H.R. 4921 — what changed
STB Information Security Improvement Act
From Introduced in House to Reported in House. 1 section amended between Introduced in House and Reported in House.
Sec. 2 Requirements
In general— The Surface Transportation Board (in this section referred to as the “STB”) shall develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002, including improvements—
to identify controls, including risk management, weakness remediation, and security authorization;
changed
to protect controls, including configuration management, user identity and access management, and security training;
added
to detect controls, including continuous monitoring;
renumbered
was (2)(5)
to respond controls, including incident handling and reporting;
renumbered
was (2)(6)
to recover controls for contingency planning; and
renumbered
was (2)(7)
any additional tools that will improve the implementation of the recommendations.
Implementation—
In general— Not later than 180 days after the date of enactment of this Act, the STB shall submit the plan and timeline developed under subsection (a) to the Committee on Transportation and Infrastructure of the House of Representatives and the Committee on Commerce of the Senate.
Report— The STB shall report annually to such Committees on the progress on implementation of the recommendations until the implementation is complete.
Plan implementation— The STB shall designate an individual to implement the plan developed under subsection (a).