All bills
S. 5008·116th Congress·Senate Bill

Federal System Incident Response Act of 2020

Stage not supplied

The source supplies the latest action, but no lifecycle stage.

Latest action (10 Dec 2020): Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

What this bill does

This bill, S. 5008, titled the "Federal System Incident Response Act of 2020," would require federal agencies to notify individuals affected by certain cybersecurity incidents, particularly those involving sensitive personal information. Agencies would also need to share information about these incidents with the Cybersecurity and Infrastructure Security Agency (CISA), the Department of Defense, and the Office of Management and Budget (OMB) to help prevent future occurrences.

The bill specifies that CISA would be responsible for continuously monitoring federal information system incidents and producing an annual report on findings. OMB would develop guidance to define what constitutes a "major incident." Additionally, each federal agency would be required to create training programs to help its employees identify and respond to cybersecurity incidents.

This bill was introduced in the Senate on December 10, 2020, by Senator Gary Peters. It was referred to the Committee on Homeland Security and Governmental Affairs and has not yet advanced beyond the introduction stage.

Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.

Official summary

Federal System Incident Response Act of 2020

This bill requires federal agencies to notify impacted individuals following major or significant cybersecurity incidents, or incidents determined to have involved sensitive personal information.

Each agency must make available information relating to an incident to the Cybersecurity and Infrastructure Security Agency (CISA), the Department of Defense, and the Office of Management and Budget (OMB) to help mitigate future incidents.

CISA shall perform continuous monitoring of incidents of federal information systems and produce an annual report. OMB shall develop guidance on what constitutes a major incident.

Each agency must develop training on how to identify and respond to an incident.

Timeline

  1. 10 Dec 2020

    Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

Common questions

What does S. 5008 do?
This bill, S. 5008, titled the "Federal System Incident Response Act of 2020," would require federal agencies to notify individuals affected by certain cybersecurity incidents, particularly those involving sensitive personal information. Agencies would also need to share information about these incidents with the Cybersecurity and Infrastructure Security Agency (CISA), the Department of Defense, and the Office of Management and Budget (OMB) to help prevent future occurrences. The bill specifies that CISA would be responsible for continuously monitoring federal information system incidents and producing an annual report on findings. OMB would develop guidance to define what constitutes a "major incident." Additionally, each federal agency would be required to create training programs to help its employees identify and respond to cybersecurity incidents. This bill was introduced in the Senate on December 10, 2020, by Senator Gary Peters. It was referred to the Committee on Homeland Security and Governmental Affairs and has not yet advanced beyond the introduction stage.
Has S. 5008 become law?
The source does not supply a confirmed lifecycle stage for S. 5008. Check the latest action and official source below.
Who sponsored S. 5008?
S. 5008 was sponsored by Sen. Peters, Gary C. [D-MI] (D-MI), with 1 cosponsor.
What's the latest action on S. 5008?
Read twice and referred to the Committee on Homeland Security and Governmental Affairs. (10 Dec 2020).

Related bills in Government Operations and Politics

More bills from Sen. Peters, Gary C. [D-MI]

Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.