119th Congress Government Operations and Politics
H.R. 872: Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
Passed House
- Introduced (completed)
- Passed House (completed)
- Passed Senate (not reached)
- To the President (not reached)
- Became law (not reached)
Summary
This bill requires revisions to acquisition regulations related to information systems vulnerabilities for certain federal contractors. The revisions apply to contractors whose contract is at or above the simplified acquisition threshold ($250,000 in most cases) or that use, operate, manage, or maintain a federal information system on behalf of an agency.
Under the bill, the Office of Management and Budget must review the Federal Acquisition Regulation (FAR) and recommend updated contract requirements and language for contractor vulnerability disclosure programs. (Such programs establish processes for identifying, reporting, and mitigating information system vulnerabilities discovered by security researchers, software developers, and others.) The recommendations must include requirements to ensure that such contractors implement vulnerability disclosure policies consistent with guidelines from the National Institute of Standards and Technology. The Federal Acquisition Regulation Council must review these recommendations and update the FAR as necessary to incorporate requirements for such contractors to receive information about potential security vulnerabilities in contractor information systems used in performance of contract.
The Department of Defense (DOD) must conduct a similar review and update of regulations with respect to the DOD Supplement to the FAR.
Written by the Congressional Research Service, Library of Congress.
Roll calls
No roll call votes have been held on this bill.
Amendments
No amendments were offered to this bill.
Cosponsors
- Shontel Brown D-OHOriginal
Who scored on this bill
- 1Nancy Mace SponsorDrew cross-party cosponsors, introduced, passed House3 events+36
- 2Shontel BrownCosponsored; cosponsored bill passed2 events+4
See all scorers and every scoring event
Introductions and cosponsorships count toward weekly caps and show no points.
Other bills by Nancy Mace
- H.R. 5235: Skills-Based Federal Contracting Act of 2025
- H.R. 2985: Modernizing Government Technology Reform Act
- H.R. 5000: Cybersecurity Hiring Modernization Act
- H.R. 3455: Veterans Affairs Distributed Ledger Innovation Act of 2025
- H.R. 30: Preventing Violence Against Women by Illegal Aliens Act
- H.R. 4552: Federal Information Security Modernization Act of 2024
History
- Passed the House by voice vote.
- Introduced in the House by Nancy Mace.
Show the full action history (9 actions)
- Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
- Mr. Comer moved to suspend the rules and pass the bill, as amended.
- Considered under suspension of the rules. (consideration: CR H930-932)
- DEBATE - The House proceeded with forty minutes of debate on H.R. 872.
- Passed/agreed to in House: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H930-931)
- On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H930-931)
- Motion to reconsider laid on the table Agreed to without objection.
- Introduced in House
- Referred to the Committee on Oversight and Government Reform, and in addition to the Committee on Armed Services, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.