United States HR 9229: Department of Health and Human Services Cybersecurity Coordination Act

Bill Text

I
117TH CONGRESS
2D SESSION H. R. 9229
To amend the Public Health Service Act to codify certain recommendations
made by the Government Accountability Office with respect to the De-
partment of Health and Human Services and cybersecurity, and for
other purposes.
IN THE HOUSE OF REPRESENTATIVES
OCTOBER 25, 2022
Mr. GUTHRIE introduced the following bill; which was referred to the
Committee on Energy and Commerce
A BILL
To amend the Public Health Service Act to codify certain
recommendations made by the Government Account-
ability Office with respect to the Department of Health
and Human Services and cybersecurity, and for other
purposes.
Be it enacted by the Senate and House of Representa-1
tives of the United States of America in Congress assembled, 2
SECTION 1. SHORT TITLE. 3
This Act may be cited as the ‘‘Department of Health 4
and Human Services Cybersecurity Coordination Act’’. 5
VerDate Sep 11 2014 03:54 Oct 26, 2022 Jkt 039200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\H9229.IH H9229kjohnson on DSK79L0C42PROD with BILLS

2
•HR 9229 IH
SEC. 2. STRENGTHENING CYBERSECURITY AT DEPART-1
MENT OF HEALTH AND HUMAN SERVICES. 2
(a) IN GENERAL.—Section 2811(b) of the Public 3
Health Service Act (42 U.S.C. 300hh–10(b)) is amended 4
by adding at the end the following: 5
‘‘(8) CYBERSECURITY.—With respect to cyber-6
security: 7
‘‘(A) Monitor, evaluate, and report on the 8
progress and performance of the Government 9
Coordinating Council’s Cybersecurity Working 10
Group and HHS Cybersecurity Working Group. 11
‘‘(B) Ensure that authorizing Federal offi-12
cials review and approve the charter describing 13
how the HHS Cybersecurity Working Group 14
will facilitate collaboration with the HHS Chief 15
Information Security Officer Council, Contin-16
uous Monitoring and Risk Scoring Working 17
Group, and Cloud Security Working Group. 18
‘‘(C)(i) Finalize written agreements that 19
include a description of how the Government 20
Coordinating Council’s Cybersecurity Working 21
Group will collaborate with advisory bodies fo-22
cused on cybersecurity. 23
‘‘(ii) Identify the roles and responsibilities 24
of the Government Coordinating Council’s Cy-25
bersecurity Working Group. 26
VerDate Sep 11 2014 03:54 Oct 26, 2022 Jkt 039200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\H9229.IH H9229kjohnson on DSK79L0C42PROD with BILLS

3
•HR 9229 IH
‘‘(iii) Monitor and update the written 1
agreements on a regular basis. 2
‘‘(iv) Ensure that authorizing Federal offi-3
cials leading the working group approve the fi-4
nalized agreements. 5
‘‘(D) Update the charter for the Joint 6
Healthcare and Public Health Cybersecurity 7
Working Group for the current fiscal year and 8
ensure that authorizing officials leading the 9
working group review and approve the updated 10
charter.’’. 11
(b) ADDITIONAL CYBERSECURITY COORDINATION.— 12
Subtitle A of title XXVIII of the Public Health Service 13
Act (42 U.S.C. 300hh et seq.) is amended by adding at 14
the end the following: 15
‘‘SEC. 2804. CYBERSECURITY COORDINATION. 16
‘‘The Secretary shall— 17
‘‘(1) monitor, evaluate, and report on the 18
progress and performance of the HHS Chief Infor-19
mation Security Officer Council, Continuous Moni-20
toring and Risk Scoring Working Group, and Cloud 21
Security Working Group; and 22
‘‘(2) regularly monitor and update written 23
agreements describing how the HHS Chief Informa-24
tion Security Officer Council, Continuous Monitoring 25
VerDate Sep 11 2014 03:54 Oct 26, 2022 Jkt 039200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\H9229.IH H9229kjohnson on DSK79L0C42PROD with BILLS

4
•HR 9229 IH
and Risk Scoring Working Group, and Cloud Secu-1
rity Working Group will facilitate collaboration, and 2
ensure that authorizing Federal officials review and 3
approve the updated agreements under section 4
2811(b)(8)(C).’’. 5
Æ
VerDate Sep 11 2014 03:54 Oct 26, 2022 Jkt 039200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6301 E:\BILLS\H9229.IH H9229kjohnson on DSK79L0C42PROD with BILLS