1. Short title
This Act may be cited as the “Federal Information Security Modernization Act of 2021”.
Federal Information Security Modernization Act of 2021
A BILL
To modernize Federal information security management, and for other purposes.
2. Table of contents
The table of contents for this Act is as follows:
3. Definitions
In this Act, unless otherwise specified:
Additional cybersecurity procedure— The term additional cybersecurity procedure has the meaning given the term in section 3552(b) of title 44, United States Code, as amended by this Act.
Agency— The term agency has the meaning given the term in section 3502 of title 44, United States Code.
Appropriate congressional committees— The term appropriate congressional committees means—
the Committee on Homeland Security and Governmental Affairs of the Senate;
the Committee on Oversight and Reform of the House of Representatives; and
the Committee on Homeland Security of the House of Representatives.
Director— The term Director means the Director of the Office of Management and Budget.
Incident— The term incident has the meaning given the term in section 3552(b) of title 44, United States Code.
Penetration test— The term penetration test has the meaning given the term in section 3552(b) of title 44, United States Code, as amended by this Act.
Threat hunting— The term threat hunting means proactively and iteratively searching for threats to systems that evade detection by automated threat detection systems.
Verification specification— The term verification specification means a specification developed under section 11331(f) of title 40, United States Code, as amended by this Act.