S. 2902 would amend federal information security policies and authorize pilot programs to enhance federal cybersecurity. CBO estimates that enacting S. 2902 would have an insignificant effect on direct spending and no effect on revenues over the 2023-2032 period. CBO has not estimated the discretionary costs of implementing the bill. The bill contains no intergovernmental or private-sector mandates as defined in the Unfunded Mandates Reform Act.