Cybersecurity: Legislation and Hearings, 115th-116th Congresses

Changes from March 20, 2019 to May 2, 2019

This page shows textual changes in the document between the two versions indicated in the dates above. Textual matter removed in the later version is indicated with ~~red strikethrough~~ and textual matter added in the later version is indicated with blue.

Cybersecurity: Legislation and Hearings, 115^th-116^th Congresses

Updated ~~March 20~~May 2, 2019 (R43317)
Jump to Main Text of Report

~~Legislative Action~~

Cybersecurity Legislation and Hearings in the 116^thand 115^th Congresses

116^th Congress: Legislative Action
115^th Congress: Legislative Action
CRS Products: Legislation

~~Legislation in the 116^thand 115^th Congresses~~

Hearings in the 116^th Congress
Hearings in the 115^th Congress

Tables

Table 1. 116^th Congress Legislation: House
Table 2. 116^th Congress Legislation: Senate
Table 3. 115^th Congress Legislation: House
Table 4. 115^th Congress Legislation: Senate
Table 5. 116^th Congress, House Hearings by Date
Table 6. 116^th Congress, House Hearings by Committee
Table 7. 116^th Congress, Senate Hearings by Date
Table 8. 116^th Congress, Senate Hearings by Committee
Table 9. 115^th Congress, House Hearings by Date
Table 10. 115^th Congress, House Hearings by Committee
Table 11. 115^th Congress, Senate Hearings by Date
Table 12. 115^th Congress, Senate Hearings by Committee

Summary

Most major cybersecurity legislative provisions were enacted prior to 2002, despite many recommendations having been made over the past decade. More recently, in the 115^th and 116^th Congresses, cybersecurity legislation has received either committee or floor action or final passage, and ~~various hearings have been held~~both chambers have held multiple hearings.

In the 116^th Congress, ~~five~~a number of House and ~~four~~ Senate bills have received ~~committee consideration. Seven Senate hearings~~ ~~and nine House hearings have been held~~consideration, and hearings have been held by committees in each chamber.

In the 115^th Congress, 31 bills received some type of action (committee consideration or passage by one or both chambers). Five bills became public law. The House held 54 hearings on cybersecurity issues and the Senate held 40 hearings.

Legislative Action

Most major cybersecurity legislative provisions were enacted prior to 2002, despite many recommendations having been made over the past decade. This report covers legislation that has received either committee or floor action or final passage and hearings held in the 115^th and 116^th Congresses.

116^th Congress: Legislative Action

~~Three House bills and three Senate bills have received committee consideration in the 116^th Congress.~~ Cybersecurity Legislation and Hearings in the 116^thand 115^th Congresses This report provides links to cybersecurity-related bills with some type of committee, floor, or chamber action (i.e., action subsequent to introduction). It also provides links to cybersecurity-related hearings. Table 1 lists House bills in the 116th Congress. Table 2 lists Senate bills in the 116th Congress. Table 3 lists House bills in the 115th Congress. Table 4 lists Senate bills in the 115th Congress. 116^th Congress: Legislative Action In the 116^th Congress, the House has passed four cybersecurity-related bills and the Senate has given varying levels of consideration to four others, passing one. See Table 1 for a list of House bills and Table 2 for a list of Senate bills in the 116^th Congress.

115^th Congress: Legislative Action

Thirty-one bills received committee consideration or passed one or both chambers in the 115^th Congress. Five bills became public laws:

On September 28, 2018, the Department of Energy Research and Innovation Act was signed into law (P.L. 115-246). The law establishes a Department of Energy policy for science and energy research and development programs; reforms National Laboratory management and technology transfer programs; and directs DOE to report to Congress on integrated research programs in cybersecurity and national security, among other issues.

On August 13, 2018, the John S. McCain National Defense Authorization Act for Fiscal Year 2019 was signed into law (P.L. 115-232). The bill authorizes appropriations and sets forth policies regarding Department of Defense's military activities, including cybersecurity matters.

On December 12, 2017, the President signed the National Defense Authorization Act for Fiscal Year 2018 (P.L. 115-91), which establishes several cybersecurity efforts and new rules and programs related to information security. These include an official ban on Kaspersky Lab software (Section 1634); definition by the President of "cyberwar" (Section 1633); the Pentagon's reexamination of the ~~department~~Defense Department's internal organizational structure surrounding its cybersecurity -related missions (Section 1641, Section 1644, and others); and the National Science Foundation and Office of Personnel Management's launch of a joint pilot scholarship program aimed at educating and recruiting talent directly out of universities (Section 1649).

On November 21, 2017, the FITARA Enhancement Act of 2017 became law (P.L. 115-88). Among other things, it requires the chief information officer of each covered agency for information technology to conduct a risk management review of those investments that have received a high-risk rating for four consecutive quarters.

On November 2, 2017, Congress passed the Strengthening State and Local Cyber Crime Fighting Act of 2017 (P.L. 115-76), which authorizes a National Computer Forensics Institute within the U.S. Secret Service. The institute ~~will~~is to disseminate information related to the investigation and prevention of cyber and electronic crime and related threats.

CRS Products: Legislation

CRS Report R43831, Cybersecurity Issues and Challenges: In Brief, by Eric A. Fischer
CRS In Focus IF10610, Cybersecurity Legislation in the 113th and 114th Congresses, by Eric A. Fischer
CRS Report R44069, Cybersecurity and Information Sharing: Comparison of H.R. 1560 (PCNA and NCPAA) and S. 754 (CISA), by Eric A. Fischer
CRS Report R43996, Cybersecurity and Information Sharing: Comparison of H.R. 1560 and H.R. 1731 as Passed by the House, by Eric A. Fischer and Stephanie M. Logan
CRS Report R42114, Federal Laws Relating to Cybersecurity: Overview of Major Issues, Current Laws, and Proposed Legislation, by Eric A. Fischer
CRS Report R43821, Legislation to Facilitate Cybersecurity Information Sharing: Economic Analysis, by N. Eric Weiss

Legislation in the 116^thand 115^th Congresses

The following tables list House and Senate bills in the 116^th and 115^th Congresses that received some type of action (i.e., in a committee, on the floor, in a chamber, or signed into law). In the 116^th Congress, three House bills and three Senate bills have received committee consideration. In the 115^th Congress, 31 bills received committee consideration or passed one or both chambers. ~~Table 1~~ ~~lists House bills in the 116^th Congress.~~ ~~Table 2~~ ~~lists Senate bills in the 116^th Congress.~~ ~~Table 3~~ ~~list House bills in the 115^th Congress.~~ ~~Table 4~~ ~~lists Senate bills in the 115^th Congress.~~

Table 1. 116^th Congress Legislation: House

Bill No.	Title	Committee(s)	Date Introduced	Latest Major Action	Date
H.R. 1	For the People Act of 2019	House Administration; Intelligence (Permanent Select); Judiciary; Oversight and Reform; Science, Space, and Technology; Education and Labor; Ways and Means; Financial Services; Ethics; Homeland Security	January 3, 2019	Passed House. Roll Call Vote 118	March 8, 2019
H.R. 247	Federal CIO Authorization Act of 2019	Oversight and Reform	January 4, 2019	Passed House by voice vote	January 15, 2019
H.R. 328	Hack Your State Department Act	Foreign Affairs	January 8, 2019	Passed House. Roll Call Vote 45	January 22, 2019
H.R. 769	Counterterrorism Advisory Board Act of 2019	Homeland Security	January 29, 2019	Passed House. Roll Call Vote 58	January 29, 2019

Source: Compiled by the Congressional Research Service (CRS) from Congress.gov.

Note: This list includes bills ~~with committee action or a House vote.~~

that have been reported out of committee to the floor, received a House vote or passage, or become public law. Given the ambiguities about what cybersecurity means, the list might not include bills that some observers might regard as relating to cybersecurity.

Table 2. 116^th Congress Legislation: Senate

Bill No.	Title	Committee(s)	Date Introduced	Latest Major Action	Date
S. 315	DHS Cyber Hunt and Incident Response Teams Act of 2019	Homeland Security and Governmental Affairs	January 31, 2019	Ordered to be reported with an amendment in the nature of a substitute favorably, with a written report.	February 13, 2019
S. 333	National Cybersecurity Preparedness Consortium Act of 2019	Homeland Security and Governmental Affairs	February 5, 2019	~~Ordered to be reported without amendment favorably~~Reported without amendment favorably, with written report.	~~February 13~~March 12, 2019
S. 406	Federal Rotational Cyber Workforce Program Act of 2019	Homeland Security and Governmental Affairs	February 7, 2019	~~Ordered to be reported without amendment favorably~~ Passed Senate with an amendment by Unanimous Consent	~~February 13~~April 29, 2019
S. 592	Cybersecurity Disclosure Act of 2019	Banking, Housing, and Urban Affairs	February 28, 2019	Hearings held	February 28, 2019

Source: CRS from Congress.gov.

Note: This list includes bills ~~with committee action or a Senate vote.~~

that have been reported out of committee to the floor, received a Senate vote or passage, or become public law. Given the ambiguities about what cybersecurity means, the list might not include bills that some observers might regard as relating to cybersecurity.

Table 3. 115^th Congress Legislation: House

Bill No.	Title	Committee(s)	Date Introduced	Latest Major Action	Date
H.R. 239	Support for Rapid Innovation Act of 2017	Homeland Security	January 4, 2017	Passed House	January 10, 2017
H.R. 387	Email Privacy Act	Judiciary	January 9, 2017	Passed House by voice vote	February 6, 2017
H.R. 584	Cyber Preparedness Act of 2017	Homeland Security	January 17, 2017	Passed House	January 31, 2017
H.R. 589	Department of Energy Research and Innovation Act	Science, Space, and Technology	January 20, 2017	P.L. 115-246	September 28, 2018
H.R. 600	Digital GAP Act	Foreign Affairs	January 23, 2017	Passed House by voice vote	January 24, 2017
H.R. 612	United States-Israel Cybersecurity Cooperation Enhancement Act of 2017	Homeland Security	January 23, 2017	Passed House	January 31, 2017
H.R. 678	Department of Homeland Security Support to Fusion Centers Act of 2017	Homeland Security	January 24, 2017	Passed House by voice vote	January 31, 2017
H.R. 1224	NIST Cybersecurity Framework, Assessment, and Auditing Act of 2017	Science, Space, and Technology	February 27, 2017	Ordered to be reported by Yeas and Nays: 19-14	March 1, 2017
H.R. 1616	Strengthening State and Local Cyber Crime Fighting Act of 2017	Judiciary; Homeland Security	May 16, 2017	P.L. 115-76	November 2, 2017
H.R. 2105	NIST Small Business Cybersecurity Act	Science, Space and Technology	April 20, 2017	Passed House by voice vote	October 11, 2017
H.R. 2227	Modernizing Government Technology Act	Appropriations	April 28, 2017	Passed House by voice vote	May 17, 2017
H.R. 2470	Homeland Threat Assessment Act	Homeland Security	May 16, 2017	Passed House by voice vote	September 12, 2017
H.R. 2810	National Defense Authorization Act for Fiscal Year 2018	Armed Services	June 7, 2017	P.L. 115-91	December 12, 2017
H.R. 2910	Promoting Interagency Coordination for Review of Natural Gas Pipelines Act	Energy and Commerce	June 15, 2017	Passed House. Roll call vote 402	July 19, 2017
H.R. 3050	Enhancing State Energy Security Planning and Emergency Preparedness Act of 2017	Energy and Commerce	June 23, 2017	Passed House by voice vote	July 18, 2017
H.R. 3101	Strengthening Cybersecurity Information Sharing and Coordination in Our Ports Act of 2017	House Homeland Security; House Transportation and Infrastructure; Senate Commerce, Science, and Transportation	June 28, 2017	Passed House by voice vote	October 24, 2017
H.R. 3180	Intelligence Authorization Act for Fiscal Year 2018	Intelligence (Permanent Select)	July 11, 2017	Passed House. Roll call vote 437	July 28, 2017
H.R. 3202	Cyber Vulnerability Disclosure Reporting Act	Homeland Security	July 12, 2017	Passed House by voice vote	January 9, 2018
H.R. 3243	FITARA Enhancement Act of 2017	Oversight and Government Reform	July 14, 2017	P.L. 115-88	November 21, 2017
H.R. 3359	Cybersecurity and Infrastructure Security Agency Act of 2017	Homeland Security; Energy and Commerce; Oversight and Government Reform; Transportation and Infrastructure	July 24, 2017	P.L. 115-278	November 16, 2018
H.R. 3776	Cyber Diplomacy Act of 2017	Foreign Affairs	September 14, 2017	Passed House by voice vote	January 17, 2018
H.R. 5515	John S. McCain National Defense Authorization Act for Fiscal Year 2019	Armed Services	April 13, 2018	P.L. 115-232	August 13, 2018
H.R. 5576	Cyber Deterrence and Response Act of 2018	Foreign Affairs; Financial Services; Oversight and Government Reform; Judiciary	April 18, 2018	Passed House by voice vote	September 5, 2018
H.R. 6443	Advancing Cybersecurity Diagnostics and Mitigation Act	Homeland Security	July 19, 2018	Passed House by voice vote	September 4, 2018
H.R. 6735	Public-Private Cybersecurity Cooperation Act	Homeland Security	September 7, 2018	Passed House by voice vote	September 25, 2018

Source: Compiled by CRS from Congress.gov.

Note: This list includes bills ~~with committee action or a House vote.~~

that were reported out of committee to the floor, received a House vote or passage, or become public law. Given the ambiguities about what cybersecurity means, the list might not include bills that some observers might regard as relating to cybersecurity.

Table 4. 115^th Congress Legislation: Senate

Bill No.	Title	Committee(s)	Date Introduced	Latest Major Action	Date
S. 79	Securing Energy Infrastructure Act	Energy and Natural Resources	January 10, 2017	Subcommittee hearing held	March 28, 2017
S. 88	DIGIT Act	Commerce, Science, and Transportation	January 10, 2017	Passed Senate by voice vote	August 3, 2017
S. 442	National Aeronautics and Space Administration Transition Authorization Act of 2017	Passed without amendment by Unanimous Consent and sent to the House	February 17, 2017	P.L. 115-10	March 21, 2017
S. 770	NIST Small Business Cybersecurity Act	Commerce, Science, and Transportation	March 29, 2017	P.L. 115-236	August 14, 2016
S. 782	PROTECT Our Children Act of 2017	Judiciary	March 30, 2017	P.L. 115-82	November 2, 2017
S. 1281	Hack the Department of Homeland Security Act of 2017	Homeland Security and Governmental Affairs	May 25, 2017	Passed Senate by voice vote	April 17, 2018

Source: Compiled by CRS from Congress.gov.

Note: This list includes bills ~~with committee action or a Senate vote~~.

that were reported out of committee to the floor, received a House vote or passage, or become public law. Given the ambiguities about what cybersecurity means, the list might not include bills that some observers might regard as relating to cybersecurity. Hearings in the 116^th Congress

The following tables list cybersecurity hearings in the 116^th Congress. Table 5 lists House hearings arranged by date in reverse chronological order. Table 6 lists House hearings arranged by committee. Table ~~Table~~ 7 lists Senate hearings arranged by date in reverse chronological order, and Table 8 lists Senate hearings arranged by committee.

CRS identified these hearings as being primarily about cybersecurity or related issues. However, no single, objective selection criterion was available for CRS to use in identifying which hearings to include. The list of hearings should therefore not be considered definitive.

Table document titles are active links to the committee's website for that particular hearing.

Table 5. 116^th Congress, House Hearings by Date

Fiscal Year 2020 Budget Request for U.S. Cyber Command and Operations in Cyberspace

Title	Date	Committee	Subcommittee
FY2020 Budget Hearing - Cybersecurity and Infrastructure Security Agency	May 1, 2019	Appropriations	Homeland Security
[CLOSED] National Security Agency/Cyber Command	March 27, 2019	Appropriations	Defense
Improving Data Security at Consumer Reporting Agencies	March 26, 2019	Oversight and Reform	Economic and Consumer Policy
March 13, 2019	Armed Services	Intelligence and Emerging Threats and Capabilities
Securing Federal Networks and State Election Systems	March 13, 2019	Appropriations	Homeland Security
Securing Our Nation's Chemical Facilities: Building on the Progress of the CFATS Program	March 12, 2019	Homeland Security	Cybersecurity, Infrastructure Protection, and Innovation
Election Security: Ensuring the Integrity of U.S. Election Systems	February 27, 2019	Appropriations
Securing U.S. Surface Transportation from Cyber Attacks	February 26, 2019	Homeland Security	JOINT: Cybersecurity, Infrastructure Protection, and Innovation and Transportation and Maritime Security
Department of Defense Information Technology, Cybersecurity, and Information Assurance	February 26, 2019	Armed Services	Intelligence and Emerging Threats and Capabilities
Field Hearing on Voting Rights and Election Administration in Georgia	February 19, 2019	House Administration
Defending Our Democracy: Building Partnerships to Protect America's Elections (Updated)	February 13, 2019	Homeland Security

Source: Compiled by CRS from Congress.gov.

Table 6. 116^th Congress, House Hearings by Committee

Securing Federal Networks and State Election Systems

March 26, 2019

Committee	Subcommittee	Title	Date
Appropriations	Homeland Security	FY2020 Budget Hearing - Cybersecurity and Infrastructure Security Agency	May 1, 2019
Appropriations	Defense	[CLOSED] National Security Agency/Cyber Command	March 27, 2019
Appropriations	Homeland Security	March 13, 2019
Appropriations		Election Security: Ensuring the Integrity of U.S. Election Systems	February 27, 2019
Armed Services		Fiscal Year 2020 Budget Request for U.S. Cyber Command and Operations in Cyberspace	March 13, 2019
Armed Services	Intelligence and Emerging Threats and Capabilities	Department of Defense Information Technology, Cybersecurity, and Information Assurance	February 26, 2019
Homeland Security		Securing Our Nation's Chemical Facilities: Building on the Progress of the CFATS Program	March 12, 2019
Homeland Security	JOINT: Cybersecurity, Infrastructure Protection, and Innovation and Transportation and Maritime Security	Securing U.S. Surface Transportation from Cyber Attacks	February 26, 2019
Homeland Security		Defending Our Democracy: Building Partnerships to Protect America's Elections (Updated)	February 13, 2019
House Administration		Field Hearing on Voting Rights and Election Administration in Georgia	February 19, 2019	Oversight and Reform	Economic and Consumer Policy	Improving Data Security at Consumer Reporting Agencies

Source: Compiled by CRS from Congress.gov.

Table 7. 116^th Congress, Senate Hearings by Date

Title	Date	Committee	Subcommittee	Strengthening the Cybersecurity of the Internet of Things	April 30, 2019	Commerce, Science and Transportation	Cybersecurity Responsibilities of the Defense Industrial Base	March 26, 2019	Armed Services
Cyber Crime: An Existential Threat to Small Business	March 13, 2019	Small Business and Entrepreneurship
Examining Private Sector Data Breaches	March 7, 2019	Homeland Security and Governmental Affairs Committee
Roundtable: Perspectives on Protecting the Electric Grid from an Electromagnetic Pulse or Geomagnetic Disturbance	February 27, 2019	Homeland Security and Governmental Affairs Committee
United States Special Operations Command and United States Cyber Command	February 14, 2019	Armed Services
Hearing to Consider the Status and Outlook for Cybersecurity Efforts in the Energy Industry	February 14, 2019	Energy & Natural Resources
CLOSED: Cyber Operations to Defend the Midterm Elections	February 13, 2019	Armed Services
Defense Department Cybersecurity Policies and Architecture	January 29, 2019	Armed Services	Investigations

Source: Compiled by CRS from Congress.gov.

Table 8. 116^th Congress, Senate Hearings by Committee

Energy & Natural Resources

Committee	Subcommittee	Title	Date
Armed Services		Cybersecurity Responsibilities of the Defense Industrial Base	March 26, 2019	Armed Services	United States Special Operations Command and United States Cyber Command	February 14, 2019
Armed Services		CLOSED: Cyber Operations to Defend the Midterm Elections	February 13, 2019
Armed Services		Defense Department Cybersecurity Policies and Architecture	January 29, 2019
Commerce, Science and Transportation	Strengthening the Cybersecurity of the Internet of Things	April 30, 2019		Hearing to Consider the Status and Outlook for Cybersecurity Efforts in the Energy Industry	February 14, 2019
Homeland Security and Governmental Affairs Committee	Investigations	Examining Private Sector Data Breaches	March 7, 2019
Homeland Security and Governmental Affairs Committee		Roundtable: Perspectives on Protecting the Electric Grid from an Electromagnetic Pulse or Geomagnetic Disturbance	February 27, 2019
Small Business and Entrepreneurship		Cyber Crime: An Existential Threat to Small Business	March 13, 2019

Source: Compiled by CRS from Congress.gov.

Hearings in the 115^th Congress

Table 9 lists House hearings arranged by date in reverse chronological order, and Table 10 lists House hearings arranged by committee. Table 11 lists Senate hearings by date. Table 12 lists Senate hearings arranged by committee.

In the tables, the document titles are active links to the committee's website for that particular hearing.

Table 9. 115^th Congress, House Hearings by Date

Title	Date	Committee	Subcommittee
Interagency Cyber Cooperation: Roles, Responsibilities and Authorities of the Department of Defense & the Department of Homeland Security	November 14, 2018	Armed Services	Cybersecurity and Infrastructure Protection
DOE Modernization: The Office of Cybersecurity, Energy Security, and Emergency Response	September 27, 2018	Energy and Commerce
Understanding Cybersecurity Threats to America''s Aviation Sector	September 6, 2018	Homeland Security	Cybersecurity and Infrastructure Protection; Transportation and Protective Security (Joint Hearing)
Assessing the State of Federal Cybersecurity Risk Determination	July 25, 2018	Homeland Security	Cybersecurity and Infrastructure Protection
GAO High Risk Focus: Cybersecurity	July 25, 2018	Oversight and Government Reform	Government Operations; Information Technology (Joint Hearing)
Cyber-securing the Vote: Ensuring the Integrity of the U.S. Election System	July 24, 2018	Oversight and Government Reform
DHS's Progress in Securing Election Systems and Other Critical Infrastructure	July 11, 2018	Homeland Security
Examination of the GAO Audit Series of HHS Cybersecurity	June 20, 2018	Energy and Commerce
Cyber Operations Today: Preparing for ~~21st~~21^st Century Challenges in an Information-Enabled Society	April 11, 2018	Armed Services	Emerging Threats and Capabilities
CDM [Continuous Diagnostics and Mitigation]: Government Perspectives on Security and Modernization	March 20, 2018	Oversight and Government Reform	Information Technology
DOE Modernization: Legislation Addressing Cybersecurity and Emergency Response	March 14, 2018	Energy and Commerce
DHS Efforts to Strengthen Its Cybersecurity Workforce	March 8, 2018	Homeland Security	Cybersecurity and Infrastructure Protection; Oversight and Management Efficiency (Joint hearing)
Legislative Proposals to Reform the Current Data Security and Breach Notification Regulatory Regime	March 7, 2018	Financial Services	Financial Institutions and Consumer Credit
A Review and Assessment of the Department of Defense Budget, Strategy, Policy, and Programs for Cyber Operations and U.S. Cyber Command for Fiscal Year 2019	February 28, 2018	Armed Services	Emerging Threats and Capabilities
Beyond Bitcoin: Emerging Applications for Blockchain Technology	February 14, 2018	Science, Space and Technology	Oversight; Research and Technology
U.S. Cyber Diplomacy in an Era of Growing Threats	February 6, 2018	Foreign Affairs
Small Business Information Sharing: Combating Foreign Cyber Threats	January 30, 2018	Small Business
CDM, The Future of Federal Cybersecurity?	January 17, 2018	Homeland Security	Cybersecurity and Infrastructure Protection
Oversight of IT and Cybersecurity at the Department of Veterans Affairs	December 7, 2017	Oversight and Government Reform	Information Technology
Implementation and Cybersecurity Protocols of the Consolidated Audit Trail	November 30, 2017	Financial Services	Capital Markets, Securities, and Investment
Cybersecurity of Voting Machines	November 29, 2017	Oversight and Government Reform	Information Technology
Maximizing the Value of Cyber Threat Information Sharing	November 15, 2017	Homeland Security	Cybersecurity and Infrastructure Protection
Federal Government and Small Businesses: Promoting Greater Information Sharing for Stronger Cybersecurity	November 15, 2017	Small Business
Bolstering the Government's Cybersecurity: A Survey of Compliance with the DHS Directive	November 14, 2017	Science, Space and Technology	Oversight
Securing Consumers' Credit Data in the Age of Digital Commerce	November 1, 2017	Energy and Commerce	Digital and Consumer Protection
Data Security: Vulnerabilities and Opportunities for Improvement	November 1, 2017	Financial Services	Financial Institutions and Consumer Credit
Examining Physical Security and Cybersecurity at Our Nation's Ports (Field Hearing)	October 30, 2017	Homeland Security
Bolstering the Government's Cybersecurity: Assessing the Risk of Kaspersky Lab Products to the Federal Government	October 25, 2017	Science, Space and Technology	Oversight
Continuation of Hearing entitled "Examining the Equifax Data Breach"	October 25, 2017	Financial Services
Public-Private Solutions to Educating a Cyber Workforce	October 24, 2017	Homeland Security	Cybersecurity and Infrastructure Protection
Examining the Equifax Data Breach	October 5, 2017	Financial Services
Examining DHS's Cybersecurity Mission	October 3, 2017	Homeland Security	Cybersecurity and Infrastructure Protection
Oversight of the Equifax Data Breach: Answers for Consumers	October 3, 2017	Energy and Commerce	Digital Commerce and Consumer Protection
Cybersecurity of the Internet of Things	October 3, 2017	Oversight and Government Reform	Information Technology
Challenges of Recruiting and Retaining a Cybersecurity Workforce	September 7, 2017	Homeland Security	Cybersecurity and Infrastructure Protection
Protecting Small Businesses from Cyber Attacks: The Cybersecurity Insurance Option	July 26, 2017	Small Business
Russia Investigative Task Force Hearing with Former Secretary of Homeland Security Jeh Johnson (Open)	June 21, 2017	Intelligence
Cybersecurity Regulation Harmonization	June 21, 2017	Homeland Security
Bolstering the Government's Cybersecurity: Lessons Learned from WannaCry	June 15, 2017	Science, Space and Technology	Research and Technology; Oversight (Joint hearing)
Examining the Role of the Department of Health and Human Services in Health Care Cybersecurity	June 8, 2017	Energy and Commerce	Oversight and Investigations
Fiscal Year 2018 Budget Request for U.S. Cyber Command: Cyber Mission Force Support to Department of Defense Operations	May 23, 2017	Armed Services	Emerging Threats and Capabilities
Reviewing the FAFSA Data Breach	May 3, 2017	Oversight and Government Reform
Reviewing Federal IT Workforce Challenges and Possible Solutions	April 4, 2017	Oversight and Government Reform	Information Technology
The Current State of DHS's Efforts to Secure Federal Networks	March 28, 2017	Homeland Security	Cybersecurity and Infrastructure Protection
A Borderless Battle: Defending Against Cyber Threats	March 22, 2017	Homeland Security
The Current State of DHS Private Sector Engagement for Cybersecurity	March 9, 2017	Homeland Security	Cybersecurity and Infrastructure Protection
Coordinating Federal Cybersecurity Resources for Small Businesses	March 8, 2017	Small Business
Cyber Warfare in the 21^st Century: Threats, Challenges and Opportunities	March 1, 2017	Armed Services
Strengthening U.S. Cybersecurity Capabilities	February 14, 2017	Science, Space, and Technology	Research and Technology
The Electricity Sector's Efforts to Respond to Cybersecurity Threats	February 1, 2017	Energy and Commerce

Source: Compiled by CRS from Congress.gov.

Table 10. 115^th Congress, House Hearings by Committee

Committee	Subcommittee	Title	Date
Armed Services	Emerging Threats and Capabilities	Interagency Cyber Cooperation: Roles, Responsibilities and Authorities of the Department of Defense & the Department of Homeland Security	November 14, 2018
Armed Services	Emerging Threats and Capabilities	Cyber Operations Today: Preparing for ~~21st~~21^st Century Challenges in an Information-Enabled Society	April 11, 2018
Armed Services	Emerging Threats and Capabilities	A Review and Assessment of the Department of Defense Budget, Strategy, Policy, and Programs for Cyber Operations and U.S. Cyber Command for Fiscal Year 2019	February 28, 2018
Armed Services	Emerging Threats and Capabilities	Fiscal Year 2018 Budget Request for U.S. Cyber Command: Cyber Mission Force Support to Department of Defense Operations	May 23, 2017
Armed Services		Cyber Warfare in the 21^st Century: Threats, Challenges and Opportunities	March 1, 2017
Energy and Commerce		DOE Modernization: The Office of Cybersecurity, Energy Security, and Emergency Response	September 27, 2018
Energy and Commerce		Examination of the GAO Audit Series of HHS Cybersecurity	June 20, 2018
Energy and Commerce		DOE Modernization: Legislation Addressing Cybersecurity and Emergency Response	March 14, 2018
Energy and Commerce	Digital and Consumer Protection	Securing Consumers' Credit Data in the Age of Digital Commerce	November 1, 2017
Energy and Commerce	Digital and Consumer Protection	Oversight of the Equifax Data Breach: Answers for Consumers	October 3, 2017
Energy and Commerce	Oversight and Investigations	Examining the Role of the Department of Health and Human Services in Health Care Cybersecurity	June 8, 2017
Energy and Commerce		The Electricity Sector's Efforts to Respond to Cybersecurity Threats	February 1, 2017
Financial Services	Financial Institutions and Consumer Credit	Legislative Proposals to Reform the Current Data Security and Breach Notification Regulatory Regime	March 7, 2018
Financial Services	Financial Institutions and Consumer Credit	Implementation and Cybersecurity Protocols of the Consolidated Audit Trail	November 30, 2017
Financial Services	Financial Institutions and Consumer Credit	Data Security: Vulnerabilities and Opportunities for Improvement	November 1, 2017
Financial Services		Continuation of Hearing entitled "Examining the Equifax Data Breach"	October 25, 2017
Financial Services		Examining the Equifax Data Breach	October 5, 2017
Foreign Affairs		U.S. Cyber Diplomacy in an Era of Growing Threats	February 6, 2018
Homeland Security	Cybersecurity and Infrastructure Protection; Transportation and Protective Security (Joint Hearing)	Understanding Cybersecurity Threats to America's Aviation Sector	September 6, 2018
Homeland Security	Cybersecurity and Infrastructure Protection	Assessing the State of Federal Cybersecurity Risk Determination	July 25, 2018
Homeland Security		DHS's Progress in Securing Election Systems and Other Critical Infrastructure	July 11, 2018
Homeland Security	Cybersecurity and Infrastructure Protection	DHS Efforts to Strengthen Its Cybersecurity Workforce	March 8, 2018
Homeland Security	Cybersecurity and Infrastructure Protection	CDM, The Future of Federal Cybersecurity?	January 17, 2018
Homeland Security	Cybersecurity and Infrastructure Protection	Maximizing the Value of Cyber Threat Information Sharing	November 15, 2017
Homeland Security		Examining Physical Security and Cybersecurity at Our Nation's Ports (Field hearing)	October 30, 2017
Homeland Security	Cybersecurity and Infrastructure Protection	Public-Private Solutions to Educating a Cyber Workforce	October 24, 2017
Homeland Security	Cybersecurity and Infrastructure Protection	Examining DHS's Cybersecurity Mission	October 3, 2017
Homeland Security	Cybersecurity and Infrastructure Protection	Challenges of Recruiting and Retaining a Cybersecurity Workforce	September 7, 2017
Homeland Security		Cybersecurity Regulation Harmonization	June 21, 2017
Homeland Security	Cybersecurity and Infrastructure Protection	The Current State of DHS's Efforts to Secure Federal Networks	March 28, 2017
Homeland Security		A Borderless Battle: Defending Against Cyber Threats	March 22, 2017
Homeland Security	Cybersecurity and Infrastructure Protection	The Current State of DHS Private Sector Engagement for Cybersecurity	March 9, 2017
Intelligence		Russia Investigative Task Force Hearing with Former Secretary of Homeland Security Jeh Johnson (Open)	June 21, 2017
Oversight and Government Reform	Government Operations; Information Technology (Joint Hearing)	GAO High Risk Focus: Cybersecurity	July 25, 2018
Oversight and Government Reform		Cyber-securing the Vote: Ensuring the Integrity of the U.S. Election System	July 24, 2018
Oversight and Government Reform	Information Technology	CDM [Continuous Diagnostics and Mitigation]: Government Perspectives on Security and Modernization	March 20, 2018
Oversight and Government Reform	Information Technology	Oversight of IT and Cybersecurity at the Department of Veterans Affairs	December 7, 2017
Oversight and Government Reform	Information Technology	Cybersecurity of Voting Machines	November 29, 2017
Oversight and Government Reform	Information Technology	Cybersecurity of the Internet of Things	October 3, 2017
Oversight and Government Reform		Reviewing the FAFSA Data Breach	May 3, 2017
Oversight and Government Reform	Information Technology	Reviewing Federal IT Workforce Challenges and Possible Solutions	April 4, 2017
Science, Space, and Technology	Oversight; Research and Technology	Beyond Bitcoin: Emerging Applications for Blockchain Technology	February 14, 2018
Science, Space, and Technology	Oversight	Bolstering the Government's Cybersecurity: A Survey of Compliance with the DHS Directive	November 14, 2017
Science, Space, and Technology	Oversight	Bolstering the Government's Cybersecurity: Assessing the Risk of Kaspersky Lab Products to the Federal Government	October 25, 2017
Science, Space, and Technology	Research and Technology; Oversight (Joint hearing)	Bolstering the Government's Cybersecurity: Lessons Learned from WannaCry	June 15, 2017
Science, Space, and Technology	Research and Technology	Strengthening U.S. Cybersecurity Capabilities	February 14, 2017
Small Business		Small Business Information Sharing: Combating Foreign Cyber Threats	January 30, 2018
Small Business		Federal Government and Small Businesses: Promoting Greater Information Sharing for Stronger Cybersecurity	November 15, 2017
Small Business		Protecting Small Businesses from Cyber Attacks: The Cybersecurity Insurance Option	July 26, 2017
Small Business		Coordinating Federal Cybersecurity Resources for Small Businesses	March 8, 2017

Source: Compiled by CRS from Congress.gov.

Table 11. 115^th Congress, Senate Hearings by Date

Title	Date	Committee	Subcommittee
Department of Defense's Cybersecurity Acquisition and Practices from the Private Sector	November 14, 2018	Armed Services
Exploring the Cryptocurrency and Blockchain Ecosystem	October 11, 2018	Banking, Housing, and Urban Affairs
Cyber Operational Readiness of the Department of Defense	September 26, 2018	Armed Services	Cybersecurity; Personnel (Joint Hearing)
CLOSED: Interagency Coordination in the Protection of Critical Infrastructure	September 18, 2018	Armed Services	Cybersecurity
The China Challenge, Part 2: Security and Military Developments	September 5, 2018	Foreign Relations	East Asia, The Pacific, and International Cybersecurity Policy
Cyber Threats to Critical Infrastructure	August 21, 2018	Judiciary
Complex Cybersecurity Vulnerabilities: Lessons Learned from Spectre and Meltdown	July 11, 2018	Commerce, Science, and Transportation
Election Security Preparations: A State and Local Perspective	June 20, 2018	Rules and Administration
Election Interference: Ensuring Law Enforcement Is Equipped to Target Those Seeking to Do Harm	June 12, 2018	Judiciary
Cybersecurity: Risks to the Financial Services Industry and Its Preparedness	May 24, 2018	Banking, Housing, and Urban Affair
Preparing Small Businesses for Cybersecurity Success	April 25, 2018	Small Business and Entrepreneurship
Mitigating America's Cybersecurity Risk	April 24, 2018	Homeland Security and Governmental Affairs
Election Security	March 21, 2018	Select Committee on Intelligence
Cyber Posture of the Services	March 13, 2018	Armed Services
United States Cyber Command	February 27, 2018	Armed Services
Department of Defense's Role in Protecting Democratic Elections	February 13, 2018	Armed Services
Data Security and Bug Bounty Programs: Lessons Learned from the Uber Breach and Security Researchers	February 6, 2018	Commerce, Science and Transportation	Consumer Protection, Product Safety, Insurance, and Data Security
Protecting Consumers in the Era of Major Data Breaches	November 8, 2017	Commerce, Science and Transportation
2020 Census: Examining Cost Overruns, Information Security, and Accuracy	October 31, 2017	Homeland Security and Governmental Affairs
Cyber Technology and Energy Infrastructure	October 26, 2017	Energy and Natural Resources
Roles and Responsibilities for Defending the Nation from Cyber Attack	October 19, 2017	Armed Services
Consumer Data Security and the Credit Bureaus Files	October 17, 2017	Banking, Housing and Urban Affairs
An Examination of the Equifax Cybersecurity Breach	October 4, 2017	Banking, Housing and Urban Affairs
Equifax: Continuing to Monitor Data-Broker Cybersecurity	October 4, 2017	Judiciary	Privacy, Technology and the Law
Examining the Fintech Landscape	September 12, 2017	Banking, Housing and Urban Affairs
Open Hearing: Russian Interference in the 2016 U.S. Elections	June 21, 2017	Select Committee on Intelligence
State-Sponsored Cyberspace Threats: Recent Incidents and U.S. Policy Response	June 13, 2017	Foreign Relations	East Asia, the Pacific, and International Cybersecurity
Cyber Posture of the Services	May 23, 2017	Armed Services
Cyber Policy, Strategy, and Organization	May 11, 2017	Armed Services
Worldwide Threats	May 11, 2017	Select Committee on Intelligence
Cyber Threats Facing America: An Overview of the Cybersecurity Threat Landscape	May 10, 2017	Homeland Security and Governmental Affairs
United States Cyber Command	May 9, 2017	Armed Services
Cyber-enabled Information Operations	April 27 2017	Armed Services	Cybersecurity
American Leadership in the Asia-Pacific, Part 1: Security Issues	March 29, 2017	Foreign Relations	East Asia, The Pacific, and International Cybersecurity Policy
Cybersecurity Threats to the U.S. Electric Grid and Technology Advancements to Maximize Such Threats, including S. 79, the "Securing Energy Infrastructure Act"	March 28, 2017	Energy and Natural Resources	Energy
The Promises and Perils of Emerging Technologies for Cybersecurity	March 22, 2017	Commerce, Science and Transportation
Cyber Strategy and Policy	March 2, 2017	Armed Services
CLOSED: Cyber Threats	February 7, 2017	Armed Services
Foreign Cyber Threats to the United States	January 5, 2017	Armed Services

Source: Compiled by CRS from Congress.gov.

Table 12. 115^th Congress, Senate Hearings by Committee

Committee	Subcommittee	Title	Date
Armed Services		Department of Defense's Cybersecurity Acquisition and Practices from the Private Sector	November 14, 2018
Armed Services	Cybersecurity; Personnel (Joint Hearing)	Cyber Operational Readiness of the Department of Defense	September 26, 2018
Armed Services	Cybersecurity	CLOSED: Interagency Coordination in the Protection of Critical Infrastructure	September 18, 2018
Armed Services		Cyber Posture of the Services	March 13, 2018
Armed Services		United States Cyber Command	February 27, 2018
Armed Services		Department of Defense's Role in Protecting Democratic Elections	February 13, 2018
Armed Services		Roles and Responsibilities for Defending the Nation from Cyber Attack	October 19, 2017
Armed Services		Cyber Posture of the Services	May 23, 2017
Armed Services		United States Cyber Command	May 9, 2017
Armed Services	Cybersecurity	Cyber-enabled Information Operations	April 27 2017
Armed Services		Cyber Strategy and Policy	March 2, 2017
Armed Services		CLOSED: Cyber Threats	February 7, 2017
Armed Services		Foreign Cyber Threats to the United States	January 5, 2017
Banking, Housing and Urban Affairs		Exploring the Cryptocurrency and Blockchain Ecosystem	October 11, 2018
Banking, Housing and Urban Affairs		Cybersecurity: Risks to the Financial Services Industry and Its Preparedness	May 24, 2018
Banking, Housing and Urban Affairs		Consumer Data Security and the Credit Bureaus Files	October 17, 2017
Banking, Housing and Urban Affairs		An Examination of the Equifax Cybersecurity Breach	October 4, 2017
Banking, Housing and Urban Affairs		Examining the Fintech Landscape	September 12, 2017
Commerce, Science and Transportation		Complex Cybersecurity Vulnerabilities: Lessons Learned from Spectre and Meltdown	July 11, 2018
Commerce, Science and Transportation	Consumer Protection, Product Safety, Insurance, and Data Security	Data Security and Bug Bounty Programs: Lessons Learned from the Uber Breach and Security Researchers	February 6, 2018
Commerce, Science and Transportation		Protecting Consumers in the Era of Major Data Breaches	November 8, 2017
Commerce, Science and Transportation		The Promises and Perils of Emerging Technologies for Cybersecurity	March 22, 2017
Energy and Natural Resources		Cyber Technology and Energy Infrastructure	October 26, 2017
Energy and Natural Resources	Energy	Cybersecurity Threats to the U.S. Electric Grid and Technology Advancements to Maximize Such Threats, including S. 79, the "Securing Energy Infrastructure Act"	March 28, 2017
Foreign Relations	East Asia, The Pacific, and International Cybersecurity Policy	The China Challenge, Part 2: Security and Military Developments	September 5, 2018
Foreign Relations	East Asia, The Pacific, and International Cybersecurity Policy	State-Sponsored Cyberspace Threats: Recent Incidents and U.S. Policy Response	June 13, 2017
Foreign Relations	East Asia, The Pacific, and International Cybersecurity Policy	American Leadership in the Asia-Pacific, Part 1: Security Issues	March 29, 2017
Homeland Security and Governmental Affairs		Mitigating America's Cybersecurity Risk	April 24, 2018
Homeland Security and Governmental Affairs		2020 Census: Examining Cost Overruns, Information Security, and Accuracy	October 31, 2017
Homeland Security and Governmental Affairs		Cyber Threats Facing America: An Overview of the Cybersecurity Threat Landscape	May 10, 2017
Judiciary		Cyber Threats to Critical Infrastructure	August 21, 2018
Judiciary		Election Interference: Ensuring Law Enforcement Is Equipped to Target Those Seeking to Do Harm	June 12, 2018
Judiciary	Privacy, Technology and the Law	Equifax: Continuing to Monitor Data-Broker Cybersecurity	October 4, 2017
Rules and Administration		Election Security Preparations: A State and Local Perspective	June 20, 2018
Select Committee on Intelligence		Election Security	March 21, 2018
Select Committee on Intelligence		Open Hearing: Russian Interference in the 2016 U.S. Elections	June 21, 2017
Select Committee on Intelligence		Worldwide Threats	May 11, 2017
Small Business and Entrepreneurship		Preparing Small Businesses for Cybersecurity Success	April 25, 2018

Source: Compiled by CRS from Congress.gov.

Author Contact Information

Rita Tehan, Senior Research Librarian ([email address scrubbed], [phone number scrubbed])

Acknowledgments

The author would like to thank Rebecca Annis, Information Research Specialist, for her assistance with formatting and reorganizing this report.

Cybersecurity: Legislation and Hearings, 115th-116th Congresses

Changes from March 20, 2019 to May 2, 2019

Cybersecurity: Legislation and Hearings, 115th-116th Congresses

Contents

Tables

Summary

Legislative Action

116th Congress: Legislative Action

115th Congress: Legislative Action

CRS Products: Legislation

Legislation in the 116th and 115th Congresses

that were reported out of committee to the floor, received a House vote or passage, or become public law. Given the ambiguities about what cybersecurity means, the list might not include bills that some observers might regard as relating to cybersecurity. Hearings in the 116th Congress

Hearings in the 115th Congress

Cybersecurity: Legislation and Hearings, 115^th-116^th Congresses

116^th Congress: Legislative Action

115^th Congress: Legislative Action

Legislation in the 116^thand 115^th Congresses

that were reported out of committee to the floor, received a House vote or passage, or become public law. Given the ambiguities about what cybersecurity means, the list might not include bills that some observers might regard as relating to cybersecurity. Hearings in the 116^th Congress

Hearings in the 115^th Congress