Portman, Peters Introduce Legislation to Create Significant Cyber Incident Declaration for Major Cyberattacks

WASHINGTON, D.C. – U.S. Senators Rob Portman (R-OH) and Gary Peters (D-MI), Ranking Member and Chairman of the Homeland Security and Governmental Affairs Committee, introduced bipartisan legislation that would provide additional resources and better coordination for serious cyberattacks or breaches that risk the safety and security of Americans. The legislation would help improve the federal response to cyber breaches, such as recent and serious attacks by foreign adversaries including the Chinese and Russian governments that penetrated both federal networks and private companies’ servers. 

The bill would allow the Secretary of Homeland Security to declare a Significant Cyber Incident following a breach of public and private networks, and would also establish a Cyber Response and Recovery Fund for the Department of Homeland Security (DHS) and the Cybersecurity and Infrastructure Security Agency (CISA) to provide direct support to public or private entities as they respond and recover from significant cyberattacks and breaches. 

“The multiple recent cyberattacks from sophisticated malicious actors against U.S. government clearly demonstrate our vulnerability to attack,” said Senator Portman. “These cyberattacks will continue, and we must ensure that we have the capacity to respond when they do.  This bipartisan bill will provide emergency resources when impacted organizations are overwhelmed and unable to respond to a debilitating attack.  I urge my colleagues to join us in supporting this commonsense legislation to take a needed step in strengthening our cyber defenses.” 

“Extensive breaches and attacks of public and private networks in just the last few months have compromised our national security and shown our nation is not adequately prepared to tackle evolving cyber threats,” said Senator Peters. “As these challenges continue to grow, our national security apparatus needs more tools and resources to improve our response to these threats and defend against cyber-attacks from our foreign adversaries, like the Chinese government. I am proud to introduce this commonsense, bipartisan legislation and will continue my efforts to strengthen our cyber defenses and protect the American people.” 

The Cyber Response and Recovery Act would create an authority for the Secretary of Homeland Security, in consultation with the National Cyber Director, to declare a Significant Cyber Incident in the event of an ongoing or imminent attack that would impact national security, economic security, or government operations. This declaration would empower CISA to coordinate federal and non-federal response efforts, and allow the Secretary access to a Cyber Response and Recovery Fund that would help support federal and non-federal entities impacted by the event. The bill would authorize $20 million over seven years for the fund and would require DHS to report to Congress on its use.  

Portman and Peters have led several bipartisan efforts to bolster our nation’s cybersecurity defenses. They introduced a bill to require the federal government to make better investments in cybersecurity protections to keep Americans’ data safe. The Senate also unanimously approved their legislation to promote stronger cybersecurity coordination between the Department of Homeland Security (DHS) and state and local governments.