S.Amdt. 2596
What it does: 3 changes: replaces text, inserts text in 2 places
Sen. Richard J. Durbin (D-IL)What it changes
3 changes to S. 754 · 1 shown in the bill's text
The Congressional Record cuts off the end of this amendment, so some changes may be missing.
Change 1: Replaces “contravention;” with “contravention, and instructions to remedy or mitigate such error or contravention, includ…”
In S. 754 · Placed on Calendar Senate
(B) incorporate, to the greatest extent practicable, existing processes and existing roles and responsibilities of Federal and non-Federal entities for information sharing by the Federal Government, including sector specific information sharing and analysis centers;
(C) include procedures for notifying entities that have received a cyber threat indicator from a Federal entity under this Act that is known or determined to be in error or in contravention of the requirements of this Act or another provision of Federal law or policy of such error or contravention[inserted: , and instructions to remedy or mitigate such error or contravention, including the destruction of such cyber threat indicator and the cessation of any defensive measures based on such indicator];
(D) include requirements for Federal entities receiving cyber threat indicators or defensive measures to implement and utilize security controls to protect against unauthorized access to or acquisition of such cyber threat indicators or defensive measures; and
Original wording
On page 11, line 10, strike “contravention;” and insert “contravention, and instructions to remedy or mitigate such error or contravention, including the destruction of such cyber threat indicator and the cessation of any defensive measures based on such indicator;”.
Change 2: Inserts new text on page 15, between lines 16 and 17
InsertsPrinted pageInserted: (3) Notification and mitigation of error or contravention.--
Inserted: (A) Requirement to notify.--An entity that shares a cyber threat indicator or defensive measure and subsequently determines that such cyber threat indicator or defensive measure was in error or in contravention of the requirements of this Act or another provision of Federal law or policy shall notify each entity with which such indicator or measure was shared of such error or contravention.
Inserted: (B) Requirements for receiving entity.--An entity that receives a notice under subparagraph (A)--
Inserted: (i) shall cease use of such cyber threat indicator or defensive measure;
Inserted: (ii) shall not further share such indicator or measure; and
Inserted: (iii) shall provide a similar notice to each other entity with which the receiving entity has shared such indicator or measure.
Original wording
On page 15, between lines 16 and 17, insert the following:
Change 3: Inserts new text on page 17, between lines 16 and 17
InsertsPrinted pageInserted: (II) a notification of error or contravention received from a Federal entity or sharing entity pursuant to section 3(b)(1)(C) or section 4(c)(3); or
Original wording
On page 17, between lines 16 and 17, insert the following:
Read automatically from the Congressional Record. Check the original before relying on it.
As printed
SA 2596. Mr. DURBIN submitted an amendment intended to be proposed by him to the bill S. 754, to improve cybersecurity in the United States through enhanced sharing of information about cybersecurity threats, and for other purposes; which was ordered to lie on the table; as follows:
On page 11, line 10, strike “contravention;” and insert “contravention, and instructions to remedy or mitigate such error or contravention, including the destruction of such cyber threat indicator and the cessation of any defensive measures based on such indicator;”.
On page 15, between lines 16 and 17, insert the following:
(3) Notification and mitigation of error or contravention.--
(A) Requirement to notify.--An entity that shares a cyber threat indicator or defensive measure and subsequently determines that such cyber threat indicator or defensive measure was in error or in contravention of the requirements of this Act or another provision of Federal law or policy shall notify each entity with which such indicator or measure was shared of such error or contravention.
(B) Requirements for receiving entity.--An entity that receives a notice under subparagraph (A)--
(i) shall cease use of such cyber threat indicator or defensive measure;
(ii) shall not further share such indicator or measure; and
(iii) shall provide a similar notice to each other entity with which the receiving entity has shared such indicator or measure.
On page 17, between lines 16 and 17, insert the following:
(II) a notification of error or contravention received from a Federal entity or sharing entity pursuant to section 3(b)(1)(C) or section 4(c)(3); or
Legislative Activity
Stay on top of the latest movement without scrolling through every action
Senate amendment submitted
August 4, 2015
View full timeline
Senate amendment submitted
August 4, 2015
Senate amendment submitted
August 4, 2015