Building Cyber Resilience After SolarWinds Act of 2023

This bill mandates a 120-day investigation by the Cybersecurity and Infrastructure Security Agency (CISA) Director into the impact of the 2020 SolarWinds cyberattack on federal systems and critical infrastructure. It requires a detailed report to Congress on findings, security gaps, and recommendations to improve resilience, including how agencies implemented Executive Order 14028. The bill also directs the Government Accountability Office (GAO) to assess the Cyber Safety Review Board’s effectiveness within one year. The report will address information gaps and suggest ways to close them. This is a procedural measure focused on accountability and learning from a specific past incident, not creating new regulations.