Sec. 3. Cyber incidents against government networks
194 words·~1 min read·
/bill/113/s/1638/is/section-3A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Not later than 180 days after the date of enactment of this Act, and annually thereafter, the Secretary of Homeland Security shall submit to Congress a report that— summarizes major cyber incidents involving networks of executive agencies (as defined in section 105 of title 5, United States Code), except for the Department of Defense; provides aggregate statistics on the number of breaches of networks of executive agencies, the volume of data exfiltrated, and the estimated cost of remedying the breaches; and discusses the risk of cyber sabotage.
Not later than 180 days after the date of enactment of this Act, and annually thereafter, the Secretary of Defense shall submit to Congress a report that— summarizes major cyber incidents against networks of the Department of Defense and the military departments; provides aggregate statistics on the number of breaches against networks of the Department of Defense and the military departments, the volume of data exfiltrated, and the estimated cost of remedying the breaches; and discusses the risk of cyber sabotage.
Each report submitted under this section shall be in unclassified form, but may include a classified annex as necessary to protect sources, methods, and national security.