http://www.washingtonwatch.com/bills info@washingtonwatch.com http://www.pjdoland.com/chai/?v=0.1 http://www.washingtonwatch.com/bills/history/110_HR_5983.html?rev=34114 <p>H.R. 5983 would amend the Homeland Security Act of 2002 to enhance the information security of the Department of Homeland Security.</p> <h2 id="toc0"> Detailed Summary </h2> <p>Homeland Security Network Defense and Accountability Act of 2008 - Amends the Homeland Security Act of 2002 to direct the Secretary of the Department of Homeland Security (DHS) to delegate to the Department's Chief Information Officer (CIO) authority for the development, approval, implementation, integration, and oversight of DHS policies, procedures, activities, funding, and systems relating to information management and information infrastructure.</p> <p>Lists CIO qualifications (including at least five years of executive leadership and management experience in information technology and information security) and functions (including establishing an incident response team).</p> <p>(Sec. 3) Directs the CIO to establish, oversee the deployment of, and regularly update security control testing protocols that ensure that DHS's information infrastructure is effectively protected against known attacks and exploitations of federal and contractor information infrastructure.</p> <p>(Sec. 4) Requires the Inspector General to conduct performance and programmatic reviews of DHS's information infrastructure to determine the effectiveness of its security policies and controls. Requires programmatic reviews to: (1) determine whether a DHS component is complying with policies, processes, and procedures established by the CIO; and (2) focus on risk assessment, management, and mitigation, with primary regard to the implementation of best practices such as authentication, access control (including remote access), intrusion detection and prevention, and data protection and integrity. Directs the Inspector General to submit a security report on each review that includes prioritized recommendations for improving security controls, including recommendations regarding funding changes and personnel management, to the Secretary, CIO, and head of the DHS componen. Requires: (1) the DHS component head and the CIO to jointly submit a corrective action report to the Secretary and the Inspector General; and (2) the Inspector General to submit an annual report to the House and Senate homeland security committees.</p> <p>(Sec. 5) Defines &amp;quot;information infrastructure&amp;quot; under such Act as systems and assets used in processing, transmitting, receiving, or storing information electronically.</p> <p>(Sec. 6) Requires the Secretary, before entering into or renewing a covered contract and acting through the CIO, to determine that the contractor has an internal information systems security policy that complies with DHS information security requirements. Sets forth contract requirements regarding security and subcontracting, including requiring the contractor to: (1) provide contracted services on a continuing basis to DHS in the event of an unplanned or disruptive event; (2) deliver timely notice of any internal computer incident that could violate or threaten computer security policies, acceptable use policies, or standard security practices at DHS to the U.S. Computer Emergency Readiness Team and the incident response team; and (3) develop and implement a plan for the award of subcontracts to small business and disadvantaged business concerns.</p> <p>Directs the Secretary to report to the House Homeland Security Committee and the Senate Homeland Security and Governmental Affairs Committee on: (1) progress in implementing requirements issued by the Office of Management and Budget (OMB) for encryption, authentication, Internet Protocol version 6, and Trusted Internet Connections; (2) a plan to investigate breaches against DHS's information infrastructure for purposes of counterintelligence assessment, attribution, and response; (3) a proposal to increase threat information sharing with contractors and provide specialized damage assessment training to private sector information security professionals; and (4) a process to coordinate DHS's information infrastructure protection activities.</p> <p>(Sec. 7) Provides that nothing in this Act shall affect the application of the Federal Information Management Security Act of 2002 to DHS.</p> <!--Leave in the 'summary' tags if you want the latest summary from the Congressional Research Service automatically to replace the text between the tags once it becomes available. --> <h2 id="toc1"> Status of the Legislation </h2> <p>Latest Major Action: 7/31/2008: Referred to Senate committee. Status: Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.</p> <!-- Leave in the 'status' tags if you want the latest reported status from THOMAS automatically to replace the text between the tags once it becomes available. --> <h2 id="toc2"> Points in Favor </h2> <p>(Log in to edit the wiki and be the first to show why the bill should pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> <h2 id="toc3"> Points Against </h2> <p>(Log in to edit the wiki and be the first to show why the bill should not pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> 34114@http://www.washingtonwatch.com Wed, 19 Nov 2008 00:00:00 EST http://www.washingtonwatch.com/bills/history/110_HR_5983.html?rev=28985 <p>H.R. 5983 would amend the Homeland Security Act of 2002 to enhance the information security of the Department of Homeland Security.</p> <h2 id="toc4"> Detailed Summary </h2> <p>Homeland Security Network Defense and Accountability Act of 2008 - Amends the Homeland Security Act of 2002 to direct the Secretary of the Department of Homeland Security (DHS) to delegate to the Department's Chief Information Officer (CIO) authority for the development, approval, implementation, integration, and oversight of DHS policies, procedures, activities, funding, and systems relating to information management and information infrastructure.</p> <p>Lists CIO qualifications (including at least five years of executive leadership and management experience in information technology and information security) and functions (including establishing an incident response team).</p> <p>Directs the CIO to establish, oversee the deployment of, and regularly update security control testing protocols that ensure that DHS's information infrastructure is effectively protected against known attacks and exploitations of federal and contractor information infrastructure.</p> <p>Requires the Inspector General to conduct performance and programmatic reviews of DHS's information infrastructure to determine the effectiveness of its security policies and controls.</p> <p>Requires the Secretary, before entering into or renewing a covered contract and acting through the CIO, to determine that the contractor has an internal information systems security policy that complies with DHS information security requirements. Delineates contract requirements regarding security (including requiring the contractor to provide contracted services on a continuing basis to DHS in the event of an unplanned or disruptive event) and subcontracting (including requiring the contractor to develop and implement a plan for the award of subcontracts to small business and disadvantaged business concerns).</p> <!--Leave in the 'summary' tags if you want the latest summary from the Congressional Research Service automatically to replace the text between the tags once it becomes available. --> <h2 id="toc5"> Status of the Legislation </h2> <p>Latest Major Action: 7/31/2008: Referred to Senate committee. Status: Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.</p> <!-- Leave in the 'status' tags if you want the latest reported status from THOMAS automatically to replace the text between the tags once it becomes available. --> <h2 id="toc6"> Points in Favor </h2> <p>(Log in to edit the wiki and be the first to show why the bill should pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> <h2 id="toc7"> Points Against </h2> <p>(Log in to edit the wiki and be the first to show why the bill should not pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> 28985@http://www.washingtonwatch.com Fri, 01 Aug 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/history/110_HR_5983.html?rev=28717 <p>H.R. 5983 would amend the Homeland Security Act of 2002 to enhance the information security of the Department of Homeland Security.</p> <h2 id="toc8"> Detailed Summary </h2> <p>Homeland Security Network Defense and Accountability Act of 2008 - Amends the Homeland Security Act of 2002 to direct the Secretary of the Department of Homeland Security (DHS) to delegate to the Department's Chief Information Officer (CIO) authority for the development, approval, implementation, integration, and oversight of DHS policies, procedures, activities, funding, and systems relating to information management and information infrastructure.</p> <p>Lists CIO qualifications (including at least five years of executive leadership and management experience in information technology and information security) and functions (including establishing an incident response team).</p> <p>Directs the CIO to establish, oversee the deployment of, and regularly update security control testing protocols that ensure that DHS's information infrastructure is effectively protected against known attacks and exploitations of federal and contractor information infrastructure.</p> <p>Requires the Inspector General to conduct performance and programmatic reviews of DHS's information infrastructure to determine the effectiveness of its security policies and controls.</p> <p>Requires the Secretary, before entering into or renewing a covered contract and acting through the CIO, to determine that the contractor has an internal information systems security policy that complies with DHS information security requirements. Delineates contract requirements regarding security (including requiring the contractor to provide contracted services on a continuing basis to DHS in the event of an unplanned or disruptive event) and subcontracting (including requiring the contractor to develop and implement a plan for the award of subcontracts to small business and disadvantaged business concerns).</p> <!--Leave in the 'summary' tags if you want the latest summary from the Congressional Research Service automatically to replace the text between the tags once it becomes available. --> <h2 id="toc9"> Status of the Legislation </h2> <p>Latest Major Action: 7/30/2008: Passed/agreed to in House. Status: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote.</p> <!-- Leave in the 'status' tags if you want the latest reported status from THOMAS automatically to replace the text between the tags once it becomes available. --> <h2 id="toc10"> Points in Favor </h2> <p>(Log in to edit the wiki and be the first to show why the bill should pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> <h2 id="toc11"> Points Against </h2> <p>(Log in to edit the wiki and be the first to show why the bill should not pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> 28717@http://www.washingtonwatch.com Thu, 31 Jul 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/show/110_HR_5983.html 7/31/2008: Referred to Senate committee. Status: Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs. 38567@http://www.washingtonwatch.com Thu, 31 Jul 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/history/110_HR_5983.html?rev=28539 <p>H.R. 5983 would amend the Homeland Security Act of 2002 to enhance the information security of the Department of Homeland Security.</p> <h2 id="toc12"> Detailed Summary </h2> <p>Homeland Security Network Defense and Accountability Act of 2008 - Amends the Homeland Security Act of 2002 to direct the Secretary of the Department of Homeland Security (DHS) to delegate to the Department's Chief Information Officer (CIO) authority for the development, approval, implementation, integration, and oversight of DHS policies, procedures, activities, funding, and systems relating to information management and information infrastructure.</p> <p>Lists CIO qualifications (including at least five years of executive leadership and management experience in information technology and information security) and functions (including establishing an incident response team).</p> <p>Directs the CIO to establish, oversee the deployment of, and regularly update security control testing protocols that ensure that DHS's information infrastructure is effectively protected against known attacks and exploitations of federal and contractor information infrastructure.</p> <p>Requires the Inspector General to conduct performance and programmatic reviews of DHS's information infrastructure to determine the effectiveness of its security policies and controls.</p> <p>Requires the Secretary, before entering into or renewing a covered contract and acting through the CIO, to determine that the contractor has an internal information systems security policy that complies with DHS information security requirements. Delineates contract requirements regarding security (including requiring the contractor to provide contracted services on a continuing basis to DHS in the event of an unplanned or disruptive event) and subcontracting (including requiring the contractor to develop and implement a plan for the award of subcontracts to small business and disadvantaged business concerns).</p> <!--Leave in the 'summary' tags if you want the latest summary from the Congressional Research Service automatically to replace the text between the tags once it becomes available. --> <h2 id="toc13"> Status of the Legislation </h2> <p>Latest Major Action: 7/29/2008: House floor actions. Status: At the conclusion of debate, the chair put the question on the motion to suspend the rules. Mr. Bilirakis objected to the vote on the grounds that a quorum was not present. Further proceedings on the motion were postponed. The point of no quorum was withdrawn.</p> <!-- Leave in the 'status' tags if you want the latest reported status from THOMAS automatically to replace the text between the tags once it becomes available. --> <h2 id="toc14"> Points in Favor </h2> <p>(Log in to edit the wiki and be the first to show why the bill should pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> <h2 id="toc15"> Points Against </h2> <p>(Log in to edit the wiki and be the first to show why the bill should not pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> 28539@http://www.washingtonwatch.com Wed, 30 Jul 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/show/110_HR_5983.html 7/30/2008: Passed/agreed to in House. Status: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. 38422@http://www.washingtonwatch.com Wed, 30 Jul 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/show/110_HR_5983.html 7/29/2008: House floor actions. Status: At the conclusion of debate, the chair put the question on the motion to suspend the rules. Mr. Bilirakis objected to the vote on the grounds that a quorum was not present. Further proceedings on the motion were postponed. The point of no quorum was withdrawn. 38314@http://www.washingtonwatch.com Tue, 29 Jul 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/history/110_HR_5983.html?rev=28200 <p>H.R. 5983 would amend the Homeland Security Act of 2002 to enhance the information security of the Department of Homeland Security.</p> <h2 id="toc16"> Detailed Summary </h2> <p>Homeland Security Network Defense and Accountability Act of 2008 - Amends the Homeland Security Act of 2002 to direct the Secretary of the Department of Homeland Security (DHS) to delegate to the Department's Chief Information Officer (CIO) authority for the development, approval, implementation, integration, and oversight of DHS policies, procedures, activities, funding, and systems relating to information management and information infrastructure.</p> <p>Lists CIO qualifications (including at least five years of executive leadership and management experience in information technology and information security) and functions (including establishing an incident response team).</p> <p>Directs the CIO to establish, oversee the deployment of, and regularly update security control testing protocols that ensure that DHS's information infrastructure is effectively protected against known attacks and exploitations of federal and contractor information infrastructure.</p> <p>Requires the Inspector General to conduct performance and programmatic reviews of DHS's information infrastructure to determine the effectiveness of its security policies and controls.</p> <p>Requires the Secretary, before entering into or renewing a covered contract and acting through the CIO, to determine that the contractor has an internal information systems security policy that complies with DHS information security requirements. Delineates contract requirements regarding security (including requiring the contractor to provide contracted services on a continuing basis to DHS in the event of an unplanned or disruptive event) and subcontracting (including requiring the contractor to develop and implement a plan for the award of subcontracts to small business and disadvantaged business concerns).</p> <!--Leave in the 'summary' tags if you want the latest summary from the Congressional Research Service automatically to replace the text between the tags once it becomes available. --> <h2 id="toc17"> Status of the Legislation </h2> <p>Latest Major Action: 7/24/2008: Placed on the Union Calendar, Calendar No. 496.</p> <!-- Leave in the 'status' tags if you want the latest reported status from THOMAS automatically to replace the text between the tags once it becomes available. --> <h2 id="toc18"> Points in Favor </h2> <p>(Log in to edit the wiki and be the first to show why the bill should pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> <h2 id="toc19"> Points Against </h2> <p>(Log in to edit the wiki and be the first to show why the bill should not pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> 28200@http://www.washingtonwatch.com Fri, 25 Jul 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/show/110_HR_5983.html 7/24/2008: Placed on the Union Calendar, Calendar No. 496. 38092@http://www.washingtonwatch.com Thu, 24 Jul 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/history/110_HR_5983.html?rev=26906 <p>H.R. 5983 would amend the Homeland Security Act of 2002 to enhance the information security of the Department of Homeland Security.</p> <h2 id="toc20"> Detailed Summary </h2> <p>Homeland Security Network Defense and Accountability Act of 2008 - Amends the Homeland Security Act of 2002 to direct the Secretary of the Department of Homeland Security (DHS) to delegate to the Department's Chief Information Officer (CIO) authority for the development, approval, implementation, integration, and oversight of DHS policies, procedures, activities, funding, and systems relating to information management and information infrastructure.</p> <p>Lists CIO qualifications (including at least five years of executive leadership and management experience in information technology and information security) and functions (including establishing an incident response team).</p> <p>Directs the CIO to establish, oversee the deployment of, and regularly update security control testing protocols that ensure that DHS's information infrastructure is effectively protected against known attacks and exploitations of federal and contractor information infrastructure.</p> <p>Requires the Inspector General to conduct performance and programmatic reviews of DHS's information infrastructure to determine the effectiveness of its security policies and controls.</p> <p>Requires the Secretary, before entering into or renewing a covered contract and acting through the CIO, to determine that the contractor has an internal information systems security policy that complies with DHS information security requirements. Delineates contract requirements regarding security (including requiring the contractor to provide contracted services on a continuing basis to DHS in the event of an unplanned or disruptive event) and subcontracting (including requiring the contractor to develop and implement a plan for the award of subcontracts to small business and disadvantaged business concerns).</p> <!--Leave in the 'summary' tags if you want the latest summary from the Congressional Research Service automatically to replace the text between the tags once it becomes available. --> <h2 id="toc21"> Status of the Legislation </h2> <p>Latest Major Action: 6/26/2008: House committee/subcommittee actions. Status: Ordered to be Reported (Amended) by Voice Vote.</p> <!-- Leave in the 'status' tags if you want the latest reported status from THOMAS automatically to replace the text between the tags once it becomes available. --> <h2 id="toc22"> Points in Favor </h2> <p>(Log in to edit the wiki and be the first to show why the bill should pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> <h2 id="toc23"> Points Against </h2> <p>(Log in to edit the wiki and be the first to show why the bill should not pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> 26906@http://www.washingtonwatch.com Thu, 03 Jul 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/history/110_HR_5983.html?rev=26698 <p>H.R. 5983 would amend the Homeland Security Act of 2002 to enhance the information security of the Department of Homeland Security.</p> <h2 id="toc24"> Detailed Summary </h2> <p>(Log in to edit the wiki and be the first to provide a detailed summary of the bill!)</p> <!--Leave in the 'summary' tags if you want the latest summary from the Congressional Research Service automatically to replace the text between the tags once it becomes available. --> <h2 id="toc25"> Status of the Legislation </h2> <p>Latest Major Action: 6/26/2008: House committee/subcommittee actions. Status: Ordered to be Reported (Amended) by Voice Vote.</p> <!-- Leave in the 'status' tags if you want the latest reported status from THOMAS automatically to replace the text between the tags once it becomes available. --> <h2 id="toc26"> Points in Favor </h2> <p>(Log in to edit the wiki and be the first to show why the bill should pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> <h2 id="toc27"> Points Against </h2> <p>(Log in to edit the wiki and be the first to show why the bill should not pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> 26698@http://www.washingtonwatch.com Fri, 27 Jun 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/show/110_HR_5983.html 6/26/2008: House committee/subcommittee actions. Status: Ordered to be Reported (Amended) by Voice Vote. 37242@http://www.washingtonwatch.com Thu, 26 Jun 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/show/110_HR_5983.html#34508 I must be ignorant. How precisely do you make other people not attack you too much so your security works? --oregonnerd... 34508@http://www.washingtonwatch.com Sun, 11 May 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/show/110_HR_5983.html#34511 Seems like a reasonable bill to me. It defines the minimum professional requirements for the position of Chief Information Officer and also sets evaluation standards for the review of work performed by subcontractors before their contracts can be considered for renewal.... 34511@http://www.washingtonwatch.com Sun, 11 May 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/history/110_HR_5983.html?rev=23542 <p>H.R. 5983 would amend the Homeland Security Act of 2002 to enhance the information security of the Department of Homeland Security.</p> <h2 id="toc28"> Detailed Summary </h2> <p>(Log in to edit the wiki and be the first to provide a detailed summary of the bill!)</p> <!--Leave in the 'summary' tags if you want the latest summary from the Congressional Research Service automatically to replace the text between the tags once it becomes available. --> <h2 id="toc29"> Status of the Legislation </h2> <p>(Log in to edit the wiki and be the first to update the status of the bill!)</p> <!-- Leave in the 'status' tags if you want the latest reported status from THOMAS automatically to replace the text between the tags once it becomes available. --> <h2 id="toc30"> Points in Favor </h2> <p>(Log in to edit the wiki and be the first to show why the bill should pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> <h2 id="toc31"> Points Against </h2> <p>(Log in to edit the wiki and be the first to show why the bill should not pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> 23542@http://www.washingtonwatch.com Thu, 08 May 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/history/110_HR_5983.html?rev=23543 <p>H.R. 5983 would amend the Homeland Security Act of 2002 to enhance the information security of the Department of Homeland Security.</p> <h2 id="toc32"> Detailed Summary </h2> <p>(Log in to edit the wiki and be the first to provide a detailed summary of the bill!)</p> <!--Leave in the 'summary' tags if you want the latest summary from the Congressional Research Service automatically to replace the text between the tags once it becomes available. --> <h2 id="toc33"> Status of the Legislation </h2> <p>Latest Major Action: 5/7/2008: Referred to House committee. Status: Referred to the House Committee on Homeland Security.</p> <!-- Leave in the 'status' tags if you want the latest reported status from THOMAS automatically to replace the text between the tags once it becomes available. --> <h2 id="toc34"> Points in Favor </h2> <p>(Log in to edit the wiki and be the first to show why the bill should pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> <h2 id="toc35"> Points Against </h2> <p>(Log in to edit the wiki and be the first to show why the bill should not pass!)<br /> <!-- First editor: Go ahead and take out the sentence in parentheses, and this notice! --> </p> 23543@http://www.washingtonwatch.com Thu, 08 May 2008 00:00:00 EDT http://www.washingtonwatch.com/bills/show/110_HR_5983.html 5/7/2008: Referred to House committee. Status: Referred to the House Committee on Homeland Security. 35503@http://www.washingtonwatch.com Wed, 07 May 2008 00:00:00 EDT