Understanding Cybersecurity of Mobile Networks Act

What this does

This bill orders one government report. It directs the Assistant Secretary of Commerce for Communications and Information to submit a report to Congress within one year examining the cybersecurity of mobile service networks and their vulnerability to cyberattacks and surveillance by adversaries. The report must assess whether mobile carriers have fixed known vulnerabilities, gauge how much customers weigh cybersecurity when buying service, and estimate the prevalence and effectiveness of the encryption and authentication in use. It must also estimate the cost, availability, and use by adversaries in the United States of cell-site simulators, the interception devices known as IMSI catchers. The report excludes 5G protocols and networks. It must be unclassified but may carry a classified annex, and the Assistant Secretary must redact exploitable information from the public version while giving Congress an unredacted copy. The bill creates no new regulation, funding, or enforcement authority.

House vote · 360-10

Democrats177–0

Republicans183–10

Independents0–0

How we know · 10 sourced claims

The bill directs the Assistant Secretary of Commerce for Communications and Information to submit a report to Congress within one year of enactment.Source: Sec. 2(a) In general (line 19); Sec. 2(f)(2) definition of Assistant Secretary (line 51)
The report examines the cybersecurity of mobile service networks and their vulnerability to cyberattacks and surveillance conducted by adversaries.Source: Sec. 2(a) In general (line 19)
The report must assess the degree to which mobile service providers have addressed known cybersecurity vulnerabilities identified by researchers, standards bodies, and federal agencies.Source: Sec. 2(b)(1) Matters To be included (lines 21-23)
The report must discuss the degree to which customers weigh cybersecurity when purchasing mobile service and devices.Source: Sec. 2(b)(2)(A) (line 25)
The report must estimate and discuss the prevalence and efficacy of encryption and authentication algorithms and techniques used in mobile service, equipment, phones, operating systems, and software.Source: Sec. 2(b)(4) (lines 26-28)
The report must estimate and discuss the prevalence, costs, commercial availability, and use by adversaries in the United States of cell site simulators, known as IMSI catchers, and other mobile surveillance and interception technologies.Source: Sec. 2(b)(7) (line 30)
The report excludes consideration of 5G protocols and networks.Source: Sec. 2(d)(2) Scope of report (line 40)
The report must be produced in unclassified form but may contain a classified annex.Source: Sec. 2(e)(1) Classified information (line 44)
The Assistant Secretary must redact potentially exploitable unclassified information from the public report but must provide an unredacted form to the committees.Source: Sec. 2(e)(2) Potentially exploitable unclassified information (line 46)
The bill creates no new regulation, funding, or enforcement authority; its entire operative body is a single report directive.Source: Whole text: Sec. 1 short title (line 17), Sec. 2 report directive (lines 18-62); no other operative section present

Read the bill on congress.gov ↗

Your representatives

How did your member vote on this?

House roll call

The full roll call

R179–10D174–0I1–0

Position

Party

State

Republicans

214

Democrats

208

Independents

YeaKevin KileyCA · District 3