Skip to main content

Politicians make promises on their stump — we watch and hold them accountable.

Help keep the record honest →Create an account
Bills/119th Congress · House

H.R. 4579

Introduced

FEMA Cybersecurity Improvement Act

Sponsor
DBennie G. Thompson· Mississippi
Introduced
July 21, 2025
Policy area
Emergency Management
Latest action
Referred to the Subcommittee on Emergency Management and Technology.July 22, 2025
[Congressional Bills 119th Congress]
[From the U.S. Government Publishing Office]
[H.R. 4579 Introduced in House (IH)]

<DOC>

119th CONGRESS
1st Session
H. R. 4579

To amend the Homeland Security Act of 2002 to provide for the 
mitigation of cybersecurity risks by the Federal Emergency Management 
Agency, and for other purposes.

_______________________________________________________________________

IN THE HOUSE OF REPRESENTATIVES

July 21, 2025

Mr. Thompson of Mississippi introduced the following bill; which was 
referred to the Committee on Homeland Security, and in addition to the 
Committee on Transportation and Infrastructure, for a period to be 
subsequently determined by the Speaker, in each case for consideration 
of such provisions as fall within the jurisdiction of the committee 
concerned

_______________________________________________________________________

A BILL

To amend the Homeland Security Act of 2002 to provide for the 
mitigation of cybersecurity risks by the Federal Emergency Management 
Agency, and for other purposes.

Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

This Act may be cited as the ``FEMA Cybersecurity Improvement 
Act''.

SEC. 2. MITIGATING CYBERSECURITY RISKS.

(a) In General.--Subsection (a) of section 523 of the Homeland 
Security Act of 2002 (6 U.S.C. 321l) is amended--
(1) in the matter preceding paragraph (1), by striking ``as 
of the day before the date of the enactment of this section,'';
(2) by redesignating paragraphs (3) through (8) as 
paragraphs (4) through (9), respectively; and
(3) by inserting after paragraph (2) the following new 
paragraph:
``(3) mitigating cybersecurity risks (as such term is 
defined in section 2200) that could impede Agency 
operations;''.
(b) Plan for FEMA Cybersecurity.--Not later than one year after the 
date of the enactment of this section, the Administrator of the Federal 
Emergency Management Agency, in consultation with the Director of the 
Cybersecurity and Infrastructure Security Agency, shall submit to the 
Committee on Homeland Security and the Committee on Transportation and 
Infrastructure of the House of Representatives and the Committee on 
Homeland Security and Governmental Affairs of the Senate a report on 
the progress of Agency efforts to mitigate cybersecurity risks within 
the Agency in accordance with paragraph (3) of section 523(a) of the 
Homeland Security Act of 2002, as amended by subsection (a).
<all>

Plain-language analysis

Not yet analyzed.

A plain-language breakdown — including any hidden or off-intent provisions and whether the bill was fast-tracked — is generated separately and reviewed before publishing. It will appear here once ready. Until then, the verbatim text above and the official source are the record.

StumpWatch is live, and the record is still growing. Many promises and positions aren’t tracked yet, and some features are still in beta. Add a sourced promise and help keep the record honest.

Help keep the record honest →