Section 1 Short title
This Act may be cited as the “Cybersecurity Logging Enforcement and Accountability Reporting Act”.
Cybersecurity Logging Enforcement and Accountability Reporting Act
A BILL
To require the Secretary of Homeland Security to produce a report that identifies gaps in resources, guidance, and policies to satisfy all event logging requirements for cybersecurity incidents at the Department of Homeland Security, and for other purposes.
Sec. 2 Report on gaps in resources, guidance, and policies on event logging of cybersecurity incidents at the Department of Homeland Security
Report—
In general— Not later than 180 days after the date of the enactment of this Act, the Secretary of Homeland Security, acting through the Under Secretary for Management of the Department of Homeland Security, shall submit to the appropriate congressional committees a report on the Department’s efforts to satisfy all requirements under Executive Order 14028, the Office of Management and Budget Memorandum (OMB) M–26–14, and the National Institute of Standards and Technology (NIST) Special Publication 800–53 for event logging of cybersecurity incidents.
Elements— The report under paragraph (1) shall include the following:
An analysis of the Department of Homeland Security’s current implementation status of the requirements for event logging of cybersecurity incidents.
An identification of any gaps in guidance that prevent the Department from satisfying such requirements.
An identification of any policies that prevent the Department from satisfying such requirements.
An identification of any gaps in resources that prevent the Department from satisfying such requirements.
Recommendations for policies, guidance, or resources, as the case may be, that would support the Department in satisfying such requirements.
Form— The report under paragraph (1) shall be submitted in unclassified form, and shall include an unclassified executive summary.
Publication— The unclassified executive summary of the report required under paragraph (1) shall be published on a publicly accessible website of the Department of Homeland Security.
Briefing— Not later than 30 days after the submission of the report under subsection (a), the Secretary of Homeland Security shall provide to the appropriate congressional committees a briefing on the findings, conclusions, and recommendations contained in such report.
Definition— In this section, the term “appropriate congressional committees” means—
the Committee on Homeland Security and the Committee on Appropriations of the House of Representatives; and
the Committee on Homeland Security and Governmental Affairs and the Committee on Appropriations of the Senate.