II 118THCONGRESS 1 STSESSION S. 3505 To amend title 10, United States Code, to authorize the ordering of units of the Selected Reserve to active duty to respond to significant cyber incidents, and for other purposes. IN THE SENATE OF THE UNITED STATES DECEMBER13, 2023 Mr. P ETERSintroduced the following bill; which was read twice and referred to the Committee on Armed Services A BILL To amend title 10, United States Code, to authorize the ordering of units of the Selected Reserve to active duty to respond to significant cyber incidents, and for other purposes. Be it enacted by the Senate and House of Representa-1 tives of the United States of America in Congress assembled, 2 SECTION 1. SHORT TITLE. 3 This Act may be cited as the ‘‘Defense Support for 4 Cyber Emergencies Response Act of 2023’’. 5 VerDate Sep 11 2014 18:32 Dec 29, 2023 Jkt 049200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\S3505.IS S3505 2 •S 3505 IS SEC. 2. SELECTED RESERVE ORDER TO ACTIVE DUTY TO 1 RESPOND TO A SIGNIFICANT CYBER INCI-2 DENT. 3 Section 12304 of title 10, United States Code, is 4 amended— 5 (1) in subsection (a), by striking ‘‘for any 6 named operational mission’’; 7 (2) by redesignating subsections (c) through (j) 8 as subsections (d) through (k), respectively; 9 (3) by inserting after subsection (b) the fol-10 lowing new subsection: 11 ‘‘(c) A UTHORITYRELATING TOSIGNIFICANTCYBER 12 I NCIDENTS.—When the Secretary of Defense or the Sec-13 retary of the department in which the Coast Guard is op-14 erating determines that it is necessary to augment the ac-15 tive armed forces for the response of the Department of 16 Defense or other department under which the Coast 17 Guard is operating, respectively, to a covered incident, 18 such Secretary may, without the consent of the member 19 affected, order any unit, and any member not assigned 20 to a unit organized to serve as a unit of the Selected Re-21 serve (as defined in section 10143(a) of this title), under 22 the respective jurisdiction of such Secretary, to active duty 23 for not more than 365 consecutive days.’’; 24 VerDate Sep 11 2014 18:32 Dec 29, 2023 Jkt 049200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\S3505.IS S3505 3 •S 3505 IS (4) in paragraph (1) of subsection (d), as redes-1 ignated by paragraph (2), by inserting ‘‘or sub-2 section (c)’’ after ‘‘subsection (b)’’; 3 (5) in subsection (g), as redesignated by para-4 graph (2), by inserting ‘‘or subsection (c)’’ after 5 ‘‘subsection (a)’’; 6 (6) by amending subsection (h), as redesignated 7 by paragraph (2), to read as follows: 8 ‘‘(h) T ERMINATION OF DUTY.—(1) Whenever any 9 unit of the Selected Reserve or any member of the Selected 10 Reserve not assigned to a unit organized to serve as a 11 unit, or any member of the Individual Ready Reserve, is 12 ordered to active duty under authority of subsection (a), 13 the service of all units or members so ordered to active 14 duty may be terminated by— 15 ‘‘(A) order of the President; or 16 ‘‘(B) law. 17 ‘‘(2) Whenever any unit of the Selected Reserve or 18 any member of the Selected Reserve not assigned to a unit 19 organized to serve as a unit is ordered to active duty under 20 authority of subsection (c), the service of all units or mem-21 bers so ordered to active duty may be terminated by— 22 ‘‘(A) order of the Secretary of Defense or, with 23 respect to the Coast Guard, the Secretary of the De-24 partment in which the Coast Guard is operating; or 25 VerDate Sep 11 2014 18:32 Dec 29, 2023 Jkt 049200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\S3505.IS S3505 4 •S 3505 IS ‘‘(B) law.’’; and 1 (7) in subsection (k), as redesignated by para-2 graph (2)— 3 (A) by redesignating paragraphs (1) and 4 (2) as paragraphs (2) and (3), respectively; and 5 (B) by inserting after the matter preceding 6 paragraph (2), as so redesignated, the following 7 new paragraph: 8 ‘‘(1) The term ‘covered incident’ means— 9 ‘‘(A) a cyber incident involving a Depart-10 ment of Defense information system, or a 11 breach of a Department of Defense system that 12 involves personally identifiable information, that 13 the Secretary of Defense determines is likely to 14 result in demonstrable harm to the national se-15 curity interests, foreign relations, or the econ-16 omy of the United States, or to the public con-17 fidence, civil liberties, or public health and safe-18 ty of the people of the United States; 19 ‘‘(B) a cyber incident involving a Depart-20 ment of Homeland Security information system, 21 or a breach of a Department of Homeland Se-22 curity system that involves personally identifi-23 able information, that the Secretary of Home-24 land Security determines is likely to result in 25 VerDate Sep 11 2014 18:32 Dec 29, 2023 Jkt 049200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\S3505.IS S3505 5 •S 3505 IS demonstrable harm to the national security in-1 terests, foreign relations, or the economy of the 2 United States or to the public confidence, civil 3 liberties, or public health and safety of the peo-4 ple of the United States; 5 ‘‘(C) a cyber incident, or collection of re-6 lated cyber incidents, that the President deter-7 mines is likely to result in demonstrable harm 8 to the national security interests, foreign rela-9 tions, or economy of the United States or to the 10 public confidence, civil liberties, or public health 11 and safety of the people of the United States; 12 or 13 ‘‘(D) a significant incident declared pursu-14 ant to section 2233 of the Homeland Security 15 Act of 2002 (6 U.S.C. 677b).’’. 16 Æ VerDate Sep 11 2014 18:32 Dec 29, 2023 Jkt 049200 PO 00000 Frm 00005 Fmt 6652 Sfmt 6301 E:\BILLS\S3505.IS S3505