<billStatus>
 <version>
  3.0.0
 </version>
 <bill>
  <number>
   3608
  </number>
  <updateDate>
   2023-03-08T20:12:10Z
  </updateDate>
  <updateDateIncludingText>
   2023-03-08T20:12:10Z
  </updateDateIncludingText>
  <originChamber>
   House
  </originChamber>
  <type>
   HR
  </type>
  <introducedDate>
   2021-05-28
  </introducedDate>
  <congress>
   117
  </congress>
  <constitutionalAuthorityStatementText>
   &lt;pre&gt;[Congressional Record Volume 167, Number 94 (Friday, May 28, 2021)][House]From the Congressional Record Online through the Government Publishing Office [&lt;a href="https://www.gpo.gov"&gt;www.gpo.gov&lt;/a&gt;]By Mr. LIEU:H.R. 3608.Congress has the power to enact this legislation pursuantto the following:Article I Section VIII[Page H2679]&lt;/pre&gt;
  </constitutionalAuthorityStatementText>
  <committees>
   <item>
    <systemCode>
     hsgo00
    </systemCode>
    <name>
     Oversight and Accountability Committee
    </name>
    <chamber>
     House
    </chamber>
    <type>
     Standing
    </type>
    <activities>
     <item>
      <name>
       Referred to
      </name>
      <date>
       2021-05-28T14:10:45Z
      </date>
     </item>
    </activities>
   </item>
  </committees>
  <actions>
   <item>
    <actionDate>
     2021-05-28
    </actionDate>
    <text>
     Referred to the House Committee on Oversight and Reform.
    </text>
    <type>
     IntroReferral
    </type>
    <actionCode>
     H11100
    </actionCode>
    <sourceSystem>
     <code>
      2
     </code>
     <name>
      House floor actions
     </name>
    </sourceSystem>
    <committees>
     <item>
      <systemCode>
       hsgo00
      </systemCode>
      <name>
       Oversight and Accountability Committee
      </name>
     </item>
    </committees>
   </item>
   <item>
    <actionDate>
     2021-05-28
    </actionDate>
    <text>
     Introduced in House
    </text>
    <type>
     IntroReferral
    </type>
    <actionCode>
     Intro-H
    </actionCode>
    <sourceSystem>
     <code>
      9
     </code>
     <name>
      Library of Congress
     </name>
    </sourceSystem>
   </item>
   <item>
    <actionDate>
     2021-05-28
    </actionDate>
    <text>
     Introduced in House
    </text>
    <type>
     IntroReferral
    </type>
    <actionCode>
     1000
    </actionCode>
    <sourceSystem>
     <code>
      9
     </code>
     <name>
      Library of Congress
     </name>
    </sourceSystem>
   </item>
  </actions>
  <sponsors>
   <item>
    <bioguideId>
     L000582
    </bioguideId>
    <fullName>
     Rep. Lieu, Ted [D-CA-33]
    </fullName>
    <firstName>
     Ted
    </firstName>
    <lastName>
     Lieu
    </lastName>
    <party>
     D
    </party>
    <state>
     CA
    </state>
    <district>
     33
    </district>
    <isByRequest>
     N
    </isByRequest>
   </item>
  </sponsors>
  <policyArea>
   <name>
    Government Operations and Politics
   </name>
  </policyArea>
  <subjects>
   <legislativeSubjects/>
   <policyArea>
    <name>
     Government Operations and Politics
    </name>
   </policyArea>
  </subjects>
  <summaries>
   <summary>
    <versionCode>
     00
    </versionCode>
    <actionDate>
     2021-05-28
    </actionDate>
    <actionDesc>
     Introduced in House
    </actionDesc>
    <updateDate>
     2022-01-13T23:38:06Z
    </updateDate>
    <text>
     &lt;p&gt;&lt;strong&gt;Improving Contractor Cybersecurity Act&lt;/strong&gt;&lt;/p&gt; &lt;p&gt;This bill prohibits an executive agency from entering into a contract for information technology unless the contractor maintains a vulnerability disclosure policy (VDP) and program.&lt;/p&gt; &lt;p&gt;The contractor must report to the Cybersecurity and Infrastructure Security Agency (CISA) of the Department of Homeland Security, within seven days after the VDP is published, information regarding &lt;/p&gt; &lt;ul&gt; &lt;li&gt;any valid or credible report of a not previously known public vulnerability on a system that uses commercial software or services that affect, or are likely to affect, other parties in government or industry once a patch or viable mitigation is available; and&lt;/li&gt; &lt;li&gt;any other situation where the contractor determines it would be helpful or necessary to involve CISA.&lt;/li&gt; &lt;/ul&gt; &lt;p&gt;CISA must submit vulnerabilities to the MITRE Common Vulnerabilities and Exposures database and the National Institute of Standards and Technology National Vulnerability Database.&lt;/p&gt;
    </text>
   </summary>
  </summaries>
  <title>
   Improving Contractor Cybersecurity Act
  </title>
  <titles>
   <item>
    <titleType>
     Display Title
    </titleType>
    <title>
     Improving Contractor Cybersecurity Act
    </title>
   </item>
   <item>
    <titleType>
     Official Title as Introduced
    </titleType>
    <title>
     To amend title 41, United States Code, to require information technology contractors to maintain a vulnerability disclosure policy and program, and for other purposes.
    </title>
    <billTextVersionName>
     Introduced in House
    </billTextVersionName>
    <billTextVersionCode>
     IH
    </billTextVersionCode>
   </item>
   <item>
    <titleType>
     Short Title(s) as Introduced
    </titleType>
    <title>
     Improving Contractor Cybersecurity Act
    </title>
    <billTextVersionName>
     Introduced in House
    </billTextVersionName>
    <billTextVersionCode>
     IH
    </billTextVersionCode>
   </item>
  </titles>
  <textVersions>
   <item>
    <type>
     Introduced in House
    </type>
    <date>
     2021-05-28T04:00:00Z
    </date>
    <formats>
     <item>
      <url>
       https://www.govinfo.gov/content/pkg/BILLS-117hr3608ih/xml/BILLS-117hr3608ih.xml
      </url>
     </item>
    </formats>
   </item>
  </textVersions>
  <latestAction>
   <actionDate>
    2021-05-28
   </actionDate>
   <text>
    Referred to the House Committee on Oversight and Reform.
   </text>
  </latestAction>
 </bill>
 <dublinCore xmlns:dc="http://purl.org/dc/elements/1.1/">
  <dc:format>
   text/xml
  </dc:format>
  <dc:language>
   EN
  </dc:language>
  <dc:rights>
   Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.
  </dc:rights>
  <dc:contributor>
   Congressional Research Service, Library of Congress
  </dc:contributor>
  <dc:description>
   This file contains bill summaries and statuses for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.
  </dc:description>
 </dublinCore>
</billStatus>

H11100
2021-05-28
Oversight and Accountability Committee
hsgo00
2
House floor actions
Referred to the House Committee on Oversight and Reform.
IntroReferral
Intro-H
2021-05-28
9
Library of Congress
Introduced in House
IntroReferral
1000
2021-05-28
9
Library of Congress
Introduced in House
IntroReferral
2021-05-28T14:10:45Z
Referred to
House
Oversight and Accountability Committee
hsgo00
Standing
Congressional Research Service, Library of Congress
This file contains bill summaries and statuses for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.
text/xml
EN
Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.
2021-05-28
2021-05-28
Referred to the House Committee on Oversight and Reform.
House
Government Operations and Politics
L000582
33
Ted
Rep. Lieu, Ted [D-CA-33]
N
Lieu
D
CA
2021-05-28
Introduced in House
 <p><strong>Improving Contractor Cybersecurity Act</strong></p> <p>This bill prohibits an executive agency from entering into a contract for information technology unless the contractor maintains a vulnerability disclosure policy (VDP) and program.</p> <p>The contractor must report to the Cybersecurity and Infrastructure Security Agency (CISA) of the Department of Homeland Security, within seven days after the VDP is published, information regarding </p> <ul> <li>any valid or credible report of a not previously known public vulnerability on a system that uses commercial software or services that affect, or are likely to affect, other parties in government or industry once a patch or viable mitigation is available; and</li> <li>any other situation where the contractor determines it would be helpful or necessary to involve CISA.</li> </ul> <p>CISA must submit vulnerabilities to the MITRE Common Vulnerabilities and Exposures database and the National Institute of Standards and Technology National Vulnerability Database.</p>
2022-01-13T23:38:06Z
00
2021-05-28T04:00:00Z
Introduced in House
https://www.govinfo.gov/content/pkg/BILLS-117hr3608ih/xml/BILLS-117hr3608ih.xml
Improving Contractor Cybersecurity Act
Improving Contractor Cybersecurity Act
Display Title
IH
Introduced in House
To amend title 41, United States Code, to require information technology contractors to maintain a vulnerability disclosure policy and program, and for other purposes.
Official Title as Introduced
IH
Introduced in House
Improving Contractor Cybersecurity Act
Short Title(s) as Introduced
HR
2023-03-08T20:12:10Z
2023-03-08T20:12:10Z
3.0.0
H11100
2021-05-28
Oversight and Accountability Committee
hsgo00
2
House floor actions
Referred to the House Committee on Oversight and Reform.
IntroReferral
Intro-H
2021-05-28
9
Library of Congress
Introduced in House
IntroReferral
1000
2021-05-28
9
Library of Congress
Introduced in House
IntroReferral
L000582
33
Ted
Rep. Lieu, Ted [D-CA-33]
N
Lieu
D
CA
2021-05-28
Introduced in House
 <p><strong>Improving Contractor Cybersecurity Act</strong></p> <p>This bill prohibits an executive agency from entering into a contract for information technology unless the contractor maintains a vulnerability disclosure policy (VDP) and program.</p> <p>The contractor must report to the Cybersecurity and Infrastructure Security Agency (CISA) of the Department of Homeland Security, within seven days after the VDP is published, information regarding </p> <ul> <li>any valid or credible report of a not previously known public vulnerability on a system that uses commercial software or services that affect, or are likely to affect, other parties in government or industry once a patch or viable mitigation is available; and</li> <li>any other situation where the contractor determines it would be helpful or necessary to involve CISA.</li> </ul> <p>CISA must submit vulnerabilities to the MITRE Common Vulnerabilities and Exposures database and the National Institute of Standards and Technology National Vulnerability Database.</p>
2022-01-13T23:38:06Z
00
Improving Contractor Cybersecurity Act
Improving Contractor Cybersecurity Act
Display Title
IH
Introduced in House
To amend title 41, United States Code, to require information technology contractors to maintain a vulnerability disclosure policy and program, and for other purposes.
Official Title as Introduced
IH
Introduced in House
Improving Contractor Cybersecurity Act
Short Title(s) as Introduced
2021-05-28
Referred to the House Committee on Oversight and Reform.