As ordered reported by the Senate Committee on Homeland Security and Governmental Affairs on September 26, 2018
The Federal Information Security Management Act (FISMA) provides a framework to protect government information operations against security threats. S. 3208 would clarify that, under FISMA, federal agencies have the sole and exclusive authority to take appropriate and timely actions to secure their information technology and information systems. CBO estimates that implementing S. 3208 would clarify Congressional intent, but it would have no significant effect on the federal budget because it would not expand the duties of executive agencies.
Enacting the bill could affect direct spending by agencies not funded through annual appropriations; therefore, pay-as-you-go procedures apply. CBO estimates, however, that any net change in spending by those agencies would be negligible. S. 3208 would not affect revenues.
CBO estimates that enacting S. 3208 would not significantly increase net direct spending or on-budget deficits in any of the four consecutive 10-year periods beginning in 2029.
S. 3208 contains no intergovernmental or private-sector mandates as defined in the Unfunded Mandates Reform Act.
On August 10, 2018, CBO transmitted a cost estimate for H.R. 5300, the Federal Information Safeguards Act of 2018, as ordered reported by the House Committee on Oversight and Government Reform on July 17, 2018. The two pieces of legislation are similar and the estimated budgetary effects are the same.