July 21, 2025
Mr. Thompson of Mississippi introduced the following bill; which was referred to the Committee on Homeland Security, and in addition to the Committee on Transportation and Infrastructure, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned
To amend the Homeland Security Act of 2002 to provide for the mitigation of cybersecurity risks by the Federal Emergency Management Agency, and for other purposes.
Section 1. Short Title
This Act may be cited as the FEMA Cybersecurity Improvement Act
.
Sec. 2. Mitigating cybersecurity risks
(a) In general
Subsection (a) of section 523 of the Homeland Security Act of 2002 (6 U.S.C. 321l) is amended—
(1)
in the matter preceding paragraph (1), by striking as of the day before the date of the enactment of this section,
;
(2)
by redesignating paragraphs (3) through (8) as paragraphs (4) through (9), respectively; and
(3)
by inserting after paragraph (2) the following new paragraph:
(3)
mitigating cybersecurity risks (as such term is defined in section 2200) that could impede Agency operations;
(b) Plan for FEMA cybersecurity
Not later than one year after the date of the enactment of this section, the Administrator of the Federal Emergency Management Agency, in consultation with the Director of the Cybersecurity and Infrastructure Security Agency, shall submit to the Committee on Homeland Security and the Committee on Transportation and Infrastructure of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report on the progress of Agency efforts to mitigate cybersecurity risks within the Agency in accordance with paragraph (3) of section 523(a) of the Homeland Security Act of 2002, as amended by subsection (a).