S. 3045: Cybersecurity Vulnerability Identification and Notification Act of 2019

116th Congress

A bill to amend the Homeland Security Act of 2002 to protect United States critical infrastructure by ensuring that the Cybersecurity and Infrastructure Security Agency has the legal tools it needs to notify private and public sector entities put at risk by cybersecurity vulnerabilities in the networks and systems that control critical assets of the United States.

Sponsor: Sen. Ron Johnson — R — WI

Authorizes CISA to issue administrative subpoenas in certain instances to compel Internet service providers (ISPs) to disclose the identity of owners of such critical infrastructure. The bill also requires CISA to provide annual reports to the Congress on its use of that authority. Under current law, the Cybersecurity and Infrastructure Security Agency (CISA) shares information about cyber threats with owners and operators of critical infrastructure (such as power generation and transmission facilities). In rare instances, the agency cannot do so because it is unable to identify the owners of computers or devices that are vulnerable to malicious activity.

View the full vote history of this bill on GovTrack.us.