H.R. 9492: Cybersecurity Logging Enforcement and Accountability Reporting Act

This bill would require the Department of Homeland Security (DHS) to prepare a report for Congress about how well it is meeting federal cybersecurity event logging requirements. Event logging means keeping records of cybersecurity incidents and related system activity so incidents can be detected, investigated, and reviewed.

What the report must cover

Within 180 days after the bill becomes law, the Secretary of Homeland Security would have to submit a report, through the DHS Under Secretary for Management, to certain House and Senate committees. The report would need to explain:

• How DHS is currently implementing the cybersecurity event logging requirements.
• Any gaps in guidance that make it harder for DHS to meet those requirements.
• Any policies inside DHS that prevent full compliance.
• Any resource shortfalls, such as staffing, funding, tools, or technology, that prevent compliance.
• Recommendations for changes in policy, guidance, or resources that would help DHS meet the requirements.

What rules the report focuses on

The report would examine DHS’s efforts to satisfy event logging requirements under:

• Executive Order 14028
• OMB Memorandum M-26-14
• NIST Special Publication 800-53

Public release and follow-up

The report would have to be submitted in unclassified form, along with an unclassified executive summary. DHS would also have to post that executive summary on a publicly accessible website. Within 30 days after the report is submitted, the Secretary of Homeland Security would need to brief the relevant congressional committees on the report’s findings, conclusions, and recommendations.

Who would receive the report

The report would go to the House Committee on Homeland Security, the House Committee on Appropriations, the Senate Committee on Homeland Security and Governmental Affairs, and the Senate Committee on Appropriations.

Relevant Companies

None found