PSI Sci
New here? Follow the money and the votes · Not sure of your district? Find your U.S. House member · Find your state legislators

H.R. 1224: NIST Cybersecurity Framework, Assessment, and Auditing Act of 2017

Before you vote › Federal bills

H.R. 1224: NIST Cybersecurity Framework, Assessment, and Auditing Act of 2017

115th Congress · introduced 2017-02-27 · Science, Technology, Communications · Latest: Placed on the Union Calendar, Calendar No. 276.

federal

Follow this bill, step by step

  1. Where it came from: introduced 2017-02-27 · official record
  2. Who proposed it: Rep. Abraham, Ralph Lee [R-LA-5] · what a sponsor is
  3. What happened next: no floor votes in our records yet. Why?
  4. Where it stands now: Placed on the Union Calendar, Calendar No. 276. Not final yet: this can still change. We check for updates every day.
  5. If it becomes law and spends money: follow the money to money laws, then agencies and contracts and grants.

What does this mean?

Official title

NIST Cybersecurity Framework, Assessment, and Auditing Act of 2017

Plain summary

NIST Cybersecurity Framework, Assessment, and Auditing Act of 2017 (Sec. 2) This bill amends the National Institute of Standards and Technology Act to require the National Institute of Standards and Technology (NIST), in developing standards for information systems, to emphasize the principle that expanding cybersecurity threats require: (1) engineering security from the beginning of a system's life cycle, (2) building more trustworthy and secure components and systems from the start, and (3) applying well-defined security design principles throughout systems. (Sec. 3) NIST must provide guidance for agencies to incorporate into their information security risk management efforts the Framework for Improving Critical Infrastructure Cybersecurity (Framework). Such guidance shall: describe how the Framework aligns or augments existing agency practices; identify any areas of conflict or overlap between the Framework and existing cybersecurity requirements; include a template for federal agencies on how to use the Framework and recommend procedures for streamlining and harmonizing existing and future cybersecurity-related requirements; recommend other procedures for compliance with cybersecurity reporting, oversight, and policy review; and be updated to reflect what NIST learns from ongoing research, cybersecurity audits, information compiled by the federal working group, and annual reports. NIST must chair a federal working group to coordinate the development of metrics and tools to measure the effectiveness of the Framework for federal agencies protecting their information and information systems. The federal working group must assist the Office of Management and Budget (OMB) and Office of Science and Technology Policy (OSTP) in publishing annual reports on agency adoption rates and the effectiveness of the Framework. NIST must initiate an individual cybersecurity audit of certain agencies to assess the extent to which each agency meets information security standards. NIST shall prepare a needs-based plan for the audits that includes: (1) a description of staffing plans, (2) workforce capabilities, (3) methods of conducting such audits, (4) coordination with agencies to support such audits, (5) expected timeframe for the completion of the audits, and (6) other relevant information. NIST must report on the audit of each agency to: (1) OMB, (2) the OSTP, (3) the Government Accountability Office, (4) the agency being audited and its inspector general, and (5) Congress.

Congressional Research Service summary (Reported to House with amendment(s)), quoted unchanged (nonpartisan). Read the source.

What a vote does

A “Yea” vote

If it passes both chambers and is signed, it becomes law.

A “Nay” vote

If it is not passed, current law stays as it is.

PSI Sci description of the legislative step (not an opinion).

What does this mean? (plain words)

Official text

NIST Cybersecurity Framework, Assessment, and Auditing Act of 2017

Source: Congressional Research Service summary (Reported to House with amendment(s))

AI explanation – may be wrong, check the official text

No AI explanation yet. It takes up to a minute to write and is then saved for everyone.

Limited to a few requests an hour per person.

The strongest published arguments

Arguments for (supporters)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Arguments against (opponents)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Alternatives

Needs sources: no published alternatives yet (for example a different bill, a law instead of an amendment, or keeping current law). We only show items backed by a published source. Suggest one.

How did my representative vote? · This bill's floor votes

Officials and money

Sponsor: Rep. Abraham, Ralph Lee [R-LA-5] · 5 cosponsors

Cost estimate: CBO cost estimate: H.R. 1224, NIST Cybersecurity Framework, Assessment, and Auditing Act of 2017 (2017-05-02)

Cosponsors on this site

Frank D. Lucas (R-OK), Pete Sessions (R-TX)

No linked floor roll calls in our collected records yet. This does not mean the bill has never had a vote. Check the official bill history.

Words on this page, explained (2)
Bill
A proposed law. It becomes law only if it passes the legislature and is signed by the president or governor (or a veto is overridden).
Securities
Financial investments that can be bought and sold, such as stocks and bonds.

Plain meanings written from linked sources. All words.

Sources

Record fed-us-cong115-hr1224 · catalog fed-us-congress-bills-cong115 · updated 2026-11-15 by psicol fed-bills-cong115