HR-5786 : Still Just a Bill

H.R. 5786, the Cybersecurity Risk Inventory, Assessment, and Mitigation Working Group Act, aims to bolster the cybersecurity defenses of the National Nuclear Security Administration (NNSA). The bill directs the NNSA to establish a working group responsible for:

• Creating a comprehensive strategy for identifying NNSA systems vulnerable to cyber threats, specifically in operational technology and nuclear weapons information technology environments.
• Assessing the risk to these systems.
• Implementing measures to mitigate identified risks.

The strategy must include goals, roles, necessary resources, and detailed timelines for completion. The working group will consist of the Deputy Administrator for Defense Programs, the Associate Administrator for Information Management and Chief Information Officer, and other staff as deemed necessary. The working group must brief the congressional defense committees on their plan within 120 days of the bill's enactment and submit the completed strategy by April 1, 2025. The working group will terminate five years after the enactment of this section.