United States · Bill · HR
H.R. 6497 (117th)
Federal Information Security Modernization Act of 2022
Introduced
25 January 2022
Last action
2 February 2022 · Committee
Status
Ordered to be Reported (Amended) by Voice Vote.
Sponsors
Rep. Maloney, Carolyn B. [D-NY-12], Rep. Comer, James [R-KY-1], Rep. Connolly, Gerald E. [D-VA-11], Rep. Sessions, Pete [R-TX-17], Del. Norton, Eleanor Holmes [D-DC-At Large], Rep. Keller, Fred [R-PA-12], Rep. Wasserman Schultz, Debbie [D-FL-25], Rep. Hice, Jody B. [R-GA-10], Rep. Cooper, Jim [D-TN-5], Rep. Franklin, Scott [R-FL-18], Rep. Brown, Shontel M. [D-OH-11], Rep. Gibbs, Bob [R-OH-7], Rep. Lynch, Stephen F. [D-MA-8], Rep. Raskin, Jamie [D-MD-8], Rep. Mace, Nancy [R-SC-1], Rep. Mfume, Kweisi [D-MD-7], Jake LaTurner
Subjects
Transport, Budget
Source updated
7 April 2025
Summary
Federal Information Security Modernization Act of 2022 This bill addresses federal information security management, notification and remediation of cybersecurity incidents, and the roles of the Office of Management and Budget (OMB) and the Cybersecurity and Infrastructure Security Agency (CISA). CISA must perform, on an ongoing and continuous basis, assessments of federal risk posture. The bill requires evaluation by each agency of whether additional cybersecurity procedures are appropriate at least once every three years. An agency, as expeditiously as practicable and without unreasonable delay, and within 45 days after it has a reasonable basis to conclude that a breach has occurred, must (1) determine whether notice to any individual potentially affected by the breach is appropriate based on a risk assessment; and (2) as appropriate, provide written notice to each individual potentially affected. Notification may be delayed under specified circumstances. Each agency must provide any information relating to a major incident to CISA, the OMB, the Office of the National Cyber Director, the agency's office of inspector general, the Government Accountability Office, and Congress. An agency's contractors and grant recipients must notify the agency of an incident involving federal information within a specified time frame. Each agency shall develop training for individuals at the agency with access to federal information or information systems on how to identify and respond to an incident. CISA must establish a program to provide ongoing, hypothesis-driven threat-hunting services on the network of each agency. The bill establishes specified pilot programs to enhance federal cybersecurity.
This text is taken from the official record. PoliticalRepo does not editorialize.
Timeline
25 January 2022
Introduced
Referred to the Committee on Oversight and Reform, and in addition to the Committee on Science, Space, and Technology, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
Source: IntroReferral
25 January 2022
Introduced
Introduced in House
Source: IntroReferral
25 January 2022
Introduced
Introduced in House
Source: IntroReferral
2 February 2022
Reported
Ordered to be Reported (Amended) by Voice Vote.
Source: Committee
2 February 2022
Committee
Committee Consideration and Mark-up Session Held.
Source: Committee
Votes
No vote records are attached yet.
Versions
- Introduced in House · 25 January 2022 · Download file
Documents
3 official files
Introduced in House (text)
This file cannot be previewed here. Use View or Download.
Leesvertaling
Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.
Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.
Introduced in House (text)
Introduced in House · EN · 25 January 2022
Introduced in House (PDF)
Introduced in House · EN · 25 January 2022
ViewDownloadOpen at official source
Leesvertaling
Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.
Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.
Introduced in House
summary · EN · 25 January 2022
Leesvertaling
Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.
Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.
Sponsors
- Rep. Maloney, Carolyn B. [D-NY-12] · D · Sponsor
- Rep. Comer, James [R-KY-1] · R · Sponsor
- Rep. Connolly, Gerald E. [D-VA-11] · D · Sponsor
- Rep. Sessions, Pete [R-TX-17] · R · Sponsor
- Del. Norton, Eleanor Holmes [D-DC-At Large] · D · Sponsor
- Rep. Keller, Fred [R-PA-12] · R · Sponsor
- Rep. Wasserman Schultz, Debbie [D-FL-25] · D · Sponsor
- Rep. Hice, Jody B. [R-GA-10] · R · Sponsor
- Rep. Cooper, Jim [D-TN-5] · D · Sponsor
- Rep. Franklin, Scott [R-FL-18] · R · Sponsor
- Rep. Brown, Shontel M. [D-OH-11] · D · Sponsor
- Rep. Gibbs, Bob [R-OH-7] · R · Sponsor
- Rep. Lynch, Stephen F. [D-MA-8] · D · Sponsor
- Rep. Raskin, Jamie [D-MD-8] · D · Sponsor
- Rep. Mace, Nancy [R-SC-1] · R · Cosponsor
- Rep. Mfume, Kweisi [D-MD-7] · D · Cosponsor
- Jake LaTurner · R · Cosponsor
- · hsgo00 · Standing
- · hssy00 · Standing
Related records
- related to → Federal Information Security Modernization Act of 2021
- related to ← Strengthening American Cybersecurity Act of 2022
Sources
PoliticalRepo is an index and interpretation layer, not the authoritative legal source.
- Official source: https://www.congress.gov/bill/117th-congress/house-bill/6497
- Open data entity: https://api.congress.gov/v3/bill/117/hr/6497
- us · 117-hr-6497 · source updated 7 April 2025