Last month, Rep Obernolte (R,CA) introduced HR 912, the 9–8–8 Lifeline Cybersecurity Responsibility Act. This bill would establish broadly written cybersecurity requirements for the National Suicide Prevention Lifeline Program. No new funding is provided in the legislation.
This bill is very similar to HR 498 that was introduced by Obernolte in January of 2023. The bill was considered by the full House under the suspension of the rules process on March 5th, 2024 and passed by a voice vote. No action was taken on the measure in the Senate. A similar bill, S 1493, was introduced in the Senate by Sen Senima (I,AZ), but no action was taken.
Moving Forward
Obernolte and his sole cosponsor, Rep Dingle (D,MI), are members of the House Energy and Commerce Committee to which this bill is assigned for consideration. This means that there should be sufficient influence to see the bill considered in Committee. There has been increased concern in Congress about the increasing number of cybersecurity reporting requirements to which organizations are becoming subject. It is not clear at this point whether that concern would have an impact on this bill. That is because the bill makes clear that these requirements are being imposed because the program’s network administrator are receiving Federal funding, so it becomes an accountability issue rather than just a cybersecurity reporting issue.
Commentary
When HR 498 was introduced in 2023, I commented that:
“This is not a bill that I will be following here, it is a government system IT security bill with no specific impact on control system security. Having said that, if Congress has to go through the process of introducing legislation for each relatively minor federal program to ensure that each program has adequate cybersecurity provisions in place, we are going to see an exhaustive number of this type of legislation.”
In many ways that comment still holds true, but the point that
the crafters of this bill makes about federal funding being a legitimate basis
for federal oversight is too important to overlook. This is especially true when
federal spending on independent programs is being so thoroughly being called
into question by the Trump Administration. Not only does the federal government
have a right to conduct oversight when they are paying substantial portions of
the bills, but they also have an obligation to ensure that those monies are
spent wisely.
For more information about the provisions of this bill,
including an expanded commentary, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/hr-912-introduced
- subscription required.
No comments:
Post a Comment