Skip to content
PoliticalRepoPoliticalRepo

United States · Bill · S

S. 2902 (117th)

Federal Information Security Modernization Act of 2021

openUnited States· United States Congress· EN

Introduced

29 September 2021

Last action

19 December 2022 · Reported

Status

Placed on Senate Legislative Calendar under General Orders. Calendar No. 673.

Sponsors

Sen. Peters, Gary C. [D-MI], Sen. Portman, Rob [R-OH], Sen. Carper, Thomas R. [D-DE]

Subjects

Transport, Budget

Source updated

7 April 2025

Transport · Budget

Official sourceDownload fileView documentsShare

Summary

Federal Information Security Modernization Act of 2021 This bill addresses federal information security management, notification and remediation of cybersecurity incidents, and the role of the Office of Management and Budget (OMB) and the Cybersecurity and Infrastructure Security Agency (CISA). The OMB and CISA must perform, on an ongoing and continuous basis, assessments of federal risk posture. The bill requires annual evaluation by each agency of whether additional cybersecurity procedures are appropriate. An agency, within 30 days of concluding that a major incident has occurred due to a high risk exposure of personal identifiable information, must provide notification to the last known home mailing address of each individual whom the incident may have impacted. Notification may be delayed under specified circumstances. Each agency must provide any information relating to an incident to CISA, the OMB, the Office of the National Cyber Director, the Government Accountability Office, and Congress. An agency's contractors and grant recipients must immediately notify the agency of an incident involving federal information. Each agency shall develop training for individuals at the agency with access to federal information or information systems on how to identify and respond to an incident. The OMB and CISA must (1) develop and promulgate guidance on the definition of major incident , and (2) develop a framework for prioritizing federal penetration testing resources among agencies. CISA must establish a program to provide ongoing, hypothesis-driven threat-hunting services on the network of each agency. The bill establishes specified pilot programs to enhance federal cybersecurity.

This text is taken from the official record. PoliticalRepo does not editorialize.

Timeline

  1. 29 September 2021

    Introduced

    Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

    Source: IntroReferral

  2. 29 September 2021

    Introduced

    Introduced in Senate

    Source: IntroReferral

  3. 6 October 2021

    Reported

    Committee on Homeland Security and Governmental Affairs. Ordered to be reported with an amendment in the nature of a substitute favorably.

    Source: Committee

  4. 19 December 2022

    Calendars

    Placed on Senate Legislative Calendar under General Orders. Calendar No. 673.

    Source: Calendars

  5. 19 December 2022

    Reported

    Committee on Homeland Security and Governmental Affairs. Reported by Senator Peters with an amendment in the nature of a substitute. With written report No. 117-274.

    Source: Committee

  6. 19 December 2022

    Reported

    Committee on Homeland Security and Governmental Affairs. Reported by Senator Peters with an amendment in the nature of a substitute. With written report No. 117-274.

    Source: Committee

Votes

No vote records are attached yet.

Versions

Documents

6 official files

Reported to Senate (text)

View fileDownload file

This file cannot be previewed here. Use View or Download.

Leesvertaling

Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.

Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.

  • Reported to Senate (text)

    Reported to Senate · EN · 19 December 2022

    ViewDownloadOpen at official source

  • Reported to Senate (PDF)

    Reported to Senate · EN · 19 December 2022

    ViewDownloadOpen at official source

    Leesvertaling

    Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.

    Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.

  • Reported to Senate

    summary · EN · 19 December 2022

    Open at official source

    Leesvertaling

    Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.

    Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.

  • Introduced in Senate (text)

    Introduced in Senate · EN · 29 September 2021

    ViewDownloadOpen at official source

    Leesvertaling

    Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.

    Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.

  • Introduced in Senate (PDF)

    Introduced in Senate · EN · 29 September 2021

    ViewDownloadOpen at official source

    Leesvertaling

    Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.

    Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.

  • Introduced in Senate

    summary · EN · 29 September 2021

    Open at official source

    Leesvertaling

    Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.

    Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.

Sponsors

Related records

Sources

PoliticalRepo is an index and interpretation layer, not the authoritative legal source.