Amendment adds reporting requirements on plans of action and milestones for any known information security vulnerability.

1. 1

   Change 1: Strikes “and”

   StrikesPage 15, line 4Printed page

   Struck: and

   Original wording

   Page 15, line 4, strike “and”.

2. 2

   Change 2: Replaces the period on page 15, line 7 with “; and”

   ReplacesPrinted page

   …[struck: .][inserted: ; and]

   Original wording

   Page 15, line 7, strike the period and insert “; and”.

3. 3

   Change 3: Inserts new text on page 15, line 7

   InsertsPrinted page

   Inserted: (iii) include a summary of any plan of action and milestones to address any known information security vulnerability, as identified pursuant to a widely accepted industry or Government standard, including--

   Inserted: (I) specific information about the industry or Government standard used to identify the known information security vulnerability;

   Inserted: (II) a detailed time line with specific deadlines for addressing the known information security vulnerability; and

   Inserted: (III) an update of any such time line and the rationale for any deviation from the time line.

   Original wording

   Page 15, after line 7, insert the following:

Read automatically from the Congressional Record. Check the original before relying on it.

As printed