Federal Information Security Modernization Act of 2024

The Federal Information Security Modernization Act of 2024 modernizes federal cybersecurity by requiring agencies to implement continuous security risk assessments, adopt zero trust architecture, and conduct regular penetration testing. It establishes new requirements for agencies to report major incidents to Congress within 72 hours and notify affected individuals within 45 days of discovering a breach. The bill creates a new Federal Chief Information Security Officer position to oversee agency cybersecurity efforts and coordinates with the National Cyber Director. It also mandates improved information sharing between agencies and the Cybersecurity and Infrastructure Security Agency (CISA), along with enhanced vulnerability disclosure processes for contractors and awardees.