InsideGov
Congress · Laws

Strengthening and Enhancing Cyber-capabilities by Utilizing Risk Exposure Technology Act

Public Law 115-390 · H.R. 7327 · 115th Congress · began in the House

Signed by Donald Trump (R) on Dec 21, 2018 · Emergency Management

Sponsor: Rep. Will Hurd (R-TX-23)

Cosponsors (5): Rep. Kevin McCarthy,

Passage votesYeaNay

  • HouseRecorded vote: 362 yea, 1 nay362–1
  • SenateUnanimous consent
Data notes

The final version of the law, as each chamber passed it. A chamber that passed it by voice vote or unanimous consent has no count. “Method not stated” means the record does not say how the chamber voted. Where the record has a member-by-member vote, the “Who voted for it” section shows who voted yea.

Report a correction

Summary

The Congressional Research Service’s plain-language summary of what the law does.

Strengthening and Enhancing Cyber-capabilities by Utilizing Risk Exposure Technology Act or the SECURE Technology Act

TITLE I--DEPARTMENT OF HOMELAND SECURITY INFORMATION SECURITY AND OTHER MATTERS

(Sec. 101) This bill directs the Department of Homeland Security (DHS) to: (1) establish a policy applicable to individuals, organizations, and companies to report security vulnerabilities on DHS information systems; and (2) develop a process to address the mitigation or remediation of the vulnerabilities reported. DHS shall make such policy publicly available and submit a copy to Congress with the required remediation process.

(Sec. 102) DHS shall establish, within the Office of the Chief Information Officer, a bug bounty pilot program to minimize security vulnerabilities.

"Bug bounty program" means a program under which: (1) individuals, organizations, and companies are temporarily authorized to identify and report vulnerabilities of DHS information systems; and (2) eligible individuals, organizations, and companies receive compensation in exchange for such reports.

TITLE II--FEDERAL ACQUISITION SUPPLY CHAIN SECURITY

Federal Acquisition Supply Chain Security Act of 2018

(Sec. 202) This bill establishes a Federal Acquisition Security Council. The council shall: (1) identify and recommend development of supply chain risk management standards, guidelines, and practices for assessing and developing mitigation strategies to address supply chain risks; and (2) develop a strategic plan for addressing supply chain risks posed by the acquisition of certain technology and equipment (covered articles).

(Sec. 203) The bill sets forth standards for executive agencies in assessing supply chain risks and extends to such agencies authorities for mitigating supply chain risks in the procurement of covered articles.

(Sec. 204) The bill adds agency responsibilities relating to assessing and avoiding, mitigating, transferring, or accepting supply chain risks and complying with exclusion and removal orders.

Who voted for it

Every House member of the 115th Congress on the ideology compass. Highlighted: the 362 who voted yea on final passage. Faded: everyone else, including those who voted nay, did not vote, or had not yet taken office.

362 yea1 nay69 present or did not vote

ProEstablishmentAnti
Economic left–right
More liberalMore conservative

Democrats who voted yea(164)

Republicans who voted yea(198)

Data notes

The House’s recorded vote on the final version of the law (roll call 1147 in Voteview), matched to the vote the record cites and checked against its totals. Positions are each member’s DW-NOMINATE score for that Congress, as on the Ideology page; left to right is more liberal to more conservative. Paired and announced yea votes count as yea. Lists follow the compass, most liberal first. A name links to a profile only for members of the current Congress. A law passed by voice vote or unanimous consent has no member list, and neither does a vote Voteview has not yet recorded.

Report a correction

Committees

The committees the bill was sent to, and what each did with it.

Data notes

A committee links to its page only where it exists in the current Congress; older and renamed committees are named without a link.

Report a correction

Related bills

1 bill the Library of Congress relates to this one.

  • S. 3085Related bill

    Federal Acquisition Supply Chain Security Act of 2018

Data notes

Related bills are identified by the Congressional Research Service, the House and the Senate: companion and identical bills, bills with similar text, bills that were folded into this law, and rules that brought it to the floor. A bill that is itself a public law in this site’s data links here; the others link to Congress.gov.

Report a correction

Timeline

From introduction to signing, newest first: the committees, the floor and the president. 15 actions.

  1. Dec 21, 2018Became lawBecame law · Became Public Law No: 115-390.
  2. Became lawBecame law · Signed by President.
  3. FloorFloor · Presented to President.
  4. Dec 20, 2018FloorFloor · Message on Senate action sent to the House.
  5. FloorFloor · Passed Senate without amendment by Unanimous Consent.
  6. Dec 19, 2018FloorFloor · Motion to reconsider laid on the table Agreed to without objection.
  7. FloorFloor · On motion to suspend the rules and pass the bill Agreed to by recorded vote (2/3 required): 362 - 1 (Roll no. 440).House roll call 440
  8. FloorFloor · Considered as unfinished business.
  9. FloorFloor · At the conclusion of debate, the chair put the question on the motion to suspend the rules. Mr. Massie objected to the Yea - Nay vote on the grounds that a quorum was not present. Further proceedings on the motion were postponed. The point of no quorum was considered as withdraw…
  10. FloorFloor · DEBATE - The House proceeded with forty minutes of debate on H.R. 7327.
  11. FloorFloor · Considered under suspension of the rules.
  12. FloorFloor · Mr. Hurd moved to suspend the rules and pass the bill.
  13. CommitteeCommittee · Received in the Senate, read twice.
  14. CommitteeCommittee · Referred to the Committee on Oversight and Government Reform, and in addition to the Committee on Homeland Security, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee conc…
  15. IntroducedIntroduced · Introduced in House
Data notes

Every action the Library of Congress lists for the bill, from introduction to signing, plus the dated committee hearings. The source lists many steps twice (the chamber’s own entry and the Library of Congress copy, or a presidential and a became-law entry with the same words); those are shown once. Amendments are listed in their own section.

Report a correction

Amendments

No amendments to this bill are on record.

Data notes

Amendments offered to this bill in either chamber, as the Library of Congress records them: each with a status read from its last recorded step: agreed to, rejected, withdrawn, ruled out of order, fell with another amendment, or offered with no vote recorded (most Senate amendments are only ever offered). The wording of each amendment is the source’s. Amendments to amendments and amendments to other bills are not listed.

Report a correction

Official record

The bill’s full text is on Congress.gov. Data through Oct 7, 2026.