: Business of insurance, Credit-based insurance underwriting, Commercial vehicle liability insurance **Issues lobbied without specific bill number: Consent Towing H.R. 5823 Pandemic Risk Reinsurance Program S. 2491 National Cyber Resilience Assistance Fund S. 3128 National Flood Insurance Program Reauthorization **Issues lobbied without specific bill number: Financial services climate-related risk **Issues lobbied without specific bill number: Categories for reinsurers H.R. 5802 National Flood Insurance Program Reauthorization H.R. 8036 National Flood Insurance Program Extension H.R. 6833 National Flood Insurance Program Extension **Issues lobbied without specific bill number: Climate Change Related Issues and Gaps in Data H.R. 9588 Data Security and Breach Notification Standard **Issues lobbied without specific bill number: AI Bill of Rights **Issues lobbied without specific bill number: Data Collection Call to Assess Climate Related Financial Risk in Insurance **Issues lobbied without specific bill number: Catastrophic Cyber Insurance Backstop **Issues lobbied without specific bill number: Private Flood Insurance for Federal Housing Administration Mortgages

Client expense: Not reported · Firm income: $42,000

Government targets: HOUSE OF REPRESENTATIVES, SENATE

Issues related to electric sector security including cybersecurity, information sharing and protections, incident reporting, existing standards, postures, supply chains, threat environment, procedures, roles, responsibilities and authorities. S. 3600 Strengthening American Cybersecurity Act of 2022 H.R. 5491 Securing Systemically Important Critical Infrastructure Act S. 2491 Defense of United States Infrastructure Act of 2021

Client expense: $716,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

S.2491 - Defense of United States Infrastructure Act of 2021 Access to DOD intel that impacts Climate Change through NDAA

Client expense: Not reported · Firm income: $45,000

Government targets: HOUSE OF REPRESENTATIVES, SENATE

**Issues lobbied without specific bill number: Cybersecurity and ransomware S. 2491 National Cyber Resilience Assistance Fund S. 2875 Cyber Incident Review Office **Issues lobbied without specific bill number: Private sector cyber incident reporting requirements S. 3600 Cyber Incident Reporting Legislation for Critical Infrastructure H.R. 8152 Data Privacy Rights and Oversight Mechanisms H.R. 4350 Data Privacy S. 4543 Cybersecurity H.R. 7900 Cybersecurity **Issues lobbied without specific bill number: Cyber Security Strategy **Issues lobbied without specific bill number: Request For Information Extension on Cyber Incident Reporting

Client expense: $1,420,000 · Firm income: Not reported

Government targets: Federal Bureau of Investigation (FBI), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), SENATE, Transportation, Dept of (DOT), Treasury, Dept of, White House Office

H.R. 1996 Protections for Financial Institutions H.R. 2068 Safe Harbor for Insurers S. 862 Safe Harbor for Insurers **Issues lobbied without specific bill number: Implementation of Risk-Rating 2.0, Climate risk to the insurance industry, COVID-19 personal and commercial insurance response and role, Federal crop insurance program, National Flood Insurance Program, Prospective pandemic protection H.R. 1270 Private Passenger Automobile Insurers H.R. 1512 Climate Crisis **Issues lobbied without specific bill number: Business of insurance, Credit-based insurance underwriting, Commercial vehicle liability insurance **Issues lobbied without specific bill number: Consent Towing H.R. 5823 Pandemic Risk Reinsurance Program S. 2491 National Cyber Resilience Assistance Fund S. 3128 National Flood Insurance Program Reauthorization **Issues lobbied without specific bill number: Financial services climate-related risk **Issues lobbied without specific bill number: Categories for reinsurers H.R. 5802 National Flood Insurance Program Reauthorization H.R. 8036 National Flood Insurance Program Extension H.R. 6833 National Flood Insurance Program Extension **Issues lobbied without specific bill number: Climate Change Related Issues and Gaps in Data H.R. 9588 Data Security and Breach Notification Standard **Issues lobbied without specific bill number: AI Bill of Rights **Issues lobbied without specific bill number: Data Collection Call to Assess Climate Related Financial Risk in Insurance **Issues lobbied without specific bill number: Catastrophic Cyber Insurance Backstop **Issues lobbied without specific bill number: Private Flood Insurance for Federal Housing Administration Mortgages

Client expense: $1,420,000 · Firm income: Not reported

Government targets: Federal Emergency Management Agency (FEMA), HOUSE OF REPRESENTATIVES, SENATE, Treasury, Dept of, White House Office

S. 3600 - Strengthening American Cybersecurity Act of 2022 H.R. 3076 - Postal Service Reform Act of 2022 H.R. -Information Transparency & Personal Data Control Act H.R.5440 - To amend the Homeland Security Act of 2002 to establish the Cyber Incident Review Office in the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security S.2491 - Defense of United States Infrastructure Act of 2021 H.R. 1280 - George Floyd Justice in Policing Act of 2021 Just and Unifying Solutions to Invigorate Communities Everywhere (JUSTICE) Act Cybersecurity issues including Federal data breach notification legislation HR 8152- American Data Privacy and Protection Act Privacy related policy Impact of Internet of Things technology Policy related to cyber risk insurance Gerontology and aging in place issues Unmanned Aerial Systems (UAS) technology Big Data Policy related to the opioid epidemic Policy related to rising cost of auto repairs Policy related to bipartisan police reform, police misconduct registry and community safety measures Engagement with Consumer Product Safety Commission on emerging risks, standards and training

Client expense: $330,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

S. 2875, Cyber Incident Reporting Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021 H.R.7900, National Defense Authorization Act for Fiscal Year 2023

Client expense: Not reported · Firm income: $30,000

Government targets: HOUSE OF REPRESENTATIVES, SENATE

S. 2875, Cyber Incident Reporting Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021 H.R.7900, National Defense Authorization Act for Fiscal Year 2023

Client expense: Not reported · Firm income: $30,000

Government targets: HOUSE OF REPRESENTATIVES, SENATE

**Issues lobbied without specific bill number: Cybersecurity and ransomware S. 2491 National Cyber Resilience Assistance Fund S. 2875 Cyber Incident Review Office **Issues lobbied without specific bill number: Private sector cyber incident reporting requirements S. 3600 Cyber Incident Reporting Legislation for Critical Infrastructure H.R. 8152 Data Privacy Rights and Oversight Mechanisms H.R. 4350 Data Privacy S. 4543 Cybersecurity H.R. 7900 Cybersecurity

Client expense: Not reported · Firm income: $42,000

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 1996 Protections for Financial Institutions H.R. 2068 Safe Harbor for Insurers S. 862 Safe Harbor for Insurers **Issues lobbied without specific bill number: Implementation of Risk-Rating 2.0, Climate risk to the insurance industry, COVID-19 personal and commercial insurance response and role, Federal crop insurance program, National Flood Insurance Program, Prospective pandemic protection H.R. 1270 Private Passenger Automobile Insurers H.R. 1512 Climate Crisis **Issues lobbied without specific bill number: Business of insurance, Credit-based insurance underwriting, Commercial vehicle liability insurance **Issues lobbied without specific bill number: Consent Towing H.R. 5823 Pandemic Risk Reinsurance Program S. 2491 National Cyber Resilience Assistance Fund S. 3128 National Flood Insurance Program Reauthorization **Issues lobbied without specific bill number: Financial services climate-related risk **Issues lobbied without specific bill number: Categories for reinsurers H.R. 5802 National Flood Insurance Program Reauthorization H.R. 8036 National Flood Insurance Program Extension H.R. 6833 National Flood Insurance Program Extension **Issues lobbied without specific bill number: Climate Change Related Issues and Gaps in Data S.3092 the FIRE Act

Client expense: Not reported · Firm income: $42,000

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 1316, Cyber Response and Recovery Act of 2021; H.R. 3243, Pipeline Security Act; H.R. 3078, Pipeline and LNG Facility Cybersecurity Act; H.R. 4350, National Defense Authorization Act (NDAA); H.R. 5440, Cyber Incident Reporting for Critical Infrastructure Act; S. 73, American Drone Security Act of 2021; S. 2269, Protect American Power Infrastructure Act; S. 2407, Cyber Incident Notification Act of 2021; S. 2491, the Defense of U.S. Infrastructure Act of 2021; S. 2875, Cyber Incident Reporting Act of 2021; Draft Systemically Important Critical Infrastructure Security legislation; Draft Data Breach legislation; Draft Ransomware Exposure legislation; Draft pipeline security authorities (CISA-TSA) legislation.

Client expense: $360,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 481, Flood Resiliency and Taxpayer Savings Act of 2021. H.R. 1602, Eliminate Barriers to Innovation Act of 2021 H.R. 1816, To require the Federal Trade Commission to promulgate regulations related to sensitive personal information, and for other purposes H.R. 2471, Consolidated Appropriations Act, 2022, including provisions related to the Cyber Incident Reporting for Critical Infrastructure Act of 2022 H.R. 2687, To increase the minimum levels of financial responsibility for transporting property, and to index future increases to changes in inflation relating to medical care H.R. 3138, The State and Local Cybersecurity Improvement Act H.R. 3223, CISA Cyber Exercise Act H.R. 3264, Domains Critical to Homeland Security Act H.R. 3797, (116th CONGRESS), Medical Marijuana Research Act of 2019 H.R. 4350/S. 2792, National Defense Authorization Act for Fiscal Year 2022, including provisions relating to cybersecurity and incident reporting H.R. 5823, Pandemic Risk Insurance Act of 2021 H.R. 6032, (114th CONGRESS), Data Breach Insurance Act H.R. 6151, Highway Accident Fairness Act of 2021, including provisions related to third-part litigation funding disclosures H.R. 6359, (116th CONGRESS), Promoting Infrastructure by Protecting Our Subcontractors and Taxpayers Act. H.R. 6395/S. 4049, (116th CONGRESS), National Defense Authorization Act for Fiscal Year 2021, including provisions relating to cybersecurity H.R. 8152, American Data Privacy and Protection Act S. 224, Promoting Digital Privacy Technologies Act S. 2407, Cyber Incident Notification Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021; provisions relating to Sec. 302, Bureau of Cybersecurity Statistics S. 2875, Cyber Incident Reporting Act of 2021 Monitor H.R. 1996 / S. 910, SAFE Banking Act. Discussions regarding pandemic insurance, including H.R. 7011, the Pandemic Risk Insurance Act of 2020; H.R. 6494, the Business Interruption Insurance Coverage Act of 2020. Monitor and participate in discussions regarding data privacy and data breach proposals. General discussion around development of an objective measure of marijuana impairment. General discussions about liability exposures and the COVID-19 pandemic. Legislation and proposals regarding natural catastrophe related policies. Discussions regarding the insurability of cyber exposures. General discussions related to international capital standards. Discussions regarding autonomous vehicles. Legislation and proposals related to the national Flood Insurance Program including a focus on pre-event mitigation and long-term resilience. Consumer Protection Act, specifically, provisions on risk, insurance. Oversight (Federal Insurance Office), and potential CFPB activities related to P&C insurance. General discussions on Commercial Insurance regulation. General issues related to resilience and mitigation, as related to P&C insurance. General discussions related to the Federal Insurance Office. General discussions related to international capital standards. General discussions on global insurers in the marketplace. General discussions on the International Association of Insurance Supervisors. General discussions on innovation in the insurance industry. General discussions on retroactive active changes to business interruption insurance. General discussions on flood resilience and the U.S. mortgage market. General discussions on relating to supply chain resiliency vis-a-vis the COVID-19 pandemic and other disruptions. Discussions regarding the Cyberspace Solarium Commission Report. General discussions related to Section 230 of the Communications Decency Act (CDA) of 1996. General discussions related to OFAC advisory related to ransomware payments. General discussions related to cybersecurity assessment frameworks from DOD (NIST sp 800-171 and CMMC). General discussions related to artificial intelligence (AI) and machine learning. General discussions related to Executive Order 14028, Improving the Nation's Cybersecurity. General discussions related to the Driver's Privacy Protection Act. Discussions related to surety bonding requirements in the WIFIA program. Discussions regarding CISA RFI on Cyber Incident Reporting for Critical Infrastructure Act. Discussions regarding Treasury Departments Federal Insurance Office request for comment (RFC) on Potential Federal Insurance Response to Catastrophic Cyber Incidents.

Client expense: $720,000 · Firm income: Not reported

Government targets: Commerce, Dept of (DOC), Executive Office of the President (EOP), Federal Housing Finance Agency (FHFA), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Housing & Urban Development, Dept of (HUD), Natl Security Council (NSC), SENATE, State, Dept of (DOS), Treasury, Dept of

H.R. 481, Flood Resiliency and Taxpayer Savings Act of 2021. H.R. 1602, Eliminate Barriers to Innovation Act of 2021 H.R. 1816, To require the Federal Trade Commission to promulgate regulations related to sensitive personal information, and for other purposes H.R. 2471, Consolidated Appropriations Act, 2022, including provisions related to the Cyber Incident Reporting for Critical Infrastructure Act of 2022 H.R. 2687, To increase the minimum levels of financial responsibility for transporting property, and to index future increases to changes in inflation relating to medical care H.R. 3138, The State and Local Cybersecurity Improvement Act H.R. 3223, CISA Cyber Exercise Act H.R. 3264, Domains Critical to Homeland Security Act H.R. 3797, (116th CONGRESS), Medical Marijuana Research Act of 2019 H.R. 4350/S. 2792, National Defense Authorization Act for Fiscal Year 2022, including provisions relating to cybersecurity and incident reporting H.R. 5823, Pandemic Risk Insurance Act of 2021 H.R. 6032, (114th CONGRESS), Data Breach Insurance Act H.R. 6151, Highway Accident Fairness Act of 2021, including provisions related to third-part litigation funding disclosures H.R. 6359, (116th CONGRESS), Promoting Infrastructure by Protecting Our Subcontractors and Taxpayers Act. H.R. 6395/S. 4049, (116th CONGRESS), National Defense Authorization Act for Fiscal Year 2021, including provisions relating to cybersecurity H.R. 8152, American Data Privacy and Protection Act S. 224, Promoting Digital Privacy Technologies Act S. 2407, Cyber Incident Notification Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021; provisions relating to Sec. 302, Bureau of Cybersecurity Statistics S. 2875, Cyber Incident Reporting Act of 2021 Monitor H.R. 1996 / S. 910, SAFE Banking Act. Discussions regarding pandemic insurance, including H.R. 7011, the Pandemic Risk Insurance Act of 2020; H.R. 6494, the Business Interruption Insurance Coverage Act of 2020. Monitor and participate in discussions regarding data privacy and data breach proposals. General discussion around development of an objective measure of marijuana impairment. General discussions about liability exposures and the COVID-19 pandemic. Legislation and proposals regarding natural catastrophe related policies. Discussions regarding the insurability of cyber exposures. General discussions related to international capital standards. Discussions regarding autonomous vehicles. Legislation and proposals related to the national Flood Insurance Program including a focus on pre-event mitigation and long-term resilience. Consumer Protection Act, specifically, provisions on risk, insurance. Oversight (Federal Insurance Office), and potential CFPB activities related to P&C insurance. General discussions on Commercial Insurance regulation. General issues related to resilience and mitigation, as related to P&C insurance. General discussions related to the Federal Insurance Office. General discussions related to international capital standards. General discussions on global insurers in the marketplace. General discussions on the International Association of Insurance Supervisors. General discussions on innovation in the insurance industry. General discussions on retroactive active changes to business interruption insurance. General discussions on flood resilience and the U.S. mortgage market. General discussions on relating to supply chain resiliency vis-a-vis the COVID-19 pandemic and other disruptions. Discussions regarding the Cyberspace Solarium Commission Report. General discussions related to Section 230 of the Communications Decency Act (CDA) of 1996. General discussions related to OFAC advisory related to ransomware payments. General discussions related to cybersecurity assessment frameworks from DOD (NIST sp 800-171 and CMMC). General discussions related to artificial intelligence (AI) and machine learning General discussions related to Executive Order 14028, Improving the Nation's Cybersecurity General discussions related to the Driver's Privacy Protection Act

Client expense: $470,000 · Firm income: Not reported

Government targets: Commerce, Dept of (DOC), Executive Office of the President (EOP), Federal Housing Finance Agency (FHFA), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Housing & Urban Development, Dept of (HUD), Natl Security Council (NSC), SENATE, State, Dept of (DOS), Treasury, Dept of

**Issues lobbied without specific bill number: Cybersecurity and ransomware S. 2491 National Cyber Resilience Assistance Fund S. 2875 Cyber Incident Review Office **Issues lobbied without specific bill number: Private sector cyber incident reporting requirements S. 3600 Cyber Incident Reporting Legislation for Critical Infrastructure H.R. 8152 Data Privacy Rights and Oversight Mechanisms H.R. 4350 Data Privacy S. 4543 Cybersecurity H.R. 7900 Cybersecurity

Client expense: $1,380,000 · Firm income: Not reported

Government targets: Federal Bureau of Investigation (FBI), HOUSE OF REPRESENTATIVES, SENATE, Transportation, Dept of (DOT), White House Office

H.R. 1996 Protections for Financial Institutions H.R. 2068 Safe Harbor for Insurers S. 862 Safe Harbor for Insurers **Issues lobbied without specific bill number: Implementation of Risk-Rating 2.0, Climate risk to the insurance industry, COVID-19 personal and commercial insurance response and role, Federal crop insurance program, National Flood Insurance Program, Prospective pandemic protection H.R. 1270 Private Passenger Automobile Insurers H.R. 1512 Climate Crisis **Issues lobbied without specific bill number: Business of insurance, Credit-based insurance underwriting, Commercial vehicle liability insurance **Issues lobbied without specific bill number: Consent Towing H.R. 5823 Pandemic Risk Reinsurance Program S. 2491 National Cyber Resilience Assistance Fund S. 3128 National Flood Insurance Program Reauthorization **Issues lobbied without specific bill number: Financial services climate-related risk **Issues lobbied without specific bill number: Categories for reinsurers H.R. 5802 National Flood Insurance Program Reauthorization H.R. 8036 National Flood Insurance Program Extension H.R. 6833 National Flood Insurance Program Extension **Issues lobbied without specific bill number: Climate Change Related Issues and Gaps in Data

Client expense: $1,380,000 · Firm income: Not reported

Government targets: Federal Emergency Management Agency (FEMA), HOUSE OF REPRESENTATIVES, SENATE, Treasury, Dept of, White House Office

H.R. 1251, Cyber Diplomacy Act of 2021 H.R. 2225, National Science Foundation for the Future Act H.R. 2471, Consolidated Appropriations Act, 2022, including provisions relating to Division Y, Cyber Incident Reporting for Critical Infrastructure Act of 2022 H.R. 2795, DHS Blue Campaign Enhancement Act H.R. 3388, Protecting Critical Infrastructure Act of 2021 H.R. 3593, Department of Energy Science for the Future Act H.R. 4431, Department of Homeland Security Appropriations Act, 2022 H.R. 4611, DHS Software Supply Chain Risk Management Act of 2021 H.R. 5440, Cyber Incident Reporting for Critical Infrastructure Act of 2021 H.R. 6497, Federal Information Security Modernization Act of 2022 H.R. 7900/S. 4543, National Defense Authorization Act for Fiscal Year 2023 H.R. 8152, American Data Privacy and Protection (ADPPA) Act H.R. 8257/S. 4678, Department of Homeland Security Appropriations Act, 2023 S. 1260, United States Innovation and Competition Act of 2021 S. 1316, Cyber Response and Recovery Act of 2021 S. 1350, National Risk Management Act of 2021 S. 2407, Cyber Incident Notification Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021 S. 2875, Cyber Incident Reporting Act of 2021 S. 2902, A bill to modernize Federal information security management, and for other purposes S. 2991, Countering Human Trafficking Act of 2021 S. 3290, National MEP Supply Chain Database Act of 2021 S. 3600, Strengthening American Cybersecurity Act of 2022 Draft legislation titled USA Telecom Act Draft legislation titled Data Security and Breach Notification Act of 2021 Draft legislation titled Cyber SAFETY Act Draft legislation titled National Data Breach Notification Act Draft legislation titled Ransomware Exposure Act Draft legislation titled Securing Systemically Important Critical Infrastructure Act Various issues relating to cybersecurity protections; cyber incident disclosure, notification, and reporting of breaches, hacks, and other security incidents, including federal preemption and liability protections; Internet of Things (IoT) security and core capability baselines; deepening business and governmental operational collaboration against foreign cyber threats; increased cybersecurity risk during the coronavirus pandemic; information sharing between the public and private sectors; data breach notification; data breaches, including the 2020 SolarWinds, the 2021 Microsoft Exchange server and the 2021 Colonial Pipeline; The National Cyber Directorate; continuation of the National Space Council; Executive Order 14017 on Securing Americas Critical Supply Chains; Executive Order 13984, Taking Additional Steps to Address the National Emergency with Respect to Significant Malicious Cyber-Enabled Activities; extension of section 3610 of the CARES Act (P.L. 116-134); implementation of National Defense Authorization Act, (P.L. 116-92); FY2022 Cybersecurity and Infrastructure Security (CISA) Appropriations; provisions on printed circuit boards in the FY2022 National Defense Authorization Act; Cyber Threat Information Collaboration Environment (CTICE) program; U.S. Department of Homeland Securitys SAFETY Act Program; DoD Cybersecurity Maturity Model Certification (CMMC) 2.0; NIST request for information, Evaluating and Improving NIST Cybersecurity Resources: The Cybersecurity Framework and Cybersecurity Supply Chain Risk Management; NIST comment request, Consumer Cybersecurity Labeling Pilots: The Approach and Contributions; section 889, National Defense Authorization Act for FY 2019 (P.L. 115-232); SEC proposed rules, Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure; legislative proposal in support of the National Security Industrial Base (NSIB)/Defense Industrial Base (DIB) workforce; draft White House national cybersecurity strategy; cross-sector cyber Performance goals (CPGs) common baseline: controls list

Client expense: $23,940,000 · Firm income: Not reported

Government targets: Bureau of Industry and Security (BIS), Central Intelligence Agency (CIA), Commerce, Dept of (DOC), Defense, Dept of (DOD), Executive Office of the President (EOP), Federal Aviation Administration (FAA), Federal Bureau of Investigation (FBI), Federal Communications Commission (FCC), Federal Trade Commission (FTC), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Justice, Dept of (DOJ), Natl Economic Council (NEC), Natl Institute of Standards & Technology (NIST), Natl Security Agency (NSA), Natl Security Council (NSC), Natl Telecommunications & Information Administration (NTIA), Office of Management & Budget (OMB), SENATE, Securities & Exchange Commission (SEC), State, Dept of (DOS), Transportation, Dept of (DOT), White House Office

Issues related to electric sector security including cybersecurity, information sharing and protections, incident reporting, existing standards, postures, supply chains, threat environment, procedures, roles, responsibilities and authorities. S. 3600 Strengthening American Cybersecurity Act of 2022 H.R. 5491 Securing Systemically Important Critical Infrastructure Act S. 2491 Defense of United States Infrastructure Act of 2021

Client expense: $970,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 1833, The DHS Industrial Control Systems Enhancement Act of 2021;  H.R. 5440 Cyber Incident Reporting for Critical Infrastructure Act; H.R. 3078 Pipeline and LNG Facility Cybersecurity Act H.R. 3243 Pipeline Security Act (H.R. 3243) S. 398, Linemen Legacy Act; Issues related to cyber incident reporting and data breach notifications; Pipeline Security/ Cybersecurity: Guidance on CyberBreach Notification Legislation proposals. S. 1316, Cyber Response and Recovery Act of 2021; S.73, American Drone Security Act of 2021; S. 1350, National Risk Management Act; H.R. 3599 / S. 1097, Federal Rotational Cyber Workforce Program Act; H.R. 4350 National Defense Authorization Act (NDAA) Cyber incident reporting and the impact on critical infrastructure and gas utilities; S. 2269, Protect American Power Infrastructure Act; S. 2407 Cyber Incident Notification Act of 2021; S.2491- Defense of United States Infrastructure Act of 2021 S. 2875 Cyber Incident Reporting Act of 2021; Pipeline Security Act (H.R. 3243): This measure codifies TSAs Pipeline Security Section and clarifies TSAs statutory mandate to protect pipeline infrastructure; Pipeline and LNG Facility Cybersecurity Act (H.R. 3078): Legislation to strengthen the Department of Energys ability to respond to physical and cybersecurity threats to pipelines and LNG facilities; Draft Cyber Incident Notification Act of 2021: Legislation that would institute a mandatory cyber incident reporting scheme for designated critical infrastructure entities; Draft Systemically Important Critical Infrastructure Security Legislation: Legislation that would alter how the federal government treats critical infrastructure security from a siloed industry perspective to a connected multi-industry perspective; Draft Data Breach Legislation: Legislation aimed at combatting cybersecurity attacks aimed at stealing or otherwise compromising personal financial data; National Draft Data Breach Notification Act Draft; Ransomware Exposure Act (Draft); Pipeline Security Authorities (CISA-TSA) Legislation Draft. Cyber Incident Reporting legislation.

Client expense: $240,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

Issues related to cybersecurity Issues related to Internet of Things device cybersecurity Issues related to the Cyberspace Solarium Commission Report Issues related to the Information and Communications Technology and Services Supply Chain S.1260 United States Innovation and Competition Act of 2021 H.R. 5440 Cyber Incident Reporting for Critical Infrastructure Act of 2021 S. 2407 Cyber Notification Act of 2021 S. 2875 Cyber Incident Reporting Act of 2021 S. 2491 Defense of United States Infrastructure Act of 2021 S. 3600 Strengthening American Cybersecurity Act of 2022

Client expense: $750,000 · Firm income: Not reported

Government targets: Commerce, Dept of (DOC), Federal Communications Commission (FCC), HOUSE OF REPRESENTATIVES, SENATE

S. 3600 - Strengthening American Cybersecurity Act of 2022 H.R. 3076 - Postal Service Reform Act of 2022 H.R. -Information Transparency & Personal Data Control Act H.R.5440 - To amend the Homeland Security Act of 2002 to establish the Cyber Incident Review Office in the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security S.2491 - Defense of United States Infrastructure Act of 2021 H.R. 1280 - George Floyd Justice in Policing Act of 2021 Just and Unifying Solutions to Invigorate Communities Everywhere (JUSTICE) Act Cybersecurity issues including Federal data breach notification legislation HR 8152- American Data Privacy and Protection Act Privacy related policy Impact of Internet of Things technology Policy related to cyber risk insurance Gerontology and aging in place issues Unmanned Aerial Systems (UAS) technology Big Data Policy related to the opioid epidemic Policy related to rising cost of auto repairs Policy related to bipartisan police reform, police misconduct registry and community safety measures Engagement with Consumer Product Safety Commission on emerging risks, standards and training

Client expense: $360,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

S.1494 - A bill to protect the privacy of consumers (Jerry Moran, R-KS) , ALL PROVISIONS H.R.3910 - To amend the Gramm-Leach-Bliley Act to give the Bureau of Consumer Financial Protection rulemaking and enforcement authority over the safeguards rule with respect to data aggregators and other financial institutions, and for other purposes (Stephen Lynch, D-MA-8) , ALL PROVISIONS H.R.3911 - To amend the Gramm-Leach-Bliley Act to establish procedures for disclosures by financial institutions of nonpublic personal information, and for other purposes (Stephen Lynch, D-MA-8) , ALL PROVISIONS H.R.3912 - To amend the Gramm-Leach-Bliley Act to require consumers to opt in before a financial institution may share the nonpublic personal information of the consumer with a nonaffiliated third party, and for other purposes (Stephen Lynch, D-MA-8) , ALL PROVISIONS H.R.4513 - To amend the Small Business Act to provide for the establishment of an enhanced cybersecurity assistance and protections for small businesses, and for other purposes (Byron Donalds, R-FL-19) , ALL PROVISIONS S.2499 - A bill to establish data privacy and data security protections for consumers in the United States (Roger Wicker, R-MS) , ALL PROVISIONS S.2491 - Defense of United States Infrastructure Act of 2021 - To amend the Homeland Security Act of 2002 to establish the National Cyber Resilience Assistance Fund, to improve the ability of the Federal Government to assist in enhancing critical infrastructure cyber resilience, to improve security in the national cyber ecosystem, to address Systemically Important Critical Infrastructure, and for other purposes (Angus King, I-ME) , ALL PROVISIONS S.2875 - A bill to amend the Homeland Security Act of 2002 to establish the Cyber Incident Review Office in the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security, and for other purposes (Gary Peters, D-MI) , ALL PROVISIONS S.2926 - A bill to require certain entities to disclose to the Secretary of Homeland Security ransom payments, and for other purposes (Elizabeth Warren, D-MA) , ALL PROVISIONS H.R.5491 - To authorize the Director of the Cybersecurity and Infrastructure Security Agency to designate certain elements of critical infrastructure as systemically important, and for other purposes (John Katko, R-NY-24) , ALL PROVISIONS S.3065 - A bill to establish national data privacy standards in the United States, and for other purposes (Catherine Cortez Masto, D-NV) , ALL PROVISIONS House Version: H.R.5807 - To establish national data privacy standards in the United States, and for other purposes (Filemon Vela, D-TX-34) , ALL PROVISIONS H.R.5936 - To include requirements relating to ransomware attack deterrence for a covered U.S. financial institution in the Consolidated Appropriations Act, 2021, and for other purposes (Patrick McHenry, R-NC-10) , ALL PROVISIONS S.3195 - A bill to provide consumers with foundational data privacy rights, create strong oversight mechanisms, and establish meaningful enforcement (Maria Cantwell, D-WA) , ALL PROVISIONS S.3335 - A bill to provide liability protection for the sharing of information regarding suspected fraudulent, abusive, or unlawful robocalls, illegally spoofed calls, and other illegal calls by or with the registered consortium that conducts private-led efforts to trace back the origin of suspected unlawful robocalls, and for the receipt of such information by the registered consortium, and for other purposes (John Thune, R-SD) , ALL PROVISIONS S.3600 - Strengthening American Cybersecurity Act of 2022 (Gary Peters, D-MI), ALL PROVISIONS H.R.7449 - To establish prohibitions on the use of automated systems in a discriminatory manner, and for other purposes (Anthony Brown, D-MD-4) , ALL PROVISIONS H.R.7598 - To amend the Pallone-Thune Telephone Robocall Abuse Criminal Enforcement and Deterrence Act to provide liability protection for the sharing of information regarding suspected unlawful robocalls by or with the registered consortium that conducts private-led efforts to trace back the origin of suspected unlawful robocalls, and for the receipt of such information by such registered consortium, and for other purposes (Bob Latta, R-OH-5) , ALL PROVISIONS H.R.8152 - To provide consumers with foundational data privacy rights, create strong oversight mechanisms, and establish meaningful enforcement (Frank Pallone Jr., D-NJ-6) , ALL PROVISIONS S.4701 - To provide cybersecurity support for small business concerns through the small business development center program, and for other purposes. (Maggie Hassan, D-NH), ALL PROVISIONS S.4985 - A bill to amend the Cybersecurity Information Sharing Act of 2015 to include voluntary information sharing of cyber threat indicators among cryptocurrency companies, and for other purposes. (Marsha Blackburn, R-TN), ALL PROVISIONS

Client expense: $600,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

S.2491 - Defense of United States Infrastructure Act of 2021 Access to DOD intel that impacts Climate Change through NDAA

Client expense: Not reported · Firm income: $45,000

Government targets: HOUSE OF REPRESENTATIVES, SENATE

"S. 2491 - Defense of United States Infrastructure Act of 2021, provisions related to cyber incident reporting - monitoring this bill S. 2875, Cyber Incident Reporting Act of 2021 - monitoring this bill S. 3600 - the Strengthening American Cybersecurity Act (SACA) - monitoring this bill H.R. 8152 - American Data Privacy and Protection Act - monitoring this bill"

Client expense: $35,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 1996 Protections for Financial Institutions H.R. 2068 Safe Harbor for Insurers S. 862 Safe Harbor for Insurers **Issues lobbied without specific bill number: Implementation of Risk-Rating 2.0, Climate risk to the insurance industry, COVID-19 personal and commercial insurance response and role, Federal crop insurance program, National Flood Insurance Program, Prospective pandemic protection H.R. 1270 Private Passenger Automobile Insurers H.R. 1512 Climate Crisis **Issues lobbied without specific bill number: Business of insurance, Credit-based insurance underwriting, Commercial vehicle liability insurance **Issues lobbied without specific bill number: Consent Towing H.R. 5823 Pandemic Risk Reinsurance Program S. 2491 National Cyber Resilience Assistance Fund S. 3128 National Flood Insurance Program Reauthorization **Issues lobbied without specific bill number: Financial services climate-related risk **Issues lobbied without specific bill number: Categories for reinsurers H.R. 5802 National Flood Insurance Program Reauthorization H.R. 8036 National Flood Insurance Program Extension

Client expense: $1,620,000 · Firm income: Not reported

Government targets: Federal Emergency Management Agency (FEMA), HOUSE OF REPRESENTATIVES, SENATE, Treasury, Dept of, White House Office

**Issues lobbied without specific bill number: Cybersecurity and ransomware S. 2491 National Cyber Resilience Assistance Fund S. 2875 Cyber Incident Review Office **Issues lobbied without specific bill number: Private sector cyber incident reporting requirements S. 3600 Cyber Incident Reporting Legislation for Critical Infrastructure H.R. 8152 Data Privacy Rights and Oversight Mechanisms

Client expense: $1,620,000 · Firm income: Not reported

Government targets: Federal Bureau of Investigation (FBI), HOUSE OF REPRESENTATIVES, SENATE, Transportation, Dept of (DOT), White House Office

Issues related to electric sector security including cybersecurity, information sharing and protections, incident reporting, existing standards, postures, supply chains, threat environment, procedures, roles, responsibilities and authorities. S. 3600 Strengthening American Cybersecurity Act of 2022 H.R. 5491 Securing Systemically Important Critical Infrastructure Act S. 2491 Defense of United States Infrastructure Act of 2021

Client expense: $1,080,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

S. 3600 - Strengthening American Cybersecurity Act of 2022 H.R. 3076 - Postal Service Reform Act of 2022 H.R. -Information Transparency & Personal Data Control Act H.R.5440 - To amend the Homeland Security Act of 2002 to establish the Cyber Incident Review Office in the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security S.2491 - Defense of United States Infrastructure Act of 2021 H.R. 1280 - George Floyd Justice in Policing Act of 2021 Just and Unifying Solutions to Invigorate Communities Everywhere (JUSTICE) Act Cybersecurity issues including Federal data breach notification legislation HR 8152- American Data Privacy and Protection Act Privacy related policy Impact of Internet of Things technology Policy related to cyber risk insurance Gerontology and aging in place issues Unmanned Aerial Systems (UAS) technology Big Data Policy related to the opioid epidemic Policy related to rising cost of auto repairs Policy related to bipartisan police reform, police misconduct registry and community safety measures

Client expense: $450,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 1316, Cyber Response and Recovery Act of 2021; H.R. 3243, Pipeline Security Act; H.R. 3078, Pipeline and LNG Facility Cybersecurity Act; H.R. 4350, National Defense Authorization Act (NDAA); H.R. 5440, Cyber Incident Reporting for Critical Infrastructure Act; S. 73, American Drone Security Act of 2021; S. 2269, Protect American Power Infrastructure Act; S. 2407, Cyber Incident Notification Act of 2021; S. 2491, the Defense of U.S. Infrastructure Act of 2021; S. 2875, Cyber Incident Reporting Act of 2021; Draft Systemically Important Critical Infrastructure Security legislation; Draft Data Breach legislation; Draft Ransomware Exposure legislation; Draft pipeline security authorities (CISA-TSA) legislation.

Client expense: $360,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

Issues related to cybersecurity Issues related to Internet of Things device cybersecurity Issues related to the Cyberspace Solarium Commission Report Issues related to the Information and Communications Technology and Services Supply Chain S.1260 United States Innovation and Competition Act of 2021 H.R. 5440 Cyber Incident Reporting for Critical Infrastructure Act of 2021 S. 2407 Cyber Notification Act of 2021 S. 2875 Cyber Incident Reporting Act of 2021 S. 2491 Defense of United States Infrastructure Act of 2021 S. 3600 Strengthening American Cybersecurity Act of 2022

Client expense: $1,210,000 · Firm income: Not reported

Government targets: Commerce, Dept of (DOC), Federal Communications Commission (FCC), HOUSE OF REPRESENTATIVES, SENATE

H.R. 1996 Protections for Financial Institutions H.R. 2068 Safe Harbor for Insurers S. 862 Safe Harbor for Insurers **Issues lobbied without specific bill number: Implementation of Risk-Rating 2.0, Climate risk to the insurance industry, COVID-19 personal and commercial insurance response and role, Federal crop insurance program, National Flood Insurance Program, Prospective pandemic protection H.R. 1270 Private Passenger Automobile Insurers H.R. 1512 Climate Crisis **Issues lobbied without specific bill number: Business of insurance, Credit-based insurance underwriting, Commercial vehicle liability insurance **Issues lobbied without specific bill number: Consent Towing H.R. 5823 Pandemic Risk Reinsurance Program S. 2491 National Cyber Resilience Assistance Fund S. 3128 National Flood Insurance Program Reauthorization **Issues lobbied without specific bill number: Financial services climate-related risk **Issues lobbied without specific bill number: Categories for reinsurers H.R. 5802 National Flood Insurance Program Reauthorization H.R. 8036 National Flood Insurance Program Extension

Client expense: Not reported · Firm income: $42,000

Government targets: HOUSE OF REPRESENTATIVES, SENATE

**Issues lobbied without specific bill number: Cybersecurity and ransomware S. 2491 National Cyber Resilience Assistance Fund S. 2875 Cyber Incident Review Office **Issues lobbied without specific bill number: Private sector cyber incident reporting requirements S. 3600 Cyber Incident Reporting Legislation for Critical Infrastructure H.R. 8152 Data Privacy Rights and Oversight Mechanisms

Client expense: Not reported · Firm income: $42,000

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 1833, The DHS Industrial Control Systems Enhancement Act of 2021;  H.R. 5440 Cyber Incident Reporting for Critical Infrastructure Act; S. 398, Linemen Legacy Act; Issues related to cyber incident reporting and data breach notifications; Pipeline Security/ Cybersecurity: Guidance on CyberBreach Notification Legislation proposals. S. 1316, Cyber Response and Recovery Act of 2021; S.73, American Drone Security Act of 2021; S. 1350, National Risk Management Act; H.R. 3599 / S. 1097, Federal Rotational Cyber Workforce Program Act; H.R. 4350 National Defense Authorization Act (NDAA); S. 2269, Protect American Power Infrastructure Act; S. 2407 Cyber Incident Notification Act of 2021; S.2491- Defense of United States Infrastructure Act of 2021; S. 2875 Cyber Incident Reporting Act of 2021; H.R. 3243, Pipeline Security Act; H.R. 3078, Pipeline and LNG Facility Cybersecurity Act; Draft Cyber Incident Notification Act of 2021; Draft Systemically Important Critical Infrastructure Security Legislation; Draft Data Breach Legislation; National Draft Data Breach Notification Act Draft; Ransomware Exposure Act (Draft); Pipeline Security Authorities (CISA-TSA) Legislation Draft. Cyber Incident Reporting legislation. Counter-UAS issues generally

Client expense: $200,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

S.1494 - A bill to protect the privacy of consumers (Jerry Moran, R-KS) , ALL PROVISIONS H.R.3910 - To amend the Gramm-Leach-Bliley Act to give the Bureau of Consumer Financial Protection rulemaking and enforcement authority over the safeguards rule with respect to data aggregators and other financial institutions, and for other purposes (Stephen Lynch, D-MA-8) , ALL PROVISIONS H.R.3911 - To amend the Gramm-Leach-Bliley Act to establish procedures for disclosures by financial institutions of nonpublic personal information, and for other purposes (Stephen Lynch, D-MA-8) , ALL PROVISIONS H.R.3912 - To amend the Gramm-Leach-Bliley Act to require consumers to opt in before a financial institution may share the nonpublic personal information of the consumer with a nonaffiliated third party, and for other purposes (Stephen Lynch, D-MA-8) , ALL PROVISIONS H.R.4513 - To amend the Small Business Act to provide for the establishment of an enhanced cybersecurity assistance and protections for small businesses, and for other purposes (Byron Donalds, R-FL-19) , ALL PROVISIONS S.2499 - A bill to establish data privacy and data security protections for consumers in the United States (Roger Wicker, R-MS) , ALL PROVISIONS S.2491 - Defense of United States Infrastructure Act of 2021 - To amend the Homeland Security Act of 2002 to establish the National Cyber Resilience Assistance Fund, to improve the ability of the Federal Government to assist in enhancing critical infrastructure cyber resilience, to improve security in the national cyber ecosystem, to address Systemically Important Critical Infrastructure, and for other purposes (Angus King, I-ME) , ALL PROVISIONS S.2875 - A bill to amend the Homeland Security Act of 2002 to establish the Cyber Incident Review Office in the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security, and for other purposes (Gary Peters, D-MI) , ALL PROVISIONS S.2926 - A bill to require certain entities to disclose to the Secretary of Homeland Security ransom payments, and for other purposes (Elizabeth Warren, D-MA) , ALL PROVISIONS H.R.5491 - To authorize the Director of the Cybersecurity and Infrastructure Security Agency to designate certain elements of critical infrastructure as systemically important, and for other purposes (John Katko, R-NY-24) , ALL PROVISIONS S.3065 - A bill to establish national data privacy standards in the United States, and for other purposes (Catherine Cortez Masto, D-NV) , ALL PROVISIONS House Version: H.R.5807 - To establish national data privacy standards in the United States, and for other purposes (Filemon Vela, D-TX-34) , ALL PROVISIONS H.R.5936 - To include requirements relating to ransomware attack deterrence for a covered U.S. financial institution in the Consolidated Appropriations Act, 2021, and for other purposes (Patrick McHenry, R-NC-10) , ALL PROVISIONS S.3195 - A bill to provide consumers with foundational data privacy rights, create strong oversight mechanisms, and establish meaningful enforcement (Maria Cantwell, D-WA) , ALL PROVISIONS S.3335 - A bill to provide liability protection for the sharing of information regarding suspected fraudulent, abusive, or unlawful robocalls, illegally spoofed calls, and other illegal calls by or with the registered consortium that conducts private-led efforts to trace back the origin of suspected unlawful robocalls, and for the receipt of such information by the registered consortium, and for other purposes (John Thune, R-SD) , ALL PROVISIONS S.3600 - Strengthening American Cybersecurity Act of 2022 (Gary Peters, D-MI), ALL PROVISIONS H.R.7449 - To establish prohibitions on the use of automated systems in a discriminatory manner, and for other purposes (Anthony Brown, D-MD-4) , ALL PROVISIONS H.R.7598 - To amend the Pallone-Thune Telephone Robocall Abuse Criminal Enforcement and Deterrence Act to provide liability protection for the sharing of information regarding suspected unlawful robocalls by or with the registered consortium that conducts private-led efforts to trace back the origin of suspected unlawful robocalls, and for the receipt of such information by such registered consortium, and for other purposes (Bob Latta, R-OH-5) , ALL PROVISIONS H.R.8152 - To provide consumers with foundational data privacy rights, create strong oversight mechanisms, and establish meaningful enforcement (Frank Pallone Jr., D-NJ-6) , ALL PROVISIONS

Client expense: $590,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 1251, Cyber Diplomacy Act of 2021 H.R. 2225, National Science Foundation for the Future Act H.R. 2471, Consolidated Appropriations Act, 2022, including provisions relating to Division Y, Cyber Incident Reporting for Critical Infrastructure Act of 2022 H.R. 2795, DHS Blue Campaign Enhancement Act H.R. 3388, Protecting Critical Infrastructure Act of 2021 H.R. 3593, Department of Energy Science for the Future Act H.R. 4350/S. 1605, National Defense Authorization Act for Fiscal Year 2022 H.R. 4431, Department of Homeland Security Appropriations Act, 2022 H.R. 4521, America Creating Opportunities for Manufacturing, Pre-Eminence in Technology, and Economic Strength (America COMPETES) Act of 2022 H.R. 4611, DHS Software Supply Chain Risk Management Act of 2021 H.R. 5440, Cyber Incident Reporting for Critical Infrastructure Act of 2021 H.R. 6497, Federal Information Security Modernization Act of 2022 H.R. 7900, National Defense Authorization Act for Fiscal Year 2023 H.R. 8152, American Data Privacy and Protection (ADPPA) Act S. 1260, United States Innovation and Competition Act of 2021 S. 1316, Cyber Response and Recovery Act of 2021 S. 1350, National Risk Management Act of 2021 S. 2407, Cyber Incident Notification Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021 S. 2875, Cyber Incident Reporting Act of 2021 S. 2902, A bill to modernize Federal information security management, and for other purposes S. 2991, Countering Human Trafficking Act of 2021 S. 3290, National MEP Supply Chain Database Act of 2021 S. 3600, Strengthening American Cybersecurity Act of 2022 S. 3894, Advancing Cybersecurity Through Continuous Diagnostics and Mitigation Act Draft legislation titled USA Telecom Act Draft legislation titled Data Security and Breach Notification Act of 2021 Draft legislation titled Cyber SAFETY Act Draft legislation titled National Data Breach Notification Act Draft legislation titled Ransomware Exposure Act Draft legislation titled Securing Systemically Important Critical Infrastructure Act Draft legislation titled Making appropriations for the Department of Homeland Security for the fiscal year ending September 30, 2023, and for other purposes Draft legislation titled Making appropriations for the Departments of Commerce and Justice, Science, and Related Agencies for the fiscal year ending September 30, 2023, and for other purposes Various issues relating to cybersecurity protections; cyber incident disclosure, notification, and reporting of breaches, hacks, and other security incidents, including federal preemption and liability protections; Internet of Things (IoT) security and core capability baselines; deepening business and governmental operational collaboration against foreign cyber threats; increased cybersecurity risk during the coronavirus pandemic; information sharing between the public and private sectors; data breach notification; data breaches, including the 2020 SolarWinds, the 2021 Microsoft Exchange server and the 2021 Colonial Pipeline; The National Cyber Directorate; continuation of the National Space Council; extension of Section 3610 of the CARES Act (P.L. 116-134); implementation and funding for the CHIPS for America Act, included as part of the FY 2021 National Defense Authorization Act (P.L. 116-283); Executive Order 14017 on Securing Americas Critical Supply Chains; Executive Order 13984, Taking Additional Steps to Address the National Emergency with Respect to Significant Malicious Cyber-Enabled Activities; FY2022 Cybersecurity and Infrastructure Security (CISA) Appropriations; provisions on printed circuit boards in the FY2022 National Defense Authorization Act; Cyber Threat Information Collaboration Environment (CTICE) program; U.S. Department of Homeland Securitys SAFETY Act Program; DoD Cybersecurity Maturity Model Certification (CMMC) 2.0; NIST request for information, Evaluating and Improving NIST Cybersecurity Resources: The Cybersecurity Framework and Cybersecurity Supply Chain Risk Management; Executive Order 14028, NIST comment request, Consumer Cybersecurity Labeling Pilots: The Approach and Contributions; section 889, National Defense Authorization Act for FY 2019 (P.L. 115-232); SEC proposed rules, Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure; support anti-terrorism by Fostering Effective Technologies Act of 2002 (SAFETY Act); legislative proposal in support of the National Security Industrial Base (NSIB)/Defense Industrial Base (DIB) workforce; the Continuous Diagnostics and Mitigation (CDM) Program at the Cybersecurity and Infrastructure Security Agency (CISA)

Client expense: $15,800,000 · Firm income: Not reported

Government targets: Bureau of Industry and Security (BIS), Central Intelligence Agency (CIA), Commerce, Dept of (DOC), Defense, Dept of (DOD), Executive Office of the President (EOP), Federal Aviation Administration (FAA), Federal Bureau of Investigation (FBI), Federal Communications Commission (FCC), Federal Trade Commission (FTC), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Justice, Dept of (DOJ), Natl Economic Council (NEC), Natl Institute of Standards & Technology (NIST), Natl Security Agency (NSA), Natl Security Council (NSC), Natl Telecommunications & Information Administration (NTIA), Office of Management & Budget (OMB), SENATE, Securities & Exchange Commission (SEC), State, Dept of (DOS), Transportation, Dept of (DOT), White House Office

"S. 2491 - Defense of United States Infrastructure Act of 2021, provisions related to cyber incident reporting - monitoring this bill S. 2875, Cyber Incident Reporting Act of 2021 - monitoring this bill S. 3600 - the Strengthening American Cybersecurity Act (SACA) - monitoring this bill H.R. 8152 - American Data Privacy and Protection Act - monitoring this bill"

Client expense: $10,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 481, Flood Resiliency and Taxpayer Savings Act of 2021. H.R. 1602, Eliminate Barriers to Innovation Act of 2021 H.R. 1816, To require the Federal Trade Commission to promulgate regulations related to sensitive personal information, and for other purposes H.R. 2471, Consolidated Appropriations Act, 2022, including provisions related to the Cyber Incident Reporting for Critical Infrastructure Act of 2022 H.R. 2687, To increase the minimum levels of financial responsibility for transporting property, and to index future increases to changes in inflation relating to medical care H.R. 3138, The State and Local Cybersecurity Improvement Act H.R. 3223, CISA Cyber Exercise Act H.R. 3264, Domains Critical to Homeland Security Act H.R. 3797, (116th CONGRESS), Medical Marijuana Research Act of 2019 H.R. 4350/S. 2792, National Defense Authorization Act for Fiscal Year 2022, including provisions relating to cybersecurity and incident reporting H.R. 5823, Pandemic Risk Insurance Act of 2021 H.R. 6032, (114th CONGRESS), Data Breach Insurance Act H.R. 6151, Highway Accident Fairness Act of 2021, including provisions related to third-part litigation funding disclosures H.R. 6359, (116th CONGRESS), Promoting Infrastructure by Protecting Our Subcontractors and Taxpayers Act. H.R. 6395/S. 4049, (116th CONGRESS), National Defense Authorization Act for Fiscal Year 2021, including provisions relating to cybersecurity H.R. 8152, American Data Privacy and Protection Act S. 224, Promoting Digital Privacy Technologies Act S. 2407, Cyber Incident Notification Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021; provisions relating to Sec. 302, Bureau of Cybersecurity Statistics S. 2875, Cyber Incident Reporting Act of 2021 Monitor H.R. 1996 / S. 910, SAFE Banking Act. Discussions regarding pandemic insurance, including H.R. 7011, the Pandemic Risk Insurance Act of 2020; H.R. 6494, the Business Interruption Insurance Coverage Act of 2020. Monitor and participate in discussions regarding data privacy and data breach proposals. General discussion around development of an objective measure of marijuana impairment. General discussions about liability exposures and the COVID-19 pandemic. Legislation and proposals regarding natural catastrophe related policies. Discussions regarding the insurability of cyber exposures. General discussions related to international capital standards. Discussions regarding autonomous vehicles. Legislation and proposals related to the national Flood Insurance Program including a focus on pre-event mitigation and long-term resilience. Consumer Protection Act, specifically, provisions on risk, insurance. Oversight (Federal Insurance Office), and potential CFPB activities related to P&C insurance. General discussions on Commercial Insurance regulation. General issues related to resilience and mitigation, as related to P&C insurance. General discussions related to the Federal Insurance Office. General discussions related to international capital standards. General discussions on global insurers in the marketplace. General discussions on the International Association of Insurance Supervisors. General discussions on innovation in the insurance industry. General discussions on retroactive active changes to business interruption insurance. General discussions on flood resilience and the U.S. mortgage market. General discussions on relating to supply chain resiliency vis-a-vis the COVID-19 pandemic and other disruptions. Discussions regarding the Cyberspace Solarium Commission Report. General discussions related to Section 230 of the Communications Decency Act (CDA) of 1996. General discussions related to OFAC advisory related to ransomware payments. General discussions related to cybersecurity assessment frameworks from DOD (NIST sp 800-171 and CMMC). General discussions related to artificial intelligence (AI) and machine learning General discussions related to Executive Order 14028, Improving the Nation's Cybersecurity General discussions related to the Driver's Privacy Protection Act

Client expense: $470,000 · Firm income: Not reported

Government targets: Commerce, Dept of (DOC), Executive Office of the President (EOP), Federal Housing Finance Agency (FHFA), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Housing & Urban Development, Dept of (HUD), Natl Security Council (NSC), SENATE, State, Dept of (DOS), Treasury, Dept of

S. 4136, Water Resources Development Act of 2022 H.R. 7776, Water Resources Development Act of 2022 S. 975, Securing Americas Clean Fuels Infrastructure Act S. 799, SCALE Act H.R. 786, Supporting State and Local Leaders Act S. 262, Supporting State and Local Leaders Act H.R. 940, Clearing Lines Along Electrical At-Risk Act S. 1350, National Risk Management Cycle Act S. 1432, POWER ON Act of 2021 H.R. 2885, POWER ON Act of 2021 S. 1829, Carbon Capture Improvement Act H.R. 3078, Pipeline and LNG Facility Cybersecurity Preparedness Act H.R. 3119, Energy Emergency Leadership Act H.R. 2854, Utility Resilience and Reliability Act H.R. 2931, Enhancing Grid Security through Public-Private Partnerships Act H.R. 2928, Cyber Sense Act H.R. 2678, Interregional Transmission Planning Improvement Act of 2021 S. 1015, Interregional Transmission Planning Improvement Act of 2021 S. 1400, PROTECT Act of 2021 H.R. 4556, Energy Price Act Implementation of the Infrastructure Investment and Jobs Act S. 2491, Defense of United States Infrastructure Act S. 2875, the Cyber Incident Reporting Act of 2021 S. 2085, Save Our Future Act H.R. 2307, Energy Innovation and Carbon Dividend Act Issues relating to hydropower

Client expense: $60,000 · Firm income: Not reported

Government targets: Environmental Protection Agency (EPA), HOUSE OF REPRESENTATIVES, SENATE

Issues relating to data security and data breach requirements and reporting. S. 2491, the Defense of U.S. Infrastructure Act, relating to section 302 and the creation of a Bureau of Cyber Statistics (BCS). H.R. 8152, The American Data Privacy and Protection Act, all provisions.

Client expense: Not reported · Firm income: $23,000

Government targets: HOUSE OF REPRESENTATIVES, SENATE

S. 975, Securing Americas Clean Fuels Infrastructure Act S. 799, SCALE Act H.R. 786, Supporting State and Local Leaders Act S. 262, Supporting State and Local Leaders Act H.R. 940, Clearing Lines Along Electrical At-Risk Act S. 1350, National Risk Management Cycle Act S. 1432, POWER ON Act of 2021 H.R. 2885, POWER ON Act of 2021 S. 1829, Carbon Capture Improvement Act H.R. 3078, Pipeline and LNG Facility Cybersecurity Preparedness Act H.R. 3119, Energy Emergency Leadership Act H.R. 2854, Utility Resilience and Reliability Act H.R. 2931, Enhancing Grid Security through Public-Private Partnerships Act H.R. 2928, Cyber Sense Act H.R. 2678, Interregional Transmission Planning Improvement Act of 2021 S. 1015, Interregional Transmission Planning Improvement Act of 2021 S. 1400, PROTECT Act of 2021 H.R. 4556, Energy Price Act Implementation of the Infrastructure Investment and Jobs Act S. 2491, Defense of United States Infrastructure Act S. 2875, the Cyber Incident Reporting Act of 2021 S. 2085, Save Our Future Act H.R. 2307, Energy Innovation and Carbon Dividend Act S. 4136, Water Resources Development Act of 2022 H.R. 7776, Water Resources Development Act of 2022

Client expense: Not reported · Firm income: $12,000

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 4549 Energy and Water Development Appropriations Act of 2022 H.R. 940, Clearing Lines Along Electrical At-Risk Act H.R. 3078, Pipeline and LNG Facility Cybersecurity Preparedness Act H.R. 3119, Energy Emergency Leadership Act H.R. 2854, Utility Resilience and Reliability Act H.R. 2931, Enhancing Grid Security through Public-Private Partnerships Act H.R. 2028, Cyber Sense Act S. 1400, PROTECT Act of 2021 H.R. 4556, Energy Price Act Issues related to the implementation of the Infrastructure Investment and Jobs Act S. 2491, Defense of United States Infrastructure Act S. 2875, the Cyber Incident Reporting Act of 2021 S. 2085, Save Our Future Act H.R. 2307, Energy Innovation and Carbon Dividend Act S. 4136, Water Resources Development Act of 2022 H.R. 7776, Water Resources Development Act of 2022 Issues relating to the Bonneville Power Administration

Client expense: Not reported · Firm income: $50,000

Government targets: Energy, Dept of, HOUSE OF REPRESENTATIVES, SENATE