House BillHR 5078State and local government operationsGovernment studies and investigations
PILLAR Act
INTRO SEP 2· LAST ACTION NOV 18
READING
13MIN
COSPONSORS
4BIPARTISAN
READER REACTIONS0 TOTAL
NO VOTES YET · BE THE FIRST
One chamber only
LEGISLATIVE PROGRESS
STEP 4 / 8
Introduced
In Committee
Reported
Passed House
Passed Senate
Conference
To President
Became Law
WHAT THE BILL DOES
AI-written
Voters should care about this bill because it directly impacts the security of the public services they use every day. State and local governments are increasingly targets of cyberattacks, which can disrupt critical infrastructure, expose personal data, and cost taxpayers millions of dollars. By reauthorizing and updating this grant program, the bill helps these governments afford the necessary tools and expertise to defend against evolving threats.
If this bill becomes law, states and localities will continue to receive federal support to secure their information systems, protect new operational technologies (like those controlling utilities), and address emerging risks posed by artificial intelligence. If it doesn't pass, this critical funding and updated guidance might lapse, leaving local governments more vulnerable to sophisticated cyber threats and potentially leading to more service disruptions and data breaches for the public.
KEY PROVISIONS
4AI-extracted
PROVISION 01
The bill reauthorizes the Cybersecurity and Infrastructure Security Agency's (CISA) State and local cybersecurity grant program.
This ensures continued federal funding and support for state and local governments to enhance their cyber defenses.
PROVISION 02
It expands the scope of eligible systems for grants to include 'operational technology systems' and 'artificial intelligence systems'.
This allows funding to be used for securing critical infrastructure and new AI technologies, which are growing targets for cyberattacks.
PROVISION 03
The bill mandates or encourages the adoption of best cybersecurity practices, including multi-factor authentication and supply chain risk management.
This promotes the use of strong, modern security measures that are essential for preventing unauthorized access and mitigating cyber threats.
PROVISION 04
It allows state and local governments to partner with academic and nonprofit entities, including cybersecurity clinics, for assistance with cybersecurity.
This broadens the pool of expertise and resources available to governments for improving their cybersecurity posture.
Voters should care about this bill because it directly impacts the security of the public services they use every day. State and local governments are increasingly targets of cyberattacks, which can disrupt critical infrastructure, expose personal data, and cost taxpayers millions of dollars. By reauthorizing and updating this grant program, the bill helps these governments afford the necessary tools and expertise to defend against evolving threats.
If this bill becomes law, states and localities will continue to receive federal support to secure their information systems, protect new operational technologies (like those controlling utilities), and address emerging risks posed by artificial intelligence. If it doesn't pass, this critical funding and updated guidance might lapse, leaving local governments more vulnerable to sophisticated cyber threats and potentially leading to more service disruptions and data breaches for the public.
KEY PROVISIONS
AI-extracted
high
The bill reauthorizes the Cybersecurity and Infrastructure Security Agency's (CISA) State and local cybersecurity grant program.
This ensures continued federal funding and support for state and local governments to enhance their cyber defenses.
high
It expands the scope of eligible systems for grants to include 'operational technology systems' and 'artificial intelligence systems'.
This allows funding to be used for securing critical infrastructure and new AI technologies, which are growing targets for cyberattacks.
med
The bill mandates or encourages the adoption of best cybersecurity practices, including multi-factor authentication and supply chain risk management.
This promotes the use of strong, modern security measures that are essential for preventing unauthorized access and mitigating cyber threats.
med
It allows state and local governments to partner with academic and nonprofit entities, including cybersecurity clinics, for assistance with cybersecurity.
This broadens the pool of expertise and resources available to governments for improving their cybersecurity posture.
GLOSSARY
AI-written
CISA State and Local Cybersecurity Grant Program
A federal program managed by the Cybersecurity and Infrastructure Security Agency (CISA) that provides financial assistance to state and local governments to improve their cybersecurity.
Artificial Intelligence (AI)
Computer systems or software designed to perform tasks that typically require human intelligence, like learning, problem-solving, and decision-making.
Artificial Intelligence System
Any data system, software, hardware, or application that uses artificial intelligence to operate, even partially.
Operational Technology Systems
Computer systems that directly monitor or control physical processes, devices, and infrastructure, such as those used in power plants, water treatment facilities, or manufacturing.
Multi-factor Authentication (MFA)
A security method that requires a user to provide two or more different forms of verification to prove their identity, like a password combined with a fingerprint or a code from a phone.
Foreign Entity of Concern
A term for certain foreign companies or organizations identified by the government as potentially posing a national security risk, often related to technology and supply chains.
ACTION TIMELINE
15 EVENTS
NOV 18, 25
Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
INTROREFERRAL
NOV 17, 25
Mr. Garbarino moved to suspend the rules and pass the bill, as amended.
FLOOR
NOV 17, 25
Considered under suspension of the rules. (consideration: CR H4685-4688)
FLOOR
NOV 17, 25
DEBATE - The House proceeded with forty minutes of debate on H.R. 5078.
Potential events or conditions that could lead to harm or unauthorized access, use, disclosure, disruption, modification, or destruction of information systems or data.
Cybersecurity Threats
Any circumstance or event with the potential to adversely impact organizational operations, assets, individuals, other organizations, or society via an information system.
