S.Amdt. 2497

SA 2497. Mr. WHITEHOUSE submitted an amendment intended to be proposed by him to the bill S. 1197, to authorize appropriations for fiscal year 2014 for military activities of the Department of Defense, for military construction, and for defense activities of the Department of Energy, to prescribe military personnel strengths for such fiscal year, and for other purposes; which was ordered to lie on the table; as follows:

On page 301, between lines 16 and 17 insert the following:

SECTION 945. MAJOR CYBER INCIDENTS INVOLVING NETWORKS OF THE DEPARTMENT OF DEFENSE.

(a) Reports Required.--Not later than 180 days after the date of enactment of this Act, and annually thereafter, the Secretary of Defense shall submit to Congress a report on major cyber incidents involving networks of the Department of Defense.

(b) Elements.--Each report required under subsection (a) shall include the following:

(1) A summary of major cyber incidents against networks of the Department of Defense and the military departments.

(2) Aggregate statistics on the number of breaches against networks of the Department of Defense and the military departments, the volume of data exfiltrated, and the estimated cost of remedying the breaches.

(3) A discussion of the risk of cyber sabotage against the networks of the Department of Defense and the military departments.

(c) Form.--Each report submitted under this section shall be submitted in unclassified form, but may include a classified annex.