Showing posts with label HR 4552. Show all posts
Showing posts with label HR 4552. Show all posts

Tuesday, July 22, 2025

Review - Bills Introduced – 7-21-25

Yesterday, with both the House and Senate in session, there were 50 bills introduced. Three of those bills may receive additional coverage in this blog:

HR 4552 Transportation, Housing and Urban Development, and Related Agencies [THUD] Appropriations Act, 2026 Womack, Steve [Rep.-R-AR-3].

HR 4553 Energy and Water Development and Related Agencies [EWR] Appropriations Act, 2026 Fleischmann, Charles J. "Chuck" [Rep.-R-TN-3] 

HR 4579 To amend the Homeland Security Act of 2002 to provide for the mitigation of cybersecurity risks by the Federal Emergency Management Agency, and for other purposes. Thompson, Bennie G. [Rep.-D-MS-2]


For more information on these bills, including legislative history for similar bills in the 118th, as well as a mention of two bills in passing (a slap at the Wall Street Journal and a hurricane warning study) see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/bills-introduced-7-21-25 - subscription required.

Friday, September 15, 2023

Review - HR 4552 Introduced – 2023 FISMA

Back in July, Rep Mace (R,SC) introduced HR 4552, the Federal Information Security Modernization Act of 2023. This is the perennial update of the Federal agency cybersecurity rules. It includes two items of potentially broader interest here: penetration testing policy and vulnerability disclosure policy.

Moving Forward

Mace, and all four of her cosponsors {Rep Raskin (D,MD) Rep Comer (R,KY), Rep Connolly (D,VA) and Rep Davis (D,NC)}, are members of the House Oversight and Accountability Committee to which the bill was assigned for consideration. This means that there is almost certainly sufficient influence to see the bill considered in Committee. I do not see anything that would engender organized opposition to the legislation. I suspect that there would be significant bipartisan support for the bill, probably enough that it could be considered under the House’s suspension of the rules process.

It will be interesting to see how much the Committee’s investigative efforts directed at the Biden Administration will affect their ability to consider bipartisan legislation like HR 4552.

Commentary

I found it odd that §12’s new §3559b removed the contractor cybersecurity requirements of 15 U.S.C. 278g–3e. There is nothing in that section that deals with VDP requirements. It looks to my suspicious mind like someone is trying to reduce cybersecurity requirements for contractors. In any case the deletion of that section should be remove from this section since it has nothing to do with VDP.

 

For more details about the penetration testing and vulnerability disclosure program provisions of the legislation, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/hr-4552-introduced - subscription required.

Wednesday, July 12, 2023

Bills Introduced – 7-11-23

Yesterday, with both the House and Senate in session, there were 80 bills introduced. Five of those bills may receive additional coverage in this blog.

HR 4540 To amend the Safe Drinking Water Act to establish a program to provide grants to suppliers of water for the purpose of making infrastructure improvements to public water systems, and for other purposes. Cuellar, Henry [Rep.-D-TX-28]

HR 4542 To support research, development, and other activities to develop innovative vehicle technologies, and for other purposes. Dingell, Debbie [Rep.-D-MI-6] 

HR 4552 To improve the cybersecurity of the Federal Government, and for other purposes. Mace, Nancy [Rep.-R-SC-1] 

S 2226 National Defense Authorization Act for Fiscal Year 2024 Reed, Jack [Sen.-D-RI] 

S 2251 A bill to improve the cybersecurity of the Federal Government, and for other purposes. Peters, Gary C. [Sen.-D-MI]

I will be watching both HR 4540 and HR 4542 for language hat specifically covers cybersecurity within the scope of the coverage of the legislation.

HR 4552 and S 2251 are both probably updates to the Federal Information Security Modernization Act of 2014. I do not normally cover that legislation, but I will be watching for language and definitions that may have significant impact on operational technology cybersecurity in non-federal agencies.

I will be covering the Senate version of the NDAA, S 2226.

Sunday, July 25, 2021

Review - HR 4550 Introduced – FY 2022 THUD Spending

Last week, Rep Price (D,NC) introduced the committee marked-up version of HR 4550, the Transportation, Housing and Urban Development, and Related Agencies Appropriations Act, 2022. The Committee Report on the bill is also available. The bill includes one pipeline provision of note and one industrial control system provision. Additional information and guidance is provided in the Report on automated vehicles, aviation safety, rail cybersecurity, and LNG by rail.

This bill is being rolled into the first FY 2022 minibus, HR 4502 as Division G. The House Rules Committee will be meeting tomorrow to formulate the Rule on that minibus, which will be considered on the floor of the House this coming week. There have been 78 amendments suggested for Division G, none of which are of particular interest here. The combined bill (because of the lack of the Hyde Amendment – abortion funding restrictions) will probably pass on a party-line vote. There is a chance that a Hyde Amendment provision will be added in a floor vote, that would probably increase the chances of this bill passing.

For more details about the bill and report, including discussions about the automated vehicles, aviation safety, rail cybersecurity, and LNG by rail, see my article on CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/hr-4550-introduced - subscription required

Sunday, October 13, 2019

HR 4552 Introduced – TWICs for Veterans


Last month Rep. Babin (R,TX) introduced HR 4552, the Honorably Discharged Transportation Worker Identification Credential Act of 2019. The bill would require DHS to establish a program for issuing honorably discharged veterans an interim Transportation Workers Identification Credential (TWIC) pending the normal processing of a TWIC application.

Requirements


The bill would amend 46 USC 70105 by adding a new subsection (r), Provisional Security Cards. The amendment would require DHS to establish provisional transportation security cards (PTSC). Such cards would “be used during the beginning on the date a covered veteran applies for a transportation security card issued under subsection (b) and ending on the date on which such card is issued or denied to such veteran” {new §70105(r)(1)}. The PTSC would “authorize such covered veterans to have access to secure areas in the same manner as transportation security cards issued under subsection (b)” {new §70105(r)(1)}.

A ‘covered veteran’ would be a person who {new §70105(r)(3)}:

Served in the active military, naval, or air service, and who was discharged or released there from under honorable conditions; and
During such service was subjected to a rigorous security screening

DHS would be allowed, in consultation with DOD and the Department of Veterans Affairs, “prescribe a time period following discharge or separation from service in the Armed Forces during which an individual may be considered a covered veteran” {new §70105(r)(4)}.

Moving Forward


Babin is not a member of the House Homeland Security Committee to which this bill was assigned for consideration. This means that the bill is unlikely to be considered in Committee. I do not see anything in this bill which would engender any organized opposition to the bill if it were considered.

This bill could be offered as an amendment to a DHS spending bill or authorization bill (if either is actually considered with an amendment process this session).

Commentary


As a 15-year Army veteran I appreciate the thought behind this bill. Giving veterans assistance in their post service job search process is an admirable effort and should be encouraged. However, there are some serious problems with this rather simplistic bill.

First, providing someone a PTSC who has no chance of getting a TWIC is a sure recipe for creating a number of security issues at facilities where the possession of a TWIC is a prerequisite for unaccompanied access. There is a way to avoid most of these potential problems by requiring a covered veteran applicant to certify that their record contains none of the TWIC disqualifying offenses listed in §70105(c)(1). I would amend the bill by inserting a new paragraph (4):

(4) The Secretary will require applicants wishing to receive a PTSC to certify that they have none of the disqualifying actions described in (c)(1) in their record.

This will not eliminate all of the potential security issues, but it will significantly reduce them.

The remaining issues will have to be addressed by regulations and processes subsequently put in place by DHS. The immediate problem is whether or not the PTSC will include a biometric identification component or whether it would be just a visual inspection access control tool. If it does not include machine-readable biometric identification data then it will not provide access ‘in the same manner as transportation security cards issued under subsection (b)’. Providing for issuing a PTSC with machine-readable biometric data on demand at each TWIC application facility will be expensive.

This leads to the next problem overlooked by this bill. The Transportation Security Administration is currently required §70105(h) to charge each applicant for a TWIC a fee to cover the cost of processing the application. That should mean that veterans requesting a PTSC should be charged an additional fee for those credentials. Given the relatively small number of veterans that would be expected to apply for PTSC, this fee could be relatively high because of the additional equipment and training necessary to issue such documents. I think that this is counter to the intent of this bill, so I would further amend the bill by inserting a new paragraph (5):

(5) Notwithstanding the requirements of (h) in this section, the Secretary will not charge applicants any additional fees for the issuance of a PTSC.

Finally, there are no time requirements in the bill, either for initiation or termination of the program; or for feedback to Congress of the efficacy of the program. To address these issues, I would insert the following two paragraphs:

(6) The Secretary will begin issuing the PTSC described in (1) within one year of the passage of this bill. The PTSC program will terminate on the date five years from the passage of this bill.

(7) Within one year of start of issuance of PTSC, the Secretary will provide a report to Congress describing:

(A) The number of TWIC applicants who were issued a PTSC;

(B) The number of TWIC applicants who were provided a PTSC, but were subsequently denied a TWIC;

(C) The average length of time that individuals were required to rely on a PTSC for access under this section;

(D) The costs associated with the establishment and operation of the PTSC program and the fees that would have been required to be assed against applicants in the program for the first year to cover said costs;

(E) The fee which would be required going forward to be assessed for the issuance of a PTSC to cover costs of the continued operation of the program.

Saturday, September 28, 2019

Bills Introduced – 09-27-19


Yesterday, with just the House still in session (and on its way out the door for a two-week recess), there were 51 bills introduced. One of those may receive additional coverage in this blog:

HR 4552 To amend title 46, United States Code, to provide for the issuance of provisional transportation security cards to veterans who have been honorably discharged from the Armed Forces. Rep. Babin, Brian [R-TX-36] 

 
/* Use this with templates/template-twocol.html */