Cybersecurity Act of 2012 Introduced in the Senate | Practical Law

Cybersecurity Act of 2012 Introduced in the Senate | Practical Law

On February 14, 2012, a group of Senate Committee leaders introduced the Cybersecurity Act of 2012, a bipartisan bill designed to secure critical infrastructure from cyber attack. The Act comes as a response to the growing threat of cyber attacks in the US.

Cybersecurity Act of 2012 Introduced in the Senate

Practical Law Legal Update 1-518-0627 (Approx. 3 pages)

Cybersecurity Act of 2012 Introduced in the Senate

by PLC Intellectual Property & Technology
Published on 15 Feb 2012 • USA (National/Federal)
On February 14, 2012, a group of Senate Committee leaders introduced the Cybersecurity Act of 2012, a bipartisan bill designed to secure critical infrastructure from cyber attack. The Act comes as a response to the growing threat of cyber attacks in the US.
On February 14, 2012, a group of Senate Committee leaders introduced a bipartisan bill to protect from cyber attacks systems used to provide essential services such as:
  • Power.
  • Water.
  • Transportation.
Titled the Cybersecurity Act of 2012, the proposed legislation aims to address the growing threat of cyber attacks due to the US's increasing reliance on the internet to conduct business. It is a joint effort of the Senate Committees on Commerce, Intelligence and Homeland Security and Government Affairs, and is the product of a three-year effort.
The bill aims to improve the security of cyber systems for essential services through the efforts and cooperation of government and private-sector organizations. Specifically, it is designed to give the federal government and the private sector the tools necessary to protect infrastructure systems that are critical to maintaining:
  • National security.
  • Economic stability.
  • Life-sustaining services.
To promote necessary action by the federal government and private sector, the legislation would, among other things:
  • Require Homeland Security, in consultation with the private sector, to:
    • conduct risk assessments to identify the greatest cyber vulnerabilites; and
    • develop cybersecurity performance requirements based on the risk assessments.
  • Promote innovation, including by allowing owners of critical infrastructure to determine how best to meet the cybersecurity requirements.
  • Provide a framework to facilitate cyber threat information sharing among the federal government and private-sector organizations, with appropriate measures and oversight to protect privacy and preserve civil liberties.
  • Impose changes to improve the security of the federal government's systems.
  • Provide for coordinated cybersecurity research and development to address new threats.
For more information, see the press release issued by the US Senate Committee on Commerce.