Greater Phoenix Tea Party Patriots

Patriot Groups throughout the Maricopa and North Pinal County area.

REPUBLICANS PASSES A LAW AGAINST YOU! THINK THEY CARE ABOUT YOUR RIGHTS?

"The final tally was 248-168, enough to pass the measure but not enough to override the threatened veto. Forty-two Democrats broke with the White House to vote for the bill, and 28 Republicans voted against it." http://www.politico.com/news/stories/0412/75670.html

http://en.wikipedia.org/wiki/Cyber_Intelligence_Sharing_and_Protect... 
http://thomas.loc.gov/cgi-bin/query/D?c112:2:./temp/~c112huJvM7::

Union Calendar No. 311
112th CONGRESS
2d Session

H. R. 3523
[Report No. 112-445]

To provide for the sharing of certain cyber threat intelligence and cyber threat information between the intelligence community and cybersecurity entities, and for other purposes.

IN THE HOUSE OF REPRESENTATIVES
November 30, 2011

Mr. ROGERS of Michigan (for himself, Mr. RUPPERSBERGER, Mr. KING of New York, Mr. UPTON, Mrs. MYRICK, Mr. LANGEVIN, Mr. CONAWAY, Mr. MILLER of Florida, Mr. BOREN, Mr. LOBIONDO, Mr. CHANDLER, Mr. NUNES, Mr. GUTIERREZ, Mr. WESTMORELAND, Mrs. BACHMANN, Mr. ROONEY, Mr. HECK, Mr. DICKS, Mr. MCCAUL, Mr. WALDEN, Mr. CALVERT, Mr. SHIMKUS, Mr. TERRY, Mr. BURGESS, Mr. GINGREY of Georgia, Mr. THOMPSON of California, Mr. KINZINGER of Illinois, Mr. AMODEI, and Mr. POMPEO) introduced the following bill; which was referred to the Select Committee on Intelligence (Permanent Select)

April 17, 2012

Additional sponsors: Mr. LATTA, Mr. QUAYLE, Mr. MCHENRY, Mr. FRELINGHUYSEN, Mr. YODER, Mr. WALBERG, Mr. CAMP, Ms. ESHOO, Mr. MICHAUD, Mrs. MCMORRIS RODGERS, Mr. SULLIVAN, Mr. MCKINLEY, Ms. ROS-LEHTINEN, Mr. COFFMAN of Colorado, Mr. GOODLATTE, Mr. WOLF, Mr. FORBES, Mr. GARY G. MILLER of California, Mr. STEARNS, Mr. ISSA, Mr. COLE, Mr. TURNER of Ohio, Mr. BROOKS, Mr. HUIZENGA of Michigan, Mr. CARTER, Mrs. HARTZLER, Mr. GRIMM, Mrs. MILLER of Michigan, Mr. GUTHRIE, Mr. ROGERS of Alabama, Mr. BENISHEK, Mr. BROUN of Georgia, Mr. LANCE, Mr. HASTINGS of Washington, Mr. DAVIS of Kentucky, Mr. MEEHAN, Mr. SHUSTER, Mr. OLSON, Mr. KLINE, Mrs. BONO MACK, Mr. BACHUS, Mr. SCHOCK, Mr. ROE of Tennessee, Mr. FLEISCHMANN, Mr. BACA, Mr. BOSWELL, Mrs. NOEM, Mr. WITTMAN, Mr. HULTGREN, Mrs. BLACKBURN, Mr. HASTINGS of Florida, Mr. HURT, Mr. JOHNSON of Ohio, Mr. SMITH of Nebraska, Mr. CRAWFORD, Mr. FRANKS of Arizona, Mr. LARSEN of Washington, Mr. SIRES, Mr. TOWNS, Ms. BORDALLO, Mr. ROSS of Arkansas, Mr. COOPER, Mr. PITTS, Mr. RUNYAN, Mr. COSTA, Mr. CARDOZA, Mr. WOODALL, Mr. BARTLETT, Mr. SHULER, Mr. STIVERS, Mr. WILSON of South Carolina, Mr. MCINTYRE, Mr. KISSELL, Mr. SCALISE, Mr. BILBRAY, Mr. GRIFFITH of Virginia, Mr. PETERSON, Mr. OWENS, Mr. MULVANEY, Mr. HALL, Mr. CUELLAR, Mr. LAMBORN, Mr. AUSTRIA, and Mr. MCKEON

April 17, 2012

Reported with an amendment, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed

[Strike out all after the enacting clause and insert the part printed in italic]
[For text of introduced bill, see copy of bill as introduced on November 30, 2011]

A BILL

To provide for the sharing of certain cyber threat intelligence and cyber threat information between the intelligence community and cybersecurity entities, and for other purposes.

  Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

  This Act may be cited as the `Cyber Intelligence Sharing and Protection Act'.

SEC. 2. CYBER THREAT INTELLIGENCE AND INFORMATION SHARING.

  (a) In General- Title XI of the National Security Act of 1947 (50 U.S.C. 442 et seq.) is amended by adding at the end the following new section:

`CYBER THREAT INTELLIGENCE AND INFORMATION SHARING

  `Sec. 1104.  (a) Intelligence Community Sharing of Cyber Threat Intelligence With Private Sector-   `(1) IN GENERAL- The Director of National Intelligence shall establish procedures to allow elements of the intelligence community to share cyber threat intelligence with private-sector entities and to encourage the sharing of such intelligence.  `(2) SHARING AND USE OF CLASSIFIED INTELLIGENCE- The procedures established under paragraph (1) shall provide that classified cyber threat intelligence may only be--  `(A) shared by an element of the intelligence community with--  `(i) certified entities; or  `(ii) a person with an appropriate security clearance to receive such cyber threat intelligence;  `(B) shared consistent with the need to protect the national security of the United States; and  `(C) used by a certified entity in a manner which protects such cyber threat intelligence from unauthorized disclosure.  `(3) SECURITY CLEARANCE APPROVALS- The Director of National Intelligence shall issue guidelines providing that the head of an element of the intelligence community may, as the head of such element considers necessary to carry out this subsection--  `(A) grant a security clearance on a temporary or permanent basis to an employee or officer of a certified entity;  `(B) grant a security clearance on a temporary or permanent basis to a certified entity and approval to use appropriate facilities; and  `(C) expedite the security clearance process for a person or entity as the head of such element considers necessary, consistent with the need to protect the national security of the United States.  `(4) NO RIGHT OR BENEFIT- The provision of information to a private-sector entity under this subsection shall not create a right or benefit to similar information by such entity or any other private-sector entity.  `(b) Private Sector Use of Cybersecurity Systems and Sharing of Cyber Threat Information-   `(1) IN GENERAL-   `(A) CYBERSECURITY PROVIDERS- Notwithstanding any other provision of law, a cybersecurity provider, with the express consent of a protected entity for which such cybersecurity provider is providing goods or services for cybersecurity purposes, may, for cybersecurity purposes--  `(i) use cybersecurity systems to identify and obtain cyber threat information to protect the rights and property of such protected entity; and  `(ii) share such cyber threat information with any other entity designated by such protected entity, including, if specifically designated, the Federal Government.  `(B) SELF-PROTECTED ENTITIES- Notwithstanding any other provision of law, a self-protected entity may, for cybersecurity purposes--  `(i) use cybersecurity systems to identify and obtain cyber threat information to protect the rights and property of such self-protected entity; and  `(ii) share such cyber threat information with any other entity, including the Federal Government.  `(2) USE AND PROTECTION OF INFORMATION- Cyber threat information shared in accordance with paragraph (1)--  `(A) shall only be shared in accordance with any restrictions placed on the sharing of such information by the protected entity or self-protected entity authorizing such sharing, including appropriate anonymization or minimization of such information;  `(B) may not be used by an entity to gain an unfair competitive advantage to the detriment of the protected entity or the self-protected entity authorizing the sharing of information; and  `(C) if shared with the Federal Government--  `(i) shall be exempt from disclosure under section 552 of title 5, United States Code;  `(ii) shall be considered proprietary information and shall not be disclosed to an entity outside of the Federal Government except as authorized by the entity sharing such information; and  `(iii) shall not be used by the Federal Government for regulatory purposes.  `(3) EXEMPTION FROM LIABILITY- No civil or criminal cause of action shall lie or be maintained in Federal or State court against a protected entity, self-protected entity, cybersecurity provider, or an officer, employee, or agent of a protected entity, self-protected entity, or cybersecurity provider, acting in good faith--  `(A) for using cybersecurity systems or sharing information in accordance with this section; or  `(B) for not acting on information obtained or shared in accordance with this section.  `(4) RELATIONSHIP TO OTHER LAWS REQUIRING THE DISCLOSURE OF INFORMATION- The submission of information under this subsection to the Federal Government shall not satisfy or affect any requirement under any other provision of law for a person or entity to provide information to the Federal Government.  `(c) Federal Government Use of Information-   `(1) LIMITATION- The Federal Government may use cyber threat information shared with the Federal Government in accordance with subsection (b) for any lawful purpose only if--  `(A) the use of such information is not for a regulatory purpose; and  `(B) at least one significant purpose of the use of such information is--  `(i) a cybersecurity purpose; or  `(ii) the protection of the national security of the United States.  `(2) AFFIRMATIVE SEARCH RESTRICTION- The Federal Government may not affirmatively search cyber threat information shared with the Federal Government under subsection (b) for a purpose other than a purpose referred to in paragraph (1)(B).  `(3) ANTI-TASKING RESTRICTION- Nothing in this section shall be construed to permit the Federal Government to--  `(A) require a private-sector entity to share information with the Federal Government; or  `(B) condition the sharing of cyber threat intelligence with a private-sector entity on the provision of cyber threat information to the Federal Government.  `(d) Report on Information Sharing-   `(1) REPORT- The Inspector General of the Intelligence Community shall annually submit to the congressional intelligence committees a report containing a review of the use of information shared with the Federal Government under this section, including--  `(A) a review of the use by the Federal Government of such information for a purpose other than a cybersecurity purpose;  `(B) a review of the type of information shared with the Federal Government under this section;  `(C) a review of the actions taken by the Federal Government based on such information;  `(D) appropriate metrics to determine the impact of the sharing of such information with the Federal Government on privacy and civil liberties, if any; and  `(E) any recommendations of the Inspector General for improvements or modifications to the authorities under this section.  `(2) FORM- Each report required under paragraph (1) shall be submitted in unclassified form, but may include a classified annex.  `(e) Federal Preemption- This section supersedes any statute of a State or political subdivision of a State that restricts or otherwise expressly regulates an activity authorized under subsection (b).  `(f) Savings Clause- Nothing in this section shall be construed to limit any other authority to use a cybersecurity system or to identify, obtain, or share cyber threat intelligence or cyber threat information.  `(g) Definitions- In this section:  `(1) CERTIFIED ENTITY- The term `certified entity' means a protected entity, self-protected entity, or cybersecurity provider that--  `(A) possesses or is eligible to obtain a security clearance, as determined by the Director of National Intelligence; and  `(B) is able to demonstrate to the Director of National Intelligence that such provider or such entity can appropriately protect classified cyber threat intelligence.  `(2) CYBER THREAT INFORMATION- The term `cyber threat information' means information directly pertaining to a vulnerability of, or threat to, a system or network of a government or private entity, including information pertaining to the protection of a system or network from--  `(A) efforts to degrade, disrupt, or destroy such system or network; or  `(B) theft or misappropriation of private or government information, intellectual property, or personally identifiable information.  `(3) CYBER THREAT INTELLIGENCE- The term `cyber threat intelligence' means information in the possession of an element of the intelligence community directly pertaining to a vulnerability of, or threat to, a system or network of a government or private entity, including information pertaining to the protection of a system or network from--  `(A) efforts to degrade, disrupt, or destroy such system or network; or  `(B) theft or misappropriation of private or government information, intellectual property, or personally identifiable information.  `(4) CYBERSECURITY PROVIDER- The term `cybersecurity provider' means a non-governmental entity that provides goods or services intended to be used for cybersecurity purposes.  `(5) CYBERSECURITY PURPOSE- The term `cybersecurity purpose' means the purpose of ensuring the integrity, confidentiality, or availability of, or safeguarding, a system or network, including protecting a system or network from--  `(A) efforts to degrade, disrupt, or destroy such system or network; or  `(B) theft or misappropriation of private or government information, intellectual property, or personally identifiable information.  `(6) CYBERSECURITY SYSTEM- The term `cybersecurity system' means a system designed or employed to ensure the integrity, confidentiality, or availability of, or safeguard, a system or network, including protecting a system or network from--  `(A) efforts to degrade, disrupt, or destroy such system or network; or  `(B) theft or misappropriation of private or government information, intellectual property, or personally identifiable information.  `(7) PROTECTED ENTITY- The term `protected entity' means an entity, other than an individual, that contracts with a cybersecurity provider for goods or services to be used for cybersecurity purposes.  `(8) SELF-PROTECTED ENTITY- The term `self-protected entity' means an entity, other than an individual, that provides goods or services for cybersecurity purposes to itself.'.  (b) Procedures and Guidelines- The Director of National Intelligence shall--  (1) not later than 60 days after the date of the enactment of this Act, establish procedures under paragraph (1) of section 1104(a) of the National Security Act of 1947, as added by subsection (a) of this section, and issue guidelines under paragraph (3) of such section 1104(a); and  (2) following the establishment of such procedures and the issuance of such guidelines, expeditiously distribute such procedures and such guidelines to appropriate Federal Government and private-sector entities.  (c) Initial Report- The first report required to be submitted under subsection (d) of section 1104 of the National Security Act of 1947, as added by subsection (a) of this section, shall be submitted not later than one year after the date of the enactment of this Act.  (d) Table of Contents Amendment- The table of contents in the first section of the National Security Act of 1947 is amended by adding at the end the following new item:`Sec. 1104. Cyber threat intelligence and information sharing.'.

Union Calendar No. 311

112th CONGRESS
2d Session

H. R. 3523
[Report No. 112-445]

A BILL

To provide for the sharing of certain cyber threat intelligence and cyber threat information between the intelligence community and cybersecurity entities, and for other purposes.  


April 17, 2012

Reported with an amendment, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed

 

 

Views: 100

Comment

You need to be a member of Greater Phoenix Tea Party Patriots to add comments!

Join Greater Phoenix Tea Party Patriots

Comment by DirtyOldMan on May 2, 2012 at 7:56am

I think what happened with David is that since he is running against the Junior squab, he decided it would be in his best interest to vote no. Plus they already had enough votes for it, so David's vote was not needed. Same with Gosar. Remember, these are politicians. backroom dealers, slight of hand artists...... and they both voted for the Patriot Act.

Comment by Tarrell Sanders on May 1, 2012 at 4:22pm

What happen to Schweikert, thought he was a Patriot Act supporter?

Comment by wayne r bauer on April 28, 2012 at 1:06am

Tried to find something of value agin in bill, COULDN"T, all I could find is another agency necessary to make a worthless annual report. We can't slow the debt until we STOP the funding of such idiocies.

Comment by wayne r bauer on April 28, 2012 at 12:59am

I am convinced and hardly know who to blame, but I would like to hear or see ONE congressman tell us the explanation of this bill in plain language. Do you doubt congressmen DO NOT read legislation?? There fore we need to know what lobbyists they use. I want a clear honest list of lobbyist activity with our congressmen. Why do they allow tripe like this to be presented in halls of congress? There has to be nothing but corrupt attorney association writing this crap, and congress looks at a title, asks a staffer and votes as boehner tells them. Ther is absolutely nothing to do with common sense in DC. When will we shut OFF the money?? We certainly CAN"T afford what we 're getting. Now we see billions more flying around the country on propaganda elections. ANd being begged daily to offer another $100. The IDIOCY must end.

Comment by JPD on April 27, 2012 at 5:28pm

Rep. Jeff Flake [R, AZ-6] Aye

Rep. Trent Franks [R, AZ-2] Aye

Rep. Paul Gosar [R, AZ-1] Nay

Rep. Raul Grijalva [D, AZ-7] Nay

Rep. Edward Pastor [D, AZ-4] Nay

Rep. Ben Quayle [R, AZ-3] Aye

Rep. David Schweikert [R, AZ-5] Nay

Comment by DirtyOldMan on April 27, 2012 at 11:12am

My question is who is going to stop the FEDS from perpertrating Cyber Threat Intelligence? (yeah feds and intellegence in the same sentence oxymoron alert) as once again the FEDS excludes themselves from any reprocussions stemming from ABUSE OF POWERS!

`(3) EXEMPTION FROM LIABILITY- No civil or criminal cause of action shall lie or be maintained in Federal or State court against a protected entity, self-protected entity, cybersecurity provider, or an officer, employee, or agent of a protected entity, self-protected entity, or cybersecurity provider, acting in good faith--  `(A) for using cybersecurity systems or sharing information in accordance with this section; or  `(B) for not acting on information obtained or shared in accordance with this section.

© 2020   Created by Kelly Townsend.   Powered by

Badges  |  Report an Issue  |  Terms of Service