This bill changes section 523(a) of the Homeland Security Act of 2002 to add a new duty for FEMA: mitigating cybersecurity risks that could impede Agency operations. It removes a dated phrase in the section, renumbers some existing paragraphs, and inserts a new paragraph (3) defining the Agency duty to mitigate cybersecurity risks (the bill refers to a definition in section 2200). The bill also requires the FEMA Administrator, in consultation with the Director of the Cybersecurity and Infrastructure Security Agency (CISA), to submit a report to specified House and Senate committees on progress to mitigate cybersecurity risks within FEMA. The report is due not later than one year after the bill’s enactment. The bill was introduced July 21, 2025, by Representative Bennie Thompson and was referred to the Subcommittee on Emergency Management and Technology.
If enacted, FEMA would have an explicit, stated responsibility to mitigate cybersecurity risks that could affect its operations. The Agency must work with CISA and report its progress to congressional committees within one year. The bill text does not describe specific actions, timelines beyond the one-year report, or direct effects on members of the public.
No publicly available information on costs, funding, or budgetary effects is included in the bill text or provided metadata.
No publicly available information on proponents' arguments, stated benefits, or supporting statements is included in the bill text or provided metadata.
No publicly available information on opponents' arguments, concerns, or objections is included in the bill text or provided metadata.