Senate passes key cyber bill cementing cybersecurity agency at DHS

Senate passes key cyber bill cementing cybersecurity agency at DHS
© Getty

The Senate on Wednesday passed a key cyber bill that solidifies the Department of Homeland Security’s role as the main federal agency overseeing civilian cybersecurity.

Sen. Dan SullivanDaniel Scott SullivanSenators fear Syria damage 'irreversible' after Esper, Milley briefing Overnight Defense: Trump hits Iranian central bank with sanctions | Trump meeting with Ukrainian leader at UN | Trump touts relationship with North Korea's Kim as 'best thing' for US Exclusive: Kushner tells GOP it needs to unify behind immigration plan MORE (R-Alaska) asked for “unanimous consent” to pass the Cybersecurity and Infrastructure Security Agency Act, a bipartisan bill that will establish a cybersecurity agency that is the same stature as other units within DHS.

The legislation, which has not been viewed as particularly contentious, passed the House easily last year, but stalled for several months in the Senate. Sens. Ron JohnsonRonald (Ron) Harold JohnsonAmbassador Gordon Sondland arrives on Capitol Hill for testimony in impeachment inquiry GOP cautions Graham against hauling Biden before Senate Sondland could provide more clues on Ukraine controversy MORE (R-Wis.) and Claire McCaskillClaire Conner McCaskillIranian attacks expose vulnerability of campaign email accounts Ex-CIA chief worries campaigns falling short on cybersecurity Ocasio-Cortez blasts NYT editor for suggesting Tlaib, Omar aren't representative of Midwest MORE (D-Mo.), the leaders of the Senate Homeland Security Committee, successfully moved it through the upper chamber on Wednesday.

The bill will rebrand DHS’s main cybersecurity unit known as National Protection and Programs Directorate (NPPD) as the Cybersecurity and Infrastructure Protection Agency, spinning the headquarters office out into a full-fledged operational component of DHS on the same level as Secret Service or FEMA.

ADVERTISEMENT

NPPD's top cyber official, Christopher Krebs, would become the cyber agency's director under this bill.

NPPD is responsible for securing federal networks and protecting critical infrastructure from cyber and physical threats.

NPPD has seen its responsibilities rapidly expand in the decade since its inception, most recently taking the lead on engaging with states to protect digital election infrastructure from sabotage following Russian interference in the 2016 election.

The Senate made some differences in the House-passed bill, including amendments from Sen. Lisa MurkowskiLisa Ann MurkowskiTrump says his Doral resort will no longer host G-7 after backlash Overnight Defense — Presented by Boeing — Pence says Turkey agrees to ceasefire | Senators vow to move forward with Turkey sanctions | Mulvaney walks back comments tying Ukraine aid to 2016 probe On The Money: Senate fails to override Trump veto over border emergency | Trump resort to host G-7 next year | Senators to push Turkey sanctions despite ceasefire | McConnell tees up funding votes MORE (R-Alaska) and a substitute amendment from Sen. Ron Johnson (R-Wis.). This means the legislation will have to be sent back to the lower chamber for approval before it arrives at the president's desk.

Top DHS officials have been pushing for the bill to pass, arguing it would better communicate their mission to the private sector and help DHS recruit top cyber talent.

DHS Secretary Kirstjen NielsenKirstjen Michele NielsenTrump confirms Rick Perry to step down as Energy secretary Trump says acting Homeland Security chief McAleenan will step down Activists to demonstrate at ICE headquarters after Cameroonian immigrant dies in custody MORE recently said the Cybersecurity and Infrastructure Security Agency Act would recognize the "importance" of the agency's mission.

"We are responsible for federal efforts when it comes to both protecting critical infrastructure, working with the owner-operators in private sector, and protecting all those civilian dot govs," Nielsen told The Washington Post on Tuesday during a livestreamed interview.

"To do that, we have to have both a name that indicates that is what we do, and we have to be able to streamline the organization so that we can become more operational.”

Rep. Michael McCaulMichael Thomas McCaulOvernight Defense — Presented by Boeing — Trump insists Turkey wants cease-fire | Fighting continues in Syrian town | Pentagon chief headed to Mideast | Mattis responds to criticism from Trump Overnight Defense — Presented by Boeing — Pence says Turkey agrees to ceasefire | Senators vow to move forward with Turkey sanctions | Mulvaney walks back comments tying Ukraine aid to 2016 probe House Foreign Affairs leaders introduce Turkey sanctions bill MORE (R-Texas), head of the House Homeland Security Committee Chairman, introduced the bill, which has bipartisan support.

“I am thrilled that the Senate passed this critical, bipartisan legislation and I look forward to championing CISA through its final step in Congress before heading to the President’s desk," McCaul said in a statement to The Hill.

McCaul said this will help the agency combat hackers and hostile nation states that are "finding new ways to attack our cyber infrastructure and expose vulnerabilities."

Rep. John RatcliffeJohn Lee RatcliffeGOP searches for impeachment boogeyman Democrats claim new momentum from intelligence watchdog testimony Hillicon Valley: Senate passes bill to boost cyber help for agencies, businesses | Watchdog warns Energy Department failing to protect grid | FTC sues Match for allegedly conning users MORE (R-Texas), head of the House Homeland's Cybersecurity and Infrastructure Protection subcommittee, also praised the bill's passage. 

“As the culmination of years of rigorous oversight by the House Homeland Security’s cybersecurity subcommittee, CISA will define our nation’s leading cybersecurity agency as a standalone operational organization clearly tasked with deploying DHS’ cybersecurity and infrastructure security missions," Ratcliffe wrote in a statement.

-- Morgan Chalfant contributed. Updated 10:13 p.m.