FEMA Cybersecurity Improvement Act

[Congressional Bills 119th Congress]
[From the U.S. Government Publishing Office]
[H.R. 4579 Introduced in House (IH)]

<DOC>






119th CONGRESS
  1st Session
                                H. R. 4579

     To amend the Homeland Security Act of 2002 to provide for the 
 mitigation of cybersecurity risks by the Federal Emergency Management 
                    Agency, and for other purposes.


_______________________________________________________________________


                    IN THE HOUSE OF REPRESENTATIVES

                             July 21, 2025

 Mr. Thompson of Mississippi introduced the following bill; which was 
referred to the Committee on Homeland Security, and in addition to the 
  Committee on Transportation and Infrastructure, for a period to be 
subsequently determined by the Speaker, in each case for consideration 
  of such provisions as fall within the jurisdiction of the committee 
                               concerned

_______________________________________________________________________

                                 A BILL


 
     To amend the Homeland Security Act of 2002 to provide for the 
 mitigation of cybersecurity risks by the Federal Emergency Management 
                    Agency, and for other purposes.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``FEMA Cybersecurity Improvement 
Act''.

SEC. 2. MITIGATING CYBERSECURITY RISKS.

    (a) In General.--Subsection (a) of section 523 of the Homeland 
Security Act of 2002 (6 U.S.C. 321l) is amended--
            (1) in the matter preceding paragraph (1), by striking ``as 
        of the day before the date of the enactment of this section,'';
            (2) by redesignating paragraphs (3) through (8) as 
        paragraphs (4) through (9), respectively; and
            (3) by inserting after paragraph (2) the following new 
        paragraph:
            ``(3) mitigating cybersecurity risks (as such term is 
        defined in section 2200) that could impede Agency 
        operations;''.
    (b) Plan for FEMA Cybersecurity.--Not later than one year after the 
date of the enactment of this section, the Administrator of the Federal 
Emergency Management Agency, in consultation with the Director of the 
Cybersecurity and Infrastructure Security Agency, shall submit to the 
Committee on Homeland Security and the Committee on Transportation and 
Infrastructure of the House of Representatives and the Committee on 
Homeland Security and Governmental Affairs of the Senate a report on 
the progress of Agency efforts to mitigate cybersecurity risks within 
the Agency in accordance with paragraph (3) of section 523(a) of the 
Homeland Security Act of 2002, as amended by subsection (a).
                                 <all>