Hacked: Improving the Nation's Cyber Security (H.R. 3696)

What is H.R. 3696?

(Updated August 8, 2017)

This bill would require the Secretary of the Department of Homeland Security (DHS) to give more attention to it's cybersecurity efforts — all to prevent "cyber incidents". Think, preventing federal databases, U.S. retailers, and American information networks from being hacked.

By expanding existing programs and adding additional authorities, this bill hopes to protect the critical information networks that manage things like the nation's energy and water supplies. New cybersecurity efforts would be carried out by the National Cybersecurity and Communications Integration Center (NCCIC).

Under this bill, private and public organizations will collaborate to identify and thwart hackers trying to disrupt major operations or steal U.S. data.

Federal, state, and local governments would be required to work together to:

  - strengthen cybersecurity on a national level
  - disseminate cyber threat information those who need it
  - seek advice about cybersecurity strategies from the private sector
  - offer risk management help to network owners and operators  
  - research and develop strategies for cybersecurity technology.

Argument in favor

Strengthens national protections against hackers and cyber attacks, while creating a national infrastructure protection plan.

Argument opposed

Imposes excessive federal regulation on private industries and requires too much information sharing with the government. Not to mention the price tag.

Impact

National cybersecurity and the cybersecurity branches of the DHS.

Cost of H.R. 3696

While the Department of Homeland Security already takes on many of the cybersecurity efforts outlined in the bill (and gotten an additional $800 million in FY 2014 to do so), they still need more money for implementation. The CBO estimates that the bill would cost an additional $160 million over the 2015-2019 period.

Additional Info

In depth:

The introduction of this bill was in large part motivated by the series of high-profile data breaches this year at major U.S. retailers. Those cyber attacks impacted the sensitive financial and personal information of millions of Americans. Co-sponsor of the bill, Rep. Patrick Meehan (R-PA) commented in favor of the bill:

“Target, Niemen Marcus, and now White Lodging, which manages hotel franchises for chains like Hilton and Marriot — it seems that almost every day we hear news of more American consumers victimized by cyber attack. It’s only a matter of time before our power grids or financial networks are the latest victims of hackers.”

In the context of this bill, a cyber incident is anything that jeopardizes the security, confidentiality, or availability of information networks and storage. They can also be considered acts of terrorism when they disrupt, destroy, take control of, or alter an information system. 

Under this bill, the Secretary of DHS would have to, among other things:
  - manage all the federal efforts to keep regular American information systems secure
  - support said cybersecurity efforts.  
  - share cyber threat information with potentially vulnerable cyber networks 
  - promote information system security awareness across the nation
  - facilitate cyber attack response and recovery assistance

Media:

Sponsoring Rep. Michael McCaul (R-Texas) Statement

The Hill

Detailed CBO Cost Estimate

(Photo Credit: Flickr user Yuri Yu. Samoilov)