H.R. 4579

119 HR 4579 IH: FEMA Cybersecurity Improvement Act
 U.S. House of Representatives
 2025-07-21
 text/xml
 EN
 Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.
 I  119th CONGRESS  1st Session  H. R. 4579  IN THE HOUSE OF REPRESENTATIVES   July 21, 2025   Mr. Thompson of Mississippi  introduced the following bill; which was referred to the  Committee on Homeland Security , and in addition to the Committee on  Transportation and Infrastructure , for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned   A BILL
To amend the Homeland Security Act of 2002 to provide for the mitigation of cybersecurity risks by the Federal Emergency Management Agency, and for other purposes.
1.
Short Title
This Act may be cited as the   FEMA Cybersecurity Improvement Act  .
2.
Mitigating cybersecurity risks
(a)
In general
Subsection (a) of section 523 of the Homeland Security Act of 2002 ( 6 U.S.C. 321l ) is amended—
(1)
in the matter preceding paragraph (1), by striking  as of the day before the date of the enactment of this section, ;
(2)
by redesignating paragraphs (3) through (8) as paragraphs (4) through (9), respectively; and
(3)
by inserting after paragraph (2) the following new paragraph:
(3)
mitigating cybersecurity risks (as such term is defined in section 2200) that could impede Agency operations;
 .
(b)
Plan for FEMA cybersecurity
Not later than one year after the date of the enactment of this section, the Administrator of the Federal Emergency Management Agency, in consultation with the Director of the Cybersecurity and Infrastructure Security Agency, shall submit to the Committee on Homeland Security and the Committee on Transportation and Infrastructure of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report on the progress of Agency efforts to mitigate cybersecurity risks within the Agency in accordance with paragraph (3) of section 523(a) of the Homeland Security Act of 2002, as amended by subsection (a).