Skip to content
PoliticalRepoPoliticalRepo

United States · Bill · S

S. 2407 (117th)

Cyber Incident Notification Act of 2021

referredUnited States· United States Congress· EN

Introduced

21 July 2021

Last action

21 July 2021 · Introduced

Status

Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

Sponsors

Sen. Warner, Mark R. [D-VA], Sen. Rubio, Marco [R-FL], Sen. Collins, Susan M. [R-ME], Sen. Heinrich, Martin [D-NM], Sen. Tester, Jon [D-MT], Sen. King, Angus S., Jr. [I-ME], Sen. Burr, Richard [R-NC], Sen. Blunt, Roy [R-MO], Sen. Bennet, Michael F. [D-CO], Sen. Casey, Robert P., Jr. [D-PA], Sen. Sasse, Ben [R-NE], Sen. Gillibrand, Kirsten E. [D-NY], Sen. Feinstein, Dianne [D-CA], Sen. Risch, James E. [R-ID], Sen. Manchin, Joe, III [D-WV]

Subjects

Defence, Transport

Source updated

14 January 2025

Defence · Transport

Summary

Cyber Incident Notification Act of 2021 This bill requires federal agencies and certain entities to report cybersecurity intrusion incidents to the Cybersecurity and Infrastructure Security Agency (CISA) and addresses related issues. Within 24 hours of a confirmed intrusion (or potential intrusion), the targeted agency or entity must report the intrusion to CISA. CISA must promulgate rules relating to the bill, including the information that must be included in each incident report and the entities that must comply with the reporting requirements. At minimum, the covered entities must include federal contractors and owners or operators of critical infrastructure. Similarly, such rules must at minimum require federal agencies and covered entities to report all intrusions involving a nation-state, advanced persistent threat cyber actor, or transnational organized crime group. If a covered entity fails to meet the bill's requirements, CISA may assess a civil penalty of up to 0.5% of the entity's gross revenue for each day the violation lasts. If the violating entity has federal contracts, the General Services Administration may impose additional penalties, including removal from the Federal Contracting Schedule. A violation by a federal agency must be referred to that agency's office of the inspector general, which must treat the case as a matter of urgent concern. CISA, the Department of Justice, and the Office of the Director of National Intelligence must provide periodic reports to Congress concerning the current cyber threat picture facing federal agencies and covered entities.

This text is taken from the official record. PoliticalRepo does not editorialize.

Timeline

  1. 21 July 2021

    Introduced

    Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

    Source: IntroReferral

  2. 21 July 2021

    Introduced

    Introduced in Senate

    Source: IntroReferral

Votes

No vote records are attached yet.

Versions

Documents

3 official files

Introduced in Senate (text)

View fileDownload file

This file cannot be previewed here. Use View or Download.

Leesvertaling

Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.

Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.

  • Introduced in Senate (text)

    Introduced in Senate · EN · 21 July 2021

    ViewDownloadOpen at official source

  • Introduced in Senate (PDF)

    Introduced in Senate · EN · 21 July 2021

    ViewDownloadOpen at official source

    Leesvertaling

    Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.

    Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.

  • Introduced in Senate

    summary · EN · 21 July 2021

    Open at official source

    Leesvertaling

    Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.

    Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.

Sponsors

Related records

No cross-record relationships stored yet.

Sources

PoliticalRepo is an index and interpretation layer, not the authoritative legal source.