Loading the public record
Loading the public record
Where They Stand is a nonpartisan guide to everyone running for Congress: their money, their own words and how incumbents voted. Find your ballot →
All recent votes113th CongressHouse
Federal Information Security Amendments Act of 2013 - (Sec. 2) Amends the Federal Information Security Management Act of 2002 (FISMA) to reestablish the oversight authority of the Director of the Office of Management and Budget (OMB) with respect to agency information and security policies and practices.
Extends the security requirements of federal agencies to include responsibilities for: (1) complying with computer standards developed by the National Institute of Standards and Technology (NIST); (2) ensuring complementary and uniform standards for information systems and national security systems; (3) ensuring that information security management processes are integrated with budget processes; (4) securing facilities for classified information; (5) maintaining sufficient personnel with security clearances; and (6) ensuring that information security performance indicators are included in the annual performance evaluations of all managers, senior managers, senior executive service personnel, and political appointees.
Directs senior agency officials, with a frequency sufficient to support risk-based security decisions, to: (1) test and evaluate information security controls and techniques, and (2) conduct threat assessments by monitoring information systems and identifying potential system vulnerabilities. (Current law requires only periodic testing and evaluation.)
Defines "information system" as a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information. Includes in such definition: (1) computers and computer networks; (2) ancillary equipment; (3) software, firmware, and related procedures; (4) support services; and (5) related resources and services.
Directs agencies to determine information security levels in accordance with information security classifications and standards promulgated under the National Institute of Standards and Technology Act.
Directs agencies to collaborate with OMB and appropriate public and private sector security operations centers on security incidents that extend beyond the control of an agency. Requires that security incidents be reported, through an automated and continuous monitoring capability, when possible, to the federal information security incident center (the incident center), appropriate security operations centers, and agency Inspector General.
Directs agencies to conduct vulnerability assessments and penetration tests commensurate with the risk posed to agency information systems.
Requires each agency to delegate to its Chief Information Officer the authority and primary responsibility for developing, implementing, and overseeing an agencywide information security (AIS) program.
House Apr 16, 2013
Federal Information Security Amendments Act of 2013
Passed · Two-thirds required
416 Yea 0 Nay 16 not voting
Crossed both parties No voting member broke with their own party.
DemocratsRepublicansFilled: YeaRing: NayGrey: not voting or present
432 members on this roll call, from the official House record. Party majorities need at least five voting members, so an independent never counts as breaking with a party.
Signing on is not a vote: a member can cosponsor H.R. 1163 and vote against it. 3 signed when it was filed.
Directs agencies to implement an OMB-approved AIS program that is consistent with components across and within agencies. Requires that such program include automated and continuous monitoring, when possible, to: (1) mitigate risks associated with security incidents before substantial damage is done; and (2) notify and consult with the incident center, appropriate security operations response centers, law enforcement agencies, Inspectors General, and other entities or as directed by the President.
Directs the OMB Director to review and approve information security policies and procedures to ensure that the incident center has the capability to detect, correlate, and respond to incidents that impair the security of multiple agencies' information systems. Requires the capability, where practicable, to be continuous and technically automated.
(Sec. 4) Specifies that no additional funds are authorized for agencies to carry out their responsibilities under this Act. Requires agencies to carry out such responsibilities using amounts otherwise authorized or appropriated.
Written by the nonpartisan Congressional Research Service, describing H.R. 1163 as reported to House with amendment(s) on Apr 16, 2013. It is not the text of the measure; a later amendment may have changed what it does.
Organizations that named H.R. 1163 in a lobbying disclosure. Only those that cited the bill by number appear, so this is a floor, not a full list.
230 disclosures name this measure. Retrieved from LDA.gov on 2026-10-05. Senate Office of Public Records cannot vouch for the data or analyses derived from these data after the data have been retrieved from LDA.gov.