Cybersecurity Logging Enforcement and Accountability Reporting Act

This Act may be cited as the “Cybersecurity Logging Enforcement and Accountability Reporting Act”.

(a) Report.—

(1) In general.— Not later than 180 days after the date of the enactment of this Act, the Secretary of Homeland Security, acting through the Under Secretary for Management of the Department of Homeland Security, shall submit to the appropriate congressional committees a report on the Department’s efforts to satisfy all requirements under Executive Order 14028, the Office of Management and Budget Memorandum (OMB) M–26–14, and the National Institute of Standards and Technology (NIST) Special Publication 800–53 for event logging of cybersecurity incidents.

(2) Elements.— The report under paragraph (1) shall include the following:

(A) An analysis of the Department of Homeland Security’s current implementation status of the requirements for event logging of cybersecurity incidents.

(B) An identification of any gaps in guidance that prevent the Department from satisfying such requirements.

(C) An identification of any policies that prevent the Department from satisfying such requirements.

(D) An identification of any gaps in resources that prevent the Department from satisfying such requirements.

(E) Recommendations for policies, guidance, or resources, as the case may be, that would support the Department in satisfying such requirements.

(3) Form.— The report under paragraph (1) shall be submitted in unclassified form, and shall include an unclassified executive summary.

(4) Publication.— The unclassified executive summary of the report required under paragraph (1) shall be published on a publicly accessible website of the Department of Homeland Security.

(b) Briefing.— Not later than 30 days after the submission of the report under subsection (a), the Secretary of Homeland Security shall provide to the appropriate congressional committees a briefing on the findings, conclusions, and recommendations contained in such report.

(c) Definition.— In this section, the term “appropriate congressional committees” means—

(1) the Committee on Homeland Security and the Committee on Appropriations of the House of Representatives; and

(2) the Committee on Homeland Security and Governmental Affairs and the Committee on Appropriations of the Senate.