Cybersecurity Vulnerability Remediation Act
Do you support it?
Want to know if it passes?
We'll email you when HR 285 moves — a committee vote, a floor vote, or a signature. Nothing else.
Free forever · unsubscribe in one click.
Your answer was recorded either way.
Which district are you in?
Your ZIP is all we need to match you to your own representatives — so we can tell you how they voted on HR 285.
You're tracking HR 285
We'll email you the moment it moves.
HR 285 — Cybersecurity Vulnerability Remediation Act
Last action — Referred to the Subcommittee on Cybersecurity and Infrastructure Protection.
No card. One bill, free forever — alerts when it moves.
-
✓Introduced
-
2In Committee
-
3Passed House
-
4Passed Senate
-
5To Executive
-
6Enacted
This bill died with 118th Congress. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.
This bill is no longer active — its legislative session has ended, so there is no live prognosis. It would have to be reintroduced in the current session to move again.
Summary
To amend the Homeland Security Act of 2002 to provide for the remediation of cybersecurity vulnerabilities, and for other purposes.
Bill Text
- Introduced Introduced in House Current html January 11, 2023
Compared against current U.S. Code AI-generated reading aid — verify against the official bill.
The bill amends existing law to clarify the definition of 'cybersecurity vulnerability' and enhance the cybersecurity functions related to mitigation protocols.
-
6 U.S.C. 659
the term “cybersecurity vulnerability” has the meaning given the term “security vulnerability” in section 650 of this title.→ the term 'cybersecurity vulnerability' has the meaning given the term 'security vulnerability' in section 102 of the Cybersecurity Information Sharing Act of 2015 (6 U.S.C. 1501);The definition of 'cybersecurity vulnerability' is updated to refer to a different section of law.
-
6 U.S.C. 659
conducting integration and analysis, including cross-sector integration and analysis, of cyber threat indicators, defensive measures, cybersecurity risks, and incidents;→ conducting integration and analysis, including cross-sector integration and analysis, of cyber threat indicators, defensive measures, cybersecurity risks, and incidents; and sharing mitigation protocols to counter cybersecurity vulnerabilities pursuant to subsection (n);An additional requirement to share mitigation protocols to counter cybersecurity vulnerabilities is added to the Center's functions.
-
6 U.S.C. 659
sharing the analysis conducted under subparagraph (A) and mitigation protocols to counter cybersecurity vulnerabilities in accordance with subparagraph (B), as appropriate, with Federal and non-Federal entities;→ sharing the analysis conducted under subparagraph (A) and mitigation protocols to counter cybersecurity vulnerabilities in accordance with subparagraph (B) with Federal and non-Federal entities;The wording is clarified but maintains the requirement to share analysis and protocols with Federal and non-Federal entities.
-
6 U.S.C. 659
sharing cyber threat indicators, defensive measures, as appropriate, and other information related to cybersecurity risks and incidents with Federal and non-Federal entities, including across sectors of critical infrastructure and with State and major urban area fusion centers, as appropriate;→ sharing cyber threat indicators, defensive measures, mitigation protocols to counter cybersecurity vulnerabilities, as appropriate, and other information related to cybersecurity risks and incidents with Federal and non-Federal entities, including across sectors of critical infrastructure and with State and major urban area fusion centers, as appropriate;The requirement to share mitigation protocols related to cybersecurity vulnerabilities with various entities is included.
-
6 U.S.C. 659
The Director may, as appropriate, identify, develop, and disseminate actionable protocols to mitigate cybersecurity vulnerabilities to information systems and industrial control systems, including in circumstances in which such vulnerabilities exist because software or hardware is no longer supported by a vendor.
A new provision is added allowing the Director to develop and disseminate actionable protocols to mitigate cybersecurity vulnerabilities.
Action History
-
Referred to the Subcommittee on Cybersecurity and Infrastructure Protection.
-
Introduced in House
-
Introduced in House
-
Referred to the House Committee on Homeland Security.
Sponsors
- Sheila Jackson Lee · Primary
Sponsorship breakdown
Export CSV (upgrade) →1 sponsors · 0 co-sponsors · 546 not signed on
Sponsors (1)
- Jackson Lee, Sheila Democratic
Co-sponsors (0)
None.
Not signed on (546)
546 members have not signed on to this bill.
Show all 546 →"Not signed on" means a member has not sponsored or co-sponsored this bill — it does not imply opposition. Members flagged Voted No have a recorded No vote on this bill.
Subjects
Frequently asked questions
- What does HR 285 do?
- To amend the Homeland Security Act of 2002 to provide for the remediation of cybersecurity vulnerabilities, and for other purposes.
- Who sponsors HR 285?
- HR 285 is sponsored by Jackson Lee, Sheila (Democratic).
- What is the current status of HR 285?
- This bill died with 118th Congress. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.
- Where can I track HR 285?
- Track HR 285 free on One Click Politics — get push/email alerts when it moves.
Make your voice heard on HR 285
Find the representatives who decide this bill and tell them where you stand — for yourself, or mobilize your whole list in one click with One Click Politics advocacy software.
Stay ahead of HR 285
Last checked for changes 3 months ago · updated continuously
One Click Politics tracks every bill in Congress and all 50 states.
Track this bill →