The House of Representatives has approved the Cybersecurity Vulnerability Remediation Act (H.R. 3710), which would increase the Department of Homeland Security’s (DHS) responsibilities in addressing a variety of cybersecurity vulnerabilities.
The bill would allow DHS’s Cybersecurity and Infrastructure Security Agency (CISA) Director to “identify, develop, and disseminate actionable protocols to mitigate cybersecurity vulnerabilities – including for software or hardware that is no longer supported by the vendor.”
The bill also would require CISA to report to the House and Senate within one year about how it coordinates vulnerability disclosures.
Additionally, H.R. 3710 – introduced by Rep. Sheila Jackson Lee, D-Texas, and cosponsored by Reps. James Langevin, D-R.I., and Donald Payne, D-N.J. – would allow DHS’s Science and Technology Directorate to implement a competition to develop cybersecurity vulnerability remedies. Industry, individuals, academia, and others would be allowed to compete in the incentive-based program.
The bill does not appear to have a Senate companion measure.