S.Amdt. 5190

SA 5190. Mr. PORTMAN (for himself, Ms. Klobuchar, Mr. Blunt, and Mr. Peters) submitted an amendment intended to be proposed by him to the bill S. 4543, to authorize appropriations for fiscal year 2023 for military activities of the Department of Defense, for military construction, and for defense activities of the Department of Energy, to prescribe military personnel strengths for such fiscal year, and for other purposes; which was ordered to lie on the table; as follows:

At the appropriate place in subtitle G of title X, insert the following:

SECTION [ELL22383]. REQUIREMENT FOR INFORMATION SHARING AGREEMENTS.

(a) Short Title.--This section may be cited as the “Intragovernmental Cybersecurity Information Sharing Act”.

(b) Requirement.--

(1) In general.--Not later than 180 days after the date of enactment of this Act, the President, the Sergeant at Arms and Doorkeeper of the Senate, and the Chief Administrative Officer of the House of Representatives shall enter into 1 or more cybersecurity information sharing agreements to enhance collaboration between the executive branch and Congress on implementing cybersecurity measures to improve the protection of legislative branch information technology.

(2) Delegation.--If the President delegates the duties under paragraph (1), the designee of the President shall coordinate with appropriate Executive agencies (as defined in section 105 of title 5, United States Code, including the Executive Office of the President) and appropriate officers in the executive branch in entering any agreement described in paragraph (1).

(c) Elements.--The parties to a cybersecurity information sharing agreement under subsection (b) shall jointly develop such elements of the agreement as the parties find appropriate, which may include--

(1) direct and timely sharing of technical indicators and contextual information on cyber threats and vulnerabilities, and the means for such sharing;

(2) direct and timely sharing of classified and unclassified reports on cyber threats and activities consistent with the protection of sources and methods;

(3) seating of cybersecurity personnel of the Office of the Sergeant at Arms and Doorkeeper of the Senate or the Office of the Chief Administrative Officer of the House of Representatives at cybersecurity operations centers; and

(4) any other elements the parties find appropriate.

(d) Briefing to Congress.--Not later than 210 days after the date of enactment of this Act, and periodically thereafter, the President shall brief the Committee on Homeland Security and Governmental Affairs and the Committee on Rules and Administration of the Senate and the Committee on Homeland Security and the Committee on House Administration of the House of Representatives on the status of the implementation of the agreements required under subsection (b).