0
Proactive Cyber Initiatives Act of 2022
12/29/2022, 6:18 PM
Summary of Bill HR 8403
Key provisions of the bill include the establishment of a Cybersecurity Task Force, which will be responsible for developing and implementing strategies to protect critical infrastructure from cyber attacks. The task force will also work to improve information sharing between government agencies and private sector entities to better respond to cyber threats.
Additionally, the bill calls for the creation of a National Cybersecurity Incident Response Center, which will serve as a central hub for coordinating responses to cyber incidents and providing support to affected organizations. The center will work closely with federal, state, and local agencies to ensure a coordinated and effective response to cyber attacks. Furthermore, the bill includes provisions for increasing funding for cybersecurity research and development, as well as for training and education programs to build a skilled cybersecurity workforce. It also emphasizes the importance of international cooperation in combating cyber threats and calls for increased collaboration with foreign partners. Overall, the Proactive Cyber Initiatives Act of 2022 aims to strengthen the nation's cybersecurity defenses and improve its ability to prevent and respond to cyber attacks. The bill reflects a bipartisan effort to address the growing threat of cybercrime and protect the country's critical infrastructure from malicious actors.
Congressional Summary of HR 8403
Proactive Cyber Initiatives Act of 2022
This bill addresses proactive cybersecurity initiatives.
Specifically, each department or agency must (1) conduct regular penetration testing on the information systems of such department or agency; and (2) provide to the Cybersecurity and Infrastructure Security Agency (CISA) and the Office of Management and Budget a report on the results of such testing, including identifying any risks discovered and describing how cybersecurity may be improved.
CISA must issue guidance to facilitate the implementation of such requirements.
Further, CISA must report to Congress, including an analysis of
- whether increased engagement is needed from national laboratories and the private sector to assist with the protection of the information systems of agencies through the use of active defense techniques, deception technologies, and penetration testing;
- the feasibility and benefits of consolidating within CISA proactive cybersecurity initiatives; and
- whether CISA requires additional authorities or resources to carry out proactive cybersecurity initiatives for agencies.
The bill directs the Office of the National Cyber Director to deconflict overlapping cybersecurity jurisdiction between agencies.
The Government Accountability Office must report to Congress on penetration testing and active defense techniques, and study innovative uses of proactive cybersecurity initiatives.
