The Federal Information Security Management Act (FISMA) provides a comprehensive framework to protect government information operations against threats. H.R. 4361 would clarify that, under FISMA, federal agencies have the sole and exclusive authority to take appropriate and timely actions to secure their information technology and information systems. CBO estimates that while implementing H.R. 4361 would clarify Congressional intent, it would have no significant effect on the federal budget because it would not expand the duties of executive agencies. Because enacting the bill could affect direct spending by agencies not funded through annual appropriations, pay-as-you-go procedures apply. CBO estimates, however, that any net change in spending by those agencies would be negligible. Enacting H.R. 4361 would not affect revenues.
CBO estimates that enacting H.R. 4361 would not increase direct spending or on-budget deficits in any of the four consecutive 10-year periods beginning in 2027.
H.R. 4361 contains no intergovernmental or private-sector mandates as defined in the Unfunded Mandates Reform Act and would not affect the budgets of state, local, or tribal governments.
