This bill establishes five regional cybersecurity centers for the agriculture sector through competitive grants awarded to eligible land-grant universities. These centers will conduct research, develop security tools (like intrusion detection systems), and run training exercises specifically targeting cyber threats from countries including China, Russia, and Iran. The centers must focus on protecting seed agriculture, horticulture, animal agriculture, and supply chains from cyberattacks. The bill authorizes $25 million annually from 2026 to 2030 to fund these centers and their activities.
HJRES 40 is a congressional disapproval resolution targeting a Department of Defense rule about the Cybersecurity Maturity Model Certification (CMMC) Program. It directs Congress to reject the specific rule (published October 15, 2024) that would have required defense contractors to meet new cybersecurity standards under the CMMC framework. If passed, this resolution would stop the rule from taking effect, directly affecting defense contractors who would have otherwise needed to comply with the CMMC requirements. The resolution uses a standard procedural mechanism under federal law to nullify the rule without creating new policy.
HR 1709, the "Understanding Cybersecurity of Mobile Networks Act," requires the Assistant Secretary of Commerce to produce a report within one year of enactment examining cybersecurity vulnerabilities in mobile service networks and devices. The report must assess how mobile providers address security risks, customer awareness of cybersecurity when purchasing services, encryption practices, barriers to adopting stronger security measures, and the prevalence of surveillance technologies like cell site simulators. It specifically excludes 5G networks and focuses on real-world vulnerabilities affecting U.S. mobile networks and devices used by consumers, businesses, and government agencies. The study aims to inform future policy by gathering data from providers, industry experts, and government agencies, without mandating immediate changes to security standards.
HR 7266 establishes the Rural and Municipal Utility Cybersecurity Grant Program, providing $250 million (2026-2030) to help specific electric utilities improve cybersecurity. It directly affects rural electric cooperatives, municipally owned utilities, and small investor-owned utilities (under 4 million MWh/year) by offering grants and technical assistance for advanced cybersecurity technologies. Key provisions include prioritizing funding for entities with limited resources or critical infrastructure, requiring deployment of tools to protect against cyberattacks, and shielding shared cybersecurity information from public disclosure requests. The program aims to strengthen defenses across smaller utility systems without mandating new regulations.
S 1106 establishes a new Immersive Technology Advisory Panel and designates a Principal Advisor on immersive technology to guide U.S. leadership in this field. The panel, composed of federal agency heads (like Defense and Commerce) and external experts, will study how immersive technology - including augmented reality, virtual reality, and mixed reality - affects economic competitiveness, national security, and key sectors like healthcare, education, and manufacturing. Within two years, the panel must complete a study and submit a report to Congress with recommendations on standards, cybersecurity, ethical safeguards, and strategies to maintain U.S. global leadership. The bill directly affects federal agencies and aims to coordinate government-private sector efforts without mandating new regulations or funding.
This bill creates a new Office of Policy Development and Cybersecurity within the National Telecommunications and Information Administration (NTIA). The office, led by an Associate Administrator, will develop market-based policies to promote innovation, competition, and digital inclusion in communications technologies while coordinating cybersecurity and privacy policies. It will conduct studies on internet access, foster collaboration between security researchers and service providers, and provide guidance on securing communications networks. The bill directly affects the NTIA's operations and indirectly impacts the broader communications industry, small businesses, and rural service providers through its policy coordination efforts.
HR 7064, the AI in Health Care Efficiency and Study Act, requires the U.S. Department of Health and Human Services (HHS) to study how artificial intelligence can streamline administrative tasks in healthcare while protecting patient privacy. The study will examine AI applications for scheduling, claims processing, electronic health records, and cybersecurity threats like ransomware, involving healthcare providers, health plans, AI developers, and privacy experts. HHS must report findings and recommendations to Congress within 6 months of completing the study, focusing on reducing provider workload, improving data security, and ensuring compliance with health privacy laws. This bill does not create new regulations but directs a federal study to inform future policy on AI in healthcare administration.
This bill requires the federal government to assess and address cybersecurity risks from quantum computers that could break current encryption. It mandates a detailed report within one year (and annual updates) evaluating U.S. progress compared to other countries in developing quantum computers and adopting post-quantum cryptography, identifying vulnerable sectors (like finance or critical infrastructure), and creating a mitigation plan. The plan must facilitate government-private sector collaboration, information sharing, and technical assistance to help entities adopt security measures. The bill also directs the creation of guidelines to define "cryptographically-relevant quantum computers" and includes recommendations for implementing the plan through legislation or policy. This directly affects federal agencies, private companies, and public entities handling sensitive data.
This bill amends the Safe Drinking Water Act to require community water systems to implement cybersecurity training and planning. It directly affects public water suppliers serving residential areas by mandating training on protecting against cyberattacks and responding to incidents. Key provisions include adding specific cybersecurity topics to required training programs and extending the implementation timeframe for these requirements to 2026-2031. The changes update existing safety protocols to address evolving digital threats to water infrastructure.
Farm and Food Cybersecurity Act of 2025 This bill directs the Department of Agriculture (USDA) to (1) assess cybersecurity threats in the agriculture and food critical infrastructure sector, and (2) conduct annual crisis simulation exercises for food-related emergencies or disruptions. The agriculture and food critical infrastructure sector includes (1) any activity relating to the production, processing, distribution, storage, transportation, consumption, or disposal of agricultural or food products; and (2) any entity involved in any of these activities. Specifically, USDA, in coordination with the Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency, must conduct a risk assessment every two years on the cybersecurity threats to, and security vulnerabilities in, this sector. The risk assessment must include any recommendations for federal legislative or administrative actions to address related threats and vulnerabilities. USDA must also conduct an annual simulation exercise relating to a food-related emergency or disruption in coordination with DHS, the Department of Health and Human Services (HHS), and the Office of the Director of National Intelligence (ODNI). Among other things, the exercise must (1) involve a realistic and plausible scenario that simulates a food-related emergency or disruption that affects multiple sectors and jurisdictions, and (2) incorporate input from experts and stakeholders from various disciplines and sectors (e.g., agriculture, public health, emergency management, transportation, and energy). USDA, in consultation with DHS, HHS, and ODNI, must submit a report to Congress on each simulation exercise, including recommendations to enhance the cybersecurity and resilience of the agriculture and food critical infrastructure sector.
