Skip to main content
CivicGate

HR 4579
Introduced Re-checks Congress.gov for new actions and updates the bill's status, and fills in any sponsors, committees, or related bills that are missing. It does not re-pull sponsors/cosponsors/committees/related — those rarely change — and it skips all work if nothing has changed upstream, so it's cheap to click.

FEMA Cybersecurity Improvement Act

To amend the Homeland Security Act of 2002 to provide for the mitigation of cybersecurity risks by the Federal Emergency Management Agency, and for other purposes.

Introduced Jul 21, 2025

Latest action (Jul 22, 2025) Referred to the Subcommittee on Emergency Management and Technology.

Referred to
Homeland Security Committee Transportation and Infrastructure Committee
Policy area
Emergency Management
Issues
Technology & Privacy

Summary

This bill amends the Homeland Security Act of 2002 to add cybersecurity risk mitigation as an explicit responsibility of the Federal Emergency Management Agency. The bill directs FEMA to identify and address cybersecurity risks that could disrupt its operations. Within one year of enactment, FEMA must submit a report to Congress detailing its progress in mitigating cybersecurity risks, prepared in coordination with the Cybersecurity and Infrastructure Security Agency. The report will be submitted to both the House and Senate committees on Homeland Security and related committees.

AI-generated plain-language summary of the bill text — neutral, and may be imperfect. See the full text below for the exact wording.

Sponsor (1)

Actions (4)
  1. Jul 22, 2025 Referred to the Subcommittee on Emergency Management and Technology. · house
  2. Jul 22, 2025 Referred to the Subcommittee on Economic Development, Public Buildings, and Emergency Management. · house
  3. Jul 21, 2025 Referred to the Committee on Homeland Security, and in addition to the Committee on Transportation and Infrastructure, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned. · house
  4. Jul 21, 2025 Introduced in House

Similar bills (6)

Bills with similar text or summary — includes reintroductions across Congresses. Ranked by semantic similarity of the bill text (computed locally); a neutral discovery aid, not a claim the bills are duplicates.

  • HR 5068 — Department of Homeland Security Cybersecurity Enhancement Act of 2004 · Introduced Sep 24, 2004 · Cong. 108 83%
  • HR 4669 — FEMA Act of 2025 · Introduced Sep 3, 2025 · Cong. 119 82%
  • HR 3347 — Sovereign States Emergency Management Act · Introduced May 14, 2025 · Cong. 119 81%
  • HR 3158 — PREPARE Act · Introduced Nov 20, 2003 · Cong. 108 79%
  • HR 4333 — Homeland Security Grant Enhancement Act of 2004 · Introduced Jun 28, 2004 · Cong. 108 77%
  • HR 4992 — FEMA Critical Staffing Act · Introduced Aug 20, 2025 · Cong. 119 75%

Text versions (1)
  • Introduced in House · Jul 21, 2025

Only one text version is on file, so there’s no earlier version to compare against yet.

Full text

IN THE HOUSE OF REPRESENTATIVES

July 21, 2025

Mr. Thompson of Mississippi introduced the following bill; which was referred to the Committee on Homeland Security, and in addition to the Committee on Transportation and Infrastructure, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned

A BILL

To amend the Homeland Security Act of 2002 to provide for the mitigation of cybersecurity risks by the Federal Emergency Management Agency, and for other purposes.

Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

This Act may be cited as the “FEMA Cybersecurity Improvement Act”.

SEC. 2. MITIGATING CYBERSECURITY RISKS.

(a) In General.—Subsection (a) of section 523 of the Homeland Security Act of 2002 (6 U.S.C. 321l) is amended—

(1) in the matter preceding paragraph (1), by striking “as of the day before the date of the enactment of this section,”;

(2) by redesignating paragraphs (3) through (8) as paragraphs (4) through (9), respectively; and

(3) by inserting after paragraph (2) the following new paragraph:

“(3) mitigating cybersecurity risks (as such term is defined in section 2200) that could impede Agency operations;”.

(b) Plan for FEMA Cybersecurity.—Not later than one year after the date of the enactment of this section, the Administrator of the Federal Emergency Management Agency, in consultation with the Director of the Cybersecurity and Infrastructure Security Agency, shall submit to the Committee on Homeland Security and the Committee on Transportation and Infrastructure of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report on the progress of Agency efforts to mitigate cybersecurity risks within the Agency in accordance with paragraph (3) of section 523(a) of the Homeland Security Act of 2002, as amended by subsection (a). <all>

Comments

Comments

Loading comments…