Senate passes key cyber bill cementing cybersecurity agency at DHS

Senate passes key cyber bill cementing cybersecurity agency at DHS
© Getty

The Senate on Wednesday passed a key cyber bill that solidifies the Department of Homeland Security’s role as the main federal agency overseeing civilian cybersecurity.

Sen. Dan SullivanDaniel Scott SullivanAugust recess under threat as yearly spending bills pile up August recess under threat as yearly spending bills pile up Overnight Health Care: Liberals rip Democratic leaders for writing drug pricing bill in secret | Dems demand answers from company that shelters migrant kids | Measles cases top 1,000 MORE (R-Alaska) asked for “unanimous consent” to pass the Cybersecurity and Infrastructure Security Agency Act, a bipartisan bill that will establish a cybersecurity agency that is the same stature as other units within DHS.

The legislation, which has not been viewed as particularly contentious, passed the House easily last year, but stalled for several months in the Senate. Sens. Ron JohnsonRonald (Ron) Harold JohnsonHillicon Valley: Lawmakers angered over Border Patrol breach | Senate Dems press FBI over Russian hacking response | Emails reportedly show Zuckerberg knew of Facebook's privacy issues | FCC looks to improve broadband mapping Hillicon Valley: Lawmakers angered over Border Patrol breach | Senate Dems press FBI over Russian hacking response | Emails reportedly show Zuckerberg knew of Facebook's privacy issues | FCC looks to improve broadband mapping Lawmakers demand answers on Border Patrol data breach MORE (R-Wis.) and Claire McCaskillClaire Conner McCaskillConservatives spark threat of bloody GOP primaries Congress needs to work to combat the poverty, abuse and neglect issues that children face Lobbying world MORE (D-Mo.), the leaders of the Senate Homeland Security Committee, successfully moved it through the upper chamber on Wednesday.

The bill will rebrand DHS’s main cybersecurity unit known as National Protection and Programs Directorate (NPPD) as the Cybersecurity and Infrastructure Protection Agency, spinning the headquarters office out into a full-fledged operational component of DHS on the same level as Secret Service or FEMA.

ADVERTISEMENT

NPPD's top cyber official, Christopher Krebs, would become the cyber agency's director under this bill.

NPPD is responsible for securing federal networks and protecting critical infrastructure from cyber and physical threats.

NPPD has seen its responsibilities rapidly expand in the decade since its inception, most recently taking the lead on engaging with states to protect digital election infrastructure from sabotage following Russian interference in the 2016 election.

The Senate made some differences in the House-passed bill, including amendments from Sen. Lisa MurkowskiLisa Ann MurkowskiHillicon Valley: Hacker group targeted electric grid | House Democrats press CBP over facial recognition program | Senators offer bill to protect health data | Groups file FCC complaint over carriers' use of location data Hillicon Valley: Hacker group targeted electric grid | House Democrats press CBP over facial recognition program | Senators offer bill to protect health data | Groups file FCC complaint over carriers' use of location data Klobuchar, Murkowski introduce legislation to protect consumer health data MORE (R-Alaska) and a substitute amendment from Sen. Ron Johnson (R-Wis.). This means the legislation will have to be sent back to the lower chamber for approval before it arrives at the president's desk.

Top DHS officials have been pushing for the bill to pass, arguing it would better communicate their mission to the private sector and help DHS recruit top cyber talent.

DHS Secretary Kirstjen NielsenKirstjen Michele NielsenElection security bills face GOP buzzsaw Election security bills face GOP buzzsaw Five memorable moments from Sarah Sanders at the White House MORE recently said the Cybersecurity and Infrastructure Security Agency Act would recognize the "importance" of the agency's mission.

"We are responsible for federal efforts when it comes to both protecting critical infrastructure, working with the owner-operators in private sector, and protecting all those civilian dot govs," Nielsen told The Washington Post on Tuesday during a livestreamed interview.

"To do that, we have to have both a name that indicates that is what we do, and we have to be able to streamline the organization so that we can become more operational.”

Rep. Michael McCaulMichael Thomas McCaulHouse Dems introduce resolutions to block Trump's Saudi arms sales Hillicon Valley: Democratic state AGs sue to block T-Mobile-Sprint merger | House kicks off tech antitrust probe | Maine law shakes up privacy debate | Senators ask McConnell to bring net neutrality to a vote Hillicon Valley: Democratic state AGs sue to block T-Mobile-Sprint merger | House kicks off tech antitrust probe | Maine law shakes up privacy debate | Senators ask McConnell to bring net neutrality to a vote MORE (R-Texas), head of the House Homeland Security Committee Chairman, introduced the bill, which has bipartisan support.

“I am thrilled that the Senate passed this critical, bipartisan legislation and I look forward to championing CISA through its final step in Congress before heading to the President’s desk," McCaul said in a statement to The Hill.

McCaul said this will help the agency combat hackers and hostile nation states that are "finding new ways to attack our cyber infrastructure and expose vulnerabilities."

Rep. John RatcliffeJohn Lee RatcliffeHillicon Valley: Tim Cook visits White House | House hearing grapples with deepfake threat | Bill, Melinda Gates launch lobbying group | Tech turns to K-Street in antitrust fight | Lawsuit poses major threat to T-Mobile, Sprint merger Hillicon Valley: Tim Cook visits White House | House hearing grapples with deepfake threat | Bill, Melinda Gates launch lobbying group | Tech turns to K-Street in antitrust fight | Lawsuit poses major threat to T-Mobile, Sprint merger House Intel to take first major deep dive into threat of 'deepfakes' MORE (R-Texas), head of the House Homeland's Cybersecurity and Infrastructure Protection subcommittee, also praised the bill's passage. 

“As the culmination of years of rigorous oversight by the House Homeland Security’s cybersecurity subcommittee, CISA will define our nation’s leading cybersecurity agency as a standalone operational organization clearly tasked with deploying DHS’ cybersecurity and infrastructure security missions," Ratcliffe wrote in a statement.

-- Morgan Chalfant contributed. Updated 10:13 p.m.