---
kind: "diff"
citation: "H.R. 1997"
bill: "115-hr-1997"
heading: "Ukraine Cybersecurity Cooperation Act of 2017"
from: "ih"
from_label: "Introduced in House"
to: "eh"
to_label: "Engrossed in House"
sections_amended: 3
sections_added: 0
sections_removed: 0
url: "https://uscodex.org/bills/115/hr/1997/changes/eh"
---
# H.R. 1997 — what changed
H.R. 1997, Ukraine Cybersecurity Cooperation Act of 2017 — 3 sections amended between Introduced in House and Engrossed in House.
Edits are marked `struck` and `inserted`.
## Sec. 2 Findings
- Congress finds the following:
- (1) The United States established diplomatic relations with Ukraine in 1992, following its Ukraine’s independence from the Soviet Union.
- (2) The United States attaches great importance to the success of Ukraine’s transition to a modern democratic country with a flourishing market economy.
- (3) In 2014, days before the Presidential election an effort to undermine democracy in Ukraine, there took place a failed attempt to destroy hackers targeted the election system software through a cyber attack.country’s voting infrastructure just days before its 2014 presidential election.
- (4) In December 2015, a malicious cyber intrusion into Ukrainian power electric utility companies experienced unscheduled power outages impacting a large number of customers resulted in Ukraine from a cyber attack.widespread power outages.
- (5) In response to As a result of the December 2015 cyber attacks in incident, the United States sent an interagency team to Ukraine, Ukrainian President Petro Poroshenko emphasized including representatives from the need for a National Cyber Security System declaring that cyberspace has turned into Department of Energy, the Federal Bureau of Investigation, and the North American Electric Reliability Corporation, to help with the investigation and to assess the vulnerability of Ukraine’s infrastructure to cyber intrusion. The visit was followed up by another battlefield 101 for State independence.interagency delegation to Ukraine in March 2016 and a May 2016 United States-Ukrainian tabletop exercise on mitigating attacks against Ukraine’s infrastructure.
- (6) As a result of the December 2015 cyberattack, the United States sent interagency teams that included representatives from the Department In response to an escalating series of Energy, cyber attacks on the Federal Bureau of Investigation, country’s critical infrastructure—including its national railway system, its major stock exchanges, and the North American Electric Reliability Corporation to Ukraine to look its busiest airport—President Petro Poroshenko declared that “Cyberspace has turned into the safety of their infrastructure and to help with investigations. The visit was followed up by another interagency delegation to Ukraine in March 2016, and a May 2016 United States-Ukrainian tabletop exercise on mitigating attacks against Ukraine’s infrastructure.battlefield for state independence.”.
- (7) As noted by former Deputy Secretary of Commerce, Bruce Andrews, “Cybersecurity is a perfect example of a sector in which we can work together to increase national and economic security, create jobs, In May 2017, Ukraine cited activities on Russian social media platforms, including pro-Russian propaganda and provide mutual prosperity for both our economies. Together I am confident that we can provide leadership offensive cyber operations, as threats to enhance cybersecurity capabilities across Central and Southeast Europe.”.Ukrainian national security.
- (8) Following the June 2017 Petya malware event—a global cyber incident that primarily affected Ukraine—the Secretary General of the North Atlantic Treaty Organization (NATO) said “the cyber attacks we have seen * * * very much highlight the importance of the support, the help NATO provides * * * gives * * * or provides to Ukraine to strengthen its cyber defenses, technical and other kinds of support. We will continue to do that and it’s an important part of our cooperation with Ukraine.”.
- (9) In September 2017, the United States and Ukraine conducted the first United States-Ukraine Bilateral Cyber Dialogue in Kyiv, during which both sides affirmed their commitment to an internet that is open, interoperable, reliable, and secure, and the United States announced $5 million in new cyber assistance to strengthen Ukraine’s ability to prevent, mitigate, and respond to cyber attacks.
## Sec. 3 Statement of policy
- It is the policy of the United States to—
- (1) reaffirm the commitment of the United States to the United States-Ukraine Charter on Strategic Partnership, which highlights the importance of the bilateral relationship and outlines enhanced cooperation in the areas of defense, security, economics and trade, energy security, democracy, and cultural exchanges;
- (2) reaffirm the commitment of the United States to support continued cooperation between the North Atlantic Treaty Organization (NATO) NATO and Ukraine;
- (3) reaffirm the commitment of the United States to provide financial, economic, and technical assistance to Ukraine to achieve its goals for the Ukrainian Government to make progress on reforms support Ukraine’s political and anticorruption initiatives;economic reforms;
- (4) reaffirm the commitment of the United States to the Budapest Memorandum on security assurances; andSecurity Assurances;
- (5) assist the Ukrainian Government Ukraine’s efforts to improve enhance its cybersecurity strategy.capabilities; and
- (6) improve Ukraine’s ability to respond to Russian-supported disinformation and propaganda efforts in cyberspace, including through social media and other outlets.
## Sec. 4 United States cybersecurity cooperation with Ukraine
- (a) Sense of Congress— It is the sense of Congress that the Secretary of State should take the following actions, commensurate with United States interests, to assist Ukraine to improve its cybersecurity:
- (1) Provide Ukraine such support as may be necessary to increase most advanced security protection on secure government computers, computer networks from malicious cyber intrusions, particularly such systems networks that defend the critical infrastructure of Ukraine.
- (2) Provide Ukraine support in reducing reliance on Russian information and communications technology.
- (3) Assist Ukraine to build its capacity, expand cybersecurity information sharing, and cooperate in on international response cyberspace efforts.
- (b) Report on Ukraine’s cybersecurity—Report— Not later than 180 days after the date of the enactment of this Act, the Secretary of State shall submit to the Committee on Foreign Affairs of the House of Representatives and the Committee on Foreign Relations of the Senate a report on the status of United States cybersecurity cooperation with Ukraine to seek new areas for collaboration and assistance, as well as pursue cooperation with regional partners and organizations to address shared cyber challenges. Ukraine. Such report shall also include information relating to the following:
- (1) An update on the U.S. Department of Energy’s United States efforts to establish a United States-Ukraine Stakeholder Working Group as an element of their work with Ukraine strengthen Ukraine’s ability to develop a Ukrainian Cyber Security Program.prevent, mitigate, and respond to cyber incidents, including through training, education, technical assistance, capacity building, and cybersecurity risk management strategies.
- (2) An assessment capability to establish joint The potential for new areas of collaboration and mutual assistance between the United States and Ukrainian participation to—Ukraine in addressing shared cyber challenges, including cybercrime, critical infrastructure protection, and resilience against botnets and other automated, distributed threats.
- (A) conduct cybersecurity assessments of existing Ukrainian Government, military, critical infrastructure, and banking systems in order to identify critical vulnerabilities;
- (B) recommend mitigation strategies relating to such assessments;
- (C) combat cybercrime, including through training workshops and joint tabletop exercises covering priority cybersecurity scenarios; and
- (D) establish an information security awareness program.
- (3) An update of progress on NATO’s agreement efforts to establish an Incident Management Center help Ukraine develop technical capabilities to monitor counter cyber security events and laboratories to investigate cybersecurity incidents.threats.