PlainBillCongress, translated.Legislation. Context. Public interest.Referred to the Subcommittee on Emerging Threats, Cybersecurity, and Science and Technology.
Congressional Research Service
Version 00 · Introduced in House · Nov 17, 2010
Homeland Security Cyber and Physical Infrastructure Protection Act of 2010 - Amends the Homeland Security Act of 2002 to establish within the Department of Homeland Security (DHS) an Office of Cybersecurity and Communications, which shall be headed by the Assistant Secretary for Cybersecurity and Communications and which shall include: (1) the United States Computer Emergency Readiness Team; (2) a Cybersecurity Compliance Division (established by this Act); and (3) other DHS components with primary responsibility for emergency or national communications or cybersecurity.
Directs the Secretary of DHS, acting through the Assistant Secretary or the Director of such Division, to establish and enforce cybersecurity requirements for civilian nonmilitary and non-intelligence community federal systems to prevent, deter, respond to, and recover from cyber attacks and incidents.
Requires the Assistant Secretary to chair an interagency working group, which shall: (1) develop risk- and performance-based cybersecurity requirements for civilian federal agency computer networks and federally owned critical infrastructure, to be enforced by the Assistant Secretary through the Director; (2) develop remedies for noncompliance with such requirements, to be executed by the Director of the Office of Management and Budget (OMB); (3) recommend budgets for security of such networks; and (4) propose updates for the Common Criteria for Information Technology Security Evaluation.
Showing the opening paragraphs of the official summary.
Requires all federal entities to report any cyber incidents on their networks to the Director and to the Team, which shall research each incident and report on the extent of any compromise, the attackers, the method of penetration, the ramifications, and recommended mitigation activities.
Requires: (1) the Secretary, through the Director, to establish and enforce risk-based cybersecurity requirements for private sector computer networks within covered critical infrastructures; and (2) the Director to require entities determined to be covered critical infrastructures to comply with such requirements and to submit a proposed cybersecurity plan to satisfy such requirements to the first-party regulatory agency or sector-specific agency for approval and enforcement. Prescribes penalties for noncompliance.
Requires the Assistant Secretary to: (1) share information regarding cybersecurity threats and vulnerabilities and proposed actions to mitigate them with all federal agencies, appropriate state, local, or tribal authority representatives, and all covered critical infrastructure owners and operators; and (2) designate information received from and provided to federal agencies and critical infrastructure owners and operators under this Act as sensitive security information and enforce requirements for handling, storage, and dissemination of such information.
Directs the Under Secretary for Science and Technology to support research, development, testing, evaluation, and transition of cybersecurity technology, with an emphasis on research and development relevant to large-scale, high-impact attacks.
Requires the Assistant Secretary to: (1) develop a strategic cybersecurity workforce plan as part of the federal agency performance plan; (2) establish a cybersecurity awareness and education curriculum that shall be required for all federal employees and contractors engaged in the design, development, or operation of civilian federal agency computer networks; and (3) implement a strategy to provide federal employees who work in cybersecurity-related areas with the opportunity to obtain additional education.
Authorizes: (1) the appointment of up to 500 employees to carry out this Act's requirements without regard to the civil service laws upon certification to Congress that standard federal hiring processes have not resulted in the required number of critical cybersecurity positions being filled; and (2) payment of bonuses necessary to retain such an employee.
People & committees
Rep. Thompson, Bennie G. [D-MS-2] · D–MS
Legislative record
A procedural vote is different from passage. Passage in one chamber does not establish enactment. Explore the glossary.
Referred to the Subcommittee on Emerging Threats, Cybersecurity, and Science and Technology.
Sponsor introductory remarks on measure. (CR E1976)
Referred to House Oversight and Government Reform
Referred to the Committee on Homeland Security, and in addition to the Committee on Oversight and Government Reform, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
Referred to House Homeland Security
Introduced in House
Introduced in House
Primary sources
Text links open the official source. We currently store references to these documents.
No related bills are listed in this snapshot. This does not establish whether the proposal has appeared in earlier Congresses.
Source last updated: Aug 14, 2025. Consult Congress.gov for the current record.
AI Conversation Starters
Choose a perspective, copy a prompt, and paste it into your preferred AI. Each prompt includes the bill version and available official source links, and asks for counterarguments as well as supporting evidence.
Analyze H.R.6423 as objectively as possible. Explain its main provisions, who would be affected, possible benefits and harms, implementation, exceptions, and uncertainties. Present the strongest arguments for and against it, and identify evidence needed to assess its public impact.
Examine H.R.6423 through a progressive lens, focusing on fairness, access, economic inequality, and effects on vulnerable communities. Explain potential benefits, costs, and unintended consequences. Consider the strongest counterarguments and distinguish stated goals from demonstrated outcomes.
Examine H.R.6423 through a conservative lens, focusing on fiscal responsibility, institutional stability, federalism, and the scope of government. Explain potential benefits, costs, and unintended consequences. Consider the strongest counterarguments and any provisions that challenge this perspective.
Examine H.R.6423 through a civil-liberties and limited-government lens. Consider individual rights, privacy, voluntary choice, accountability, and government power. Explain tradeoffs, possible safeguards, and the strongest counterarguments without assuming the proposal is beneficial or harmful.