H.R. 3138 · 117th Congress · House

State and Local Cybersecurity Improvement Act

In Congress· Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Introduced
May 12, 21
Passed House
Jul 20, 21
Passed Senate
Pending
Sent to President
Pending
Signed into Law
Pending

Executive Summary

State and Local Cybersecurity Improvement Act

This bill requires the Cybersecurity and Infrastructure Security Agency (CISA) to establish the State and Local Cybersecurity Grant Program to address cybersecurity risks and threats to the information systems of state, local, or tribal organizations.

Eligible grant applicants (i.e., states and certain Indian tribes) must submit a cybersecurity plan—to be approved by CISA as a condition of disbursement—that describes how the applicant will use the funds to address cybersecurity risks and threats to their information systems. Grant funds must be used to implement, develop, or revise the applicant's cybersecurity plan or to assist with activities that address imminent cybersecurity risks or threats.

CISA must establish a State and Local Cybersecurity Resilience Committee to provide state, local, and tribal stakeholder expertise, situational awareness, and recommendations to CISA on how to address cybersecurity risks and threats.

CISA must develop and maintain a resource guide for state, local, tribal, and territorial government officials to assist with identifying, preparing for, detecting, protecting against, responding to, and recovering from cybersecurity risks, threats, and incidents. In addition, CISA must develop and make publicly available a Homeland Security Strategy to Improve the Cybersecurity of State, Local, Tribal, and Territorial Governments.

Finally, CISA must assess the feasibility of implementing a short-term rotational program to detail approved state, local, tribal, and territorial government employees to CISA in cyber workforce positions.

Previous Versions

07Jun 1, 2021

State and Local Cybersecurity Improvement Act

This bill requires the Cybersecurity and Infrastructure Security Agency (CISA) to establish the State and Local Cybersecurity Grant Program to address cybersecurity risks and threats to the information systems of state, local, or tribal organizations.

Eligible grant applicants (i.e., states and certain Indian tribes) must submit a cybersecurity plan—to be approved by CISA as a condition of disbursement—that describes how the applicant will use the funds to address cybersecurity risks and threats to their information systems. Grant funds must be used to implement, develop, or revise the applicant's cybersecurity plan or to assist with activities that address imminent cybersecurity risks or threats.

CISA must establish a State and Local Cybersecurity Resilience Committee to provide state, local, and tribal stakeholder expertise, situational awareness, and recommendations to CISA on how to address cybersecurity risks and threats.

CISA must develop and maintain a resource guide for state, local, tribal, and territorial government officials to assist with identifying, preparing for, detecting, protecting against, responding to, and recovering from cybersecurity risks, threats, and incidents. In addition, CISA must develop and make publicly available a Homeland Security Strategy to Improve the Cybersecurity of State, Local, Tribal, and Territorial Governments.

Finally, CISA must assess the feasibility of implementing a short-term rotational program to detail approved state, local, tribal, and territorial government employees to CISA in cyber workforce positions.

00May 12, 2021

State and Local Cybersecurity Improvement Act

This bill requires the Cybersecurity and Infrastructure Security Agency (CISA) to establish the State and Local Cybersecurity Grant Program to address cybersecurity risks and threats to the information systems of state, local, or tribal governments.

Eligible grant applicants (i.e., states and certain Indian tribes) must submit a cybersecurity plan—to be approved by CISA as a condition of disbursement—that describes how the applicant will use the funds to address cybersecurity risks and threats to their information systems. Grant funds must be used to implement, develop, or revise the applicant's cybersecurity plan or to assist with activities that address imminent cybersecurity risks or threats.

CISA must establish a State and Local Cybersecurity Resiliency Committee to provide state, local, and tribal stakeholder expertise, situational awareness, and recommendations to CISA on how to address cybersecurity risks and threats.

CISA must develop and maintain a resource guide for state, local, tribal, and territorial government officials to assist with identifying, preparing for, detecting, protecting against, responding to, and recovering from cybersecurity risks, threats, and incidents. In addition, CISA must develop and make publicly available a Homeland Security Strategy to Improve the Cybersecurity of State, Local, Tribal, and Territorial Governments.

Finally, CISA must assess the feasibility of implementing a short-term rotational program to detail approved state, local, tribal, and territorial government employees to CISA in cyber workforce positions.

Action Timeline

20
  1. JUL 21, 2021IntroReferral

    Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

  2. JUL 20, 2021Floor

    Ms

    Clarke (NY) moved to suspend the rules and pass the bill, as amended.

  3. JUL 20, 2021Floor

    Considered under suspension of the rules. (consideration

    CR H3689-3695; text: CR H3689-3693)

    3689Yea
    3695Nay
    0NV
  4. JUL 20, 2021Floor

    DEBATE - The House proceeded with forty minutes of debate on H.R. 3138.

  5. JUL 20, 2021Floor

    At the conclusion of debate, the Yeas and Nays were demanded and ordered

    Pursuant to the provisions of clause 8, rule XX, the Chair announced that further proceedings on the motion would be postponed.

  6. JUL 20, 2021Floor

    Pursuant to the provisions of H

    Res. 535, proceedings on H.R. 3138 are considered vacated.

  7. JUL 20, 2021Floor

    Passed/agreed to in House

    Pursuant to section 7 of H. Res. 535, and the motion offered by Mr. Hoyer, the following bills passed under suspension of the rules: H.R. 678; H.R. 1036; H.R. 1079, as amended; H.R. 1158; H.R. 1250; H.R. 1754; H.R. 1833, as amended; H.R. 1850; H.R. 1871; H.R. 1877, as amended; H.R. 1893; H.R. 1895; H.R. 2118; H.R. 2795, as amended; H.R. 2928; H.R. 2980, as amended; H.R. 3003; H.R. 3138, as amended; H.R. 3223; H.R. 3263; and H.R. 3264; and the following resolutions were agreed to under suspension of the rules: H. Res. 277; and H. Res. 294.(consideration: CR H3715-3730; text: CR H3723-3727)

    3715Yea
    3730Nay
    0NV
  8. JUL 20, 2021Floor

    Pursuant to section 7 of H

    Res. 535, and the motion offered by Mr. Hoyer, the following bills passed under suspension of the rules: H.R. 678; H.R. 1036; H.R. 1079, as amended; H.R. 1158; H.R. 1250; H.R. 1754; H.R. 1833, as amended; H.R. 1850; H.R. 1871; H.R. 1877, as amended; H.R. 1893; H.R. 1895; H.R. 2118; H.R. 2795, as amended; H.R. 2928; H.R. 2980, as amended; H.R. 3003; H.R. 3138, as amended; H.R. 3223; H.R. 3263; and H.R. 3264; and the following resolutions were agreed to under suspension of the rules: H. Res. 277; and H. Res. 294. (consideration: CR H3715-3730; text: CR H3723-3727)

    3715Yea
    3730Nay
    0NV
  9. JUN 01, 2021Committee

    Reported (Amended) by the Committee on Homeland Security. H. Rept. 117-48.

    117Yea
    48Nay
    0NV
  10. JUN 01, 2021Committee

    Reported (Amended) by the Committee on Homeland Security. H. Rept. 117-48.

    117Yea
    48Nay
    0NV
  11. JUN 01, 2021Calendars

    Placed on the Union Calendar, Calendar No. 31.

  12. MAY 18, 2021Committee

    Subcommittee on Cybersecurity, Infrastructure Protection, and Innovation Discharged.

  13. MAY 18, 2021Committee

    Subcommittee on Emergency Preparedness, Response, and Recovery Discharged.

  14. MAY 18, 2021Committee

    Committee Consideration and Mark-up Session Held.

  15. MAY 18, 2021Committee

    Ordered to be Reported (Amended).

  16. MAY 13, 2021Committee

    Referred to the Subcommittee on Cybersecurity, Infrastructure Protection, and Innovation.

  17. MAY 13, 2021Committee

    Referred to the Subcommittee on Emergency Preparedness, Response, and Recovery.

  18. MAY 12, 2021IntroReferral

    Introduced in House

  19. MAY 12, 2021IntroReferral

    Introduced in House

  20. MAY 12, 2021IntroReferral

    Referred to the House Committee on Homeland Security.

Committees

8

Homeland Security and Governmental Affairs Committee

ssga00

Referred: Jul 21, 2021

Active

Homeland Security Committee

hshm00

Referred: Jun 1, 2021

Active

Homeland Security Committee

hshm00

Referred: May 18, 2021

Active

Emergency Management and Technology Subcommittee

hshm12

Referred: May 18, 2021

Active

Cybersecurity and Infrastructure Protection Subcommittee

hshm08

Referred: May 18, 2021

Active

Emergency Management and Technology Subcommittee

hshm12

Referred: May 13, 2021

Active

Cybersecurity and Infrastructure Protection Subcommittee

hshm08

Referred: May 13, 2021

Active

Homeland Security Committee

hshm00

Referred: May 12, 2021

Active