McCaul’s bipartisan bill elevating nation’s cybersecurity mission becomes law

A newly signed law sponsored by U.S. Rep. Michael McCaul (R-TX), chairman of the U.S. House Homeland Security Committee, redesignates the Department of Homeland Security’s (DHS) National Protection and Programs Directorate as the Cybersecurity and Infrastructure Security Agency (CISA).

The Cybersecurity and Infrastructure Security Agency Act of 2018, H.R. 3359, signed into law on Nov. 16 by the president, now elevates the cybersecurity mission at DHS, according to a statement released the same day by the House Homeland Security Committee.

“From state sponsored hacking to brand name breaches, our enemies are carrying out major cyber-attacks with increased frequency,” Rep. McCaul said. “This historic, bipartisan legislation is a significant step forward to safeguard the continued success of DHS’ cyber mission and improve our collective defenses.”

Under H.R. 3359, the director of National Cybersecurity and Infrastructure Security will head CISA, which will lead cybersecurity and critical infrastructure security programs, operations and policy; coordinate with non-federal and federal entities; and carry out DHS efforts related to chemical facility anti-terrorism standards, according to the congressional record summary.

The law streamlines current cybersecurity efforts into a stand-alone, operational component. CISA will be composed of DHS components reorganized as: the Cybersecurity Division, the Infrastructure Security Division, and the Emergency Communications Division (currently the Office of Emergency Communications), according to the federal summary, and the agency must have a privacy officer who ensures CISA remains compliant with federal laws.

“This streamlining and elevation will improve the security of our federal networks and critical infrastructure by bolstering DHS’s capabilities to better match the structure with its current authorities and improve information sharing with the private sector,” said Rep. McCaul.

Under the new law, the Homeland Security Committee said, DHS must improve support for critical infrastructure, including for elections, by utilizing any and all cybersecurity services; and encourage the recruitment of highly qualified cyber talent, among other provisions.

Rep. McCaul first introduced H.R. 3359 on July 24, 2017. The measure gained 11 cosponsors, including from U.S. Rep. Bennie Thompson (D-MS), and received House approval in December 2017. The U.S. Senate passed an amended version of the bill by unanimous consent on Oct. 3 that the House agreed to on Nov. 13 before sending the bill to President Donald Trump for his signature.

“I commend my colleagues in both the House and Senate for getting this landmark piece of legislation across the finish line to ensure a more secure digital America,” Rep. McCaul said on Friday.