PoliticalRepoPoliticalRepo

United States · Bill · S

S. 3600 (117th)

Strengthening American Cybersecurity Act of 2022

openUnited States· United States Congress· EN

Introduced

8 February 2022

Last action

2 March 2022 · Floor

Status

Held at the desk.

Sponsors

Gary Peters, Sen. Portman, Rob [R-OH], Mark Warner, Susan Collins, Angus King, Sen. Burr, Richard [R-NC], Sen. Casey, Robert P., Jr. [D-PA], Sen. Blunt, Roy [R-MO], Sen. Rubio, Marco [R-FL], Jacky Rosen, Sen. Padilla, Alex [D-CA], James Risch, Jon Ossoff, John Cornyn, John Hickenlooper, Michael Bennet

Subjects

Transport

Source updated

28 May 2025

Transport

Official sourceDownload fileView documentsShare

Summary

Strengthening American Cybersecurity Act of 2022 This bill addresses cybersecurity threats against critical infrastructure and the federal government. The Cybersecurity and Infrastructure Security Agency (CISA) must perform ongoing and continuous assessments of federal risk posture. An agency, within a specified time frame, must (1) determine whether notice to any individual potentially affected by a breach is appropriate based on a risk assessment; and (2) as appropriate, provide written notice to each individual potentially affected. Each agency must (1) provide information relating to a major incident to specified parties, and (2) develop specified training for individuals with access to federal information or information systems. The bill requires reporting and other actions to address cybersecurity incidents. Entities that own or operate critical infrastructure must report cyber incidents and ransom payments within specified time frames. The bill limits the use and disclosure of reported information. The bill establishes (1) an interagency council to standardize federal reporting of cybersecurity threats, (2) a task force on ransomware attacks, and (3) a pilot program to identify information systems vulnerable to such attacks. The bill provides statutory authority for the Federal Risk and Authorization Management Program (FedRAMP) within the General Services Administration (GSA). FedRAMP is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud computing products and services. The bill establishes a FedRAMP Board to examine the operations of FedRAMP and the Federal Secure Cloud Advisory Committee.

This text is taken from the official record. PoliticalRepo does not editorialize.

Timeline

  1. 8 February 2022

    Introduced

    Introduced in the Senate. Read the first time. Placed on Senate Legislative Calendar under Read the First Time.

    Source: Calendars

  2. 8 February 2022

    Introduced

    Introduced in Senate

    Source: IntroReferral

  3. 9 February 2022

    Calendars

    Read the second time. Placed on Senate Legislative Calendar under General Orders. Calendar No. 265.

    Source: Calendars

  4. 1 March 2022

    Passed

    Passed/agreed to in Senate: Passed Senate with amendments by Unanimous Consent.

    Source: Floor

  5. 1 March 2022

    Floor

    Measure laid before Senate by unanimous consent. (consideration: CR S896-919)

    Source: Floor

  6. 2 March 2022

    Floor

    Message on Senate action sent to the House.

    Source: Floor

  7. 2 March 2022

    Floor

    Held at the desk.

    Source: Floor

  8. 2 March 2022

    Floor

    Received in the House.

    Source: Floor

Votes

No vote records are attached yet.

Versions

Documents

6 official files

Sponsors

Related records

Sources

PoliticalRepo is an index and interpretation layer, not the authoritative legal source.