# 114-hr-6066: Cybersecurity Responsibility and Accountability Act of 2016

114-hr-6066, Cybersecurity Responsibility and Accountability Act of 2016, is a 114th Congress bill sponsored by Rep. Abraham, Ralph Lee [R-LA-5] (R-LA); status Ordered to be Reported by Voice Vote. (as of 2025-11-18).

- Canonical: https://policyrisk.com/legislation/114-hr-6066
- As of: 2025-11-18
- Plain-text twin of the page above; the HTML and this file carry the same facts.

## Facts
- Bill: 114-hr-6066
- Congress: 114
- Title: Cybersecurity Responsibility and Accountability Act of 2016
- Status: Ordered to be Reported by Voice Vote.
- Introduced: 2016-09-19
- Sponsor: Rep. Abraham, Ralph Lee [R-LA-5] (R-LA)
- Cosponsors: 3
- Policy area: Science, Technology, Communications
- Touches household money: no
- Last recorded action: 2025-11-18

## Summary

Cybersecurity Responsibility and Accountability Act of 2016 This bill requires the National Institute of Standards and Technology (NIST) to incorporate additional cybersecurity requirements in its computer standards for agency information systems and provide the Office of Management and Budget (OMB) with a process for agencies to implement those standards. NIST must also: (1) support development of information security training and certification for agency heads, (2) address agency-identified information security challenges and knowledge gaps, (3) assess information security statutory requirements, and (4) develop security standards for national security systems. The OMB must require the heads of agencies (currently, agencies generally) to: (1) report on the adequacy of their information security procedures, (2) provide for independent evaluations of information security practices, and (3) notify Congress and affected individuals of data breaches. Intelligence community agencies affected by data breaches must notify NIST. Chief information officers of agencies must collaborate with their agency head to designate chief information security officers (positions with job responsibilities to be developed by the OMB and NIST) to replace their current senior agency information security officers. Agencies must develop mandatory annual information security training and certification to ensure that agency heads understand federal cybersecurity policy regarding: (1) agency systems, (2) cyber-attacks and data breaches, and (3) not using private email servers or messaging systems for official communications. Agency heads must certify that their agencies meet information security standards and provide reasons for not meeting any standards. Agency heads must also develop annual plans to implement information security recommendations of the Government Accountability Office (GAO) and inspectors general. If an agency head fails to implement such a recommendation, the reasons for the failure must be provided to the OMB for approval. For each OMB-defined "major cybersecurity incident" (e.g., an incident involving classified information) that an agency experiences, the agency head must transmit an inspector general-performed independent evaluation to the OMB, the Department of Homeland Security, NIST, Congress, and the GAO. If the evaluation determines that the incident occurred because the agency head failed to comply sufficiently with NIST certification standards or recommendations of the GAO or agency inspectors general, then the OMB must hold the agency head accountable through an enforcement action, which may include actions under the budgetary or appropriations process, a recommendation for the President to remove or demote the agency head, or actions to ensure that the agency head does not receive cash or pay awards or bonuses for one year.

## Cosponsors (3)

- LAMAR SMITH (R-TX), 2016-09-19T00:00:00.000Z
- Rep. Comstock, Barbara [R-VA-10] (R-VA), 2016-09-20T00:00:00.000Z
- Rep. Knight, Stephen [R-CA-25] (R-CA), 2016-09-21T00:00:00.000Z

## Related bills

- 114-hr-5621: To posthumously award a Congressional Gold Medal to Lawrence Eugene "Larry" Doby in recognition of his achievements and contributions to American major league…
- 114-hr-4773: Protecting Workplace Advancement and Opportunity Act
- 114-hr-3459: Protecting Local Business Opportunity Act
- 114-hr-3326: Defend Trade Secrets Act of 2015
- 114-hr-3293: Scientific Research in the National Interest Act
- 114-hr-2726: Apollo 11 50th Anniversary Commemorative Coin Act

## Sources
- [114-hr-6066 on Congress.gov](https://www.congress.gov/bill/114th-congress/house-bill/6066)

## Related
- [114-hr-5621: To posthumously award a Congressional Gold Medal to Lawrence Eugene "Larry" Dob…](https://policyrisk.com/legislation/114-hr-5621)
- [114-hr-4773: Protecting Workplace Advancement and Opportunity Act](https://policyrisk.com/legislation/114-hr-4773)
- [114-hr-3459: Protecting Local Business Opportunity Act](https://policyrisk.com/legislation/114-hr-3459)
- [114-hr-3326: Defend Trade Secrets Act of 2015](https://policyrisk.com/legislation/114-hr-3326)
- [114-hr-3293: Scientific Research in the National Interest Act](https://policyrisk.com/legislation/114-hr-3293)
- [114-hr-2726: Apollo 11 50th Anniversary Commemorative Coin Act](https://policyrisk.com/legislation/114-hr-2726)
- [All bills in Congress](https://policyrisk.com/legislation)

Source: PRIA, https://policyrisk.com/legislation/114-hr-6066 (as of 2025-11-18).