S. 2407: Cyber Incident Notification Act of 2021

117th Congress · introduced 2021-07-21 · Armed Forces and National Security · Latest: Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

federal

Follow this bill, step by step

Where it came from: introduced 2021-07-21 · official record
Who proposed it: Sen. Warner, Mark R. [D-VA] · what a sponsor is
What happened next: no floor votes in our records yet. Why?
Where it stands now: Read twice and referred to the Committee on Homeland Security and Governmental Affairs. Not final yet: this can still change. We check for updates every day.
If it becomes law and spends money: follow the money to money laws, then agencies and contracts and grants.

What does this mean?

Official title

Cyber Incident Notification Act of 2021

Plain summary

Cyber Incident Notification Act of 2021 This bill requires federal agencies and certain entities to report cybersecurity intrusion incidents to the Cybersecurity and Infrastructure Security Agency (CISA) and addresses related issues. Within 24 hours of a confirmed intrusion (or potential intrusion), the targeted agency or entity must report the intrusion to CISA. CISA must promulgate rules relating to the bill, including the information that must be included in each incident report and the entities that must comply with the reporting requirements. At minimum, the covered entities must include federal contractors and owners or operators of critical infrastructure. Similarly, such rules must at minimum require federal agencies and covered entities to report all intrusions involving a nation-state, advanced persistent threat cyber actor, or transnational organized crime group. If a covered entity fails to meet the bill's requirements, CISA may assess a civil penalty of up to 0.5% of the entity's gross revenue for each day the violation lasts. If the violating entity has federal contracts, the General Services Administration may impose additional penalties, including removal from the Federal Contracting Schedule. A violation by a federal agency must be referred to that agency's office of the inspector general, which must treat the case as a matter of urgent concern. CISA, the Department of Justice, and the Office of the Director of National Intelligence must provide periodic reports to Congress concerning the current cyber threat picture facing federal agencies and covered entities.

Congressional Research Service summary (Introduced in Senate), quoted unchanged (nonpartisan). Read the source.

What a vote does

A “Yea” vote

If it passes both chambers and is signed, it becomes law.

A “Nay” vote

If it is not passed, current law stays as it is.

PSI Sci description of the legislative step (not an opinion).

What does this mean? (plain words)

Official text

Cyber Incident Notification Act of 2021

Source: Congressional Research Service summary (Introduced in Senate)

AI explanation – may be wrong, check the official text

No AI explanation yet. It takes up to a minute to write and is then saved for everyone.

Limited to a few requests an hour per person.

The strongest published arguments

Arguments for (supporters)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Arguments against (opponents)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Alternatives

Needs sources: no published alternatives yet (for example a different bill, a law instead of an amendment, or keeping current law). We only show items backed by a published source. Suggest one.

How did my representative vote? · This bill's floor votes

Officials and money

Sponsor: Sen. Warner, Mark R. [D-VA] · 14 cosponsors

Cost estimate: No cost estimate published yet.

Cosponsors on this site

Susan M. Collins (R-ME), Martin Heinrich (D-NM), Angus S. King, Jr. (I-ME), Michael F. Bennet (D-CO), Kirsten E. Gillibrand (D-NY), James E. Risch (R-ID)

Sponsor's campaign money: Sen. Warner, Mark R. [D-VA] reported raising $20.2 million (2025–2026). Details. Shown for context only; it does not mean any donor supported this bill.

No linked floor roll calls in our collected records yet. This does not mean the bill has never had a vote. Check the official bill history.

Words on this page, explained (3)

Bill: A proposed law. It becomes law only if it passes the legislature and is signed by the president or governor (or a veto is overridden).
Rulemaking: The process agencies use to write regulations that carry out laws passed by Congress or a legislature. Usually an agency publishes a proposed rule, takes public comments, then publishes a final rule.
Securities: Financial investments that can be bought and sold, such as stocks and bonds.

Plain meanings written from linked sources. All words.

Sources

Congressional Research Service summary (Introduced in Senate)
Congress.gov
Data: GovInfo BILLSTATUS bulk data (Library of Congress), BILLSTATUS-117s2407.xml <https://www.govinfo.gov/bulkdata/BILLSTATUS/117/s>

Record fed-us-cong117-s2407 · catalog fed-us-congress-bills-cong117 · updated 2026-11-15 by psicol fed-bills-cong117