DHS must publicly report cybersecurity compliance gaps—or admit it's falling short
H.R. 9492 — Cybersecurity Logging Enforcement and Accountability Reporting Act · Filed by James Walkinshaw (D-VA) · 2 cosponsors · Introduced Jun 25, 2026 · Referred to committee
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill requires the Department of Homeland Security to report within 180 days on whether it is meeting federal cybersecurity logging requirements under Executive Order 14028, OMB guidance, and NIST standards. The report must identify gaps in guidance, policies, and resources preventing compliance, offer recommendations, and include an unclassified executive summary published publicly. DHS must then brief Congress within 30 days.
Why we flagged it
The bill's core function is to mandate a compliance audit and public reporting mechanism for DHS cybersecurity logging practices. It is a transparency and accountability measure, not a substantive policy change or appropriation.
What the text implies
- Public disclosure of DHS cybersecurity gaps may reveal vulnerabilities or compliance weaknesses that could be exploited if details are not carefully redacted in the unclassified summary.
- The bill does not mandate that DHS actually fix identified gaps—only that it report them and recommend solutions. Compliance remains voluntary absent follow-up legislation.
- Requirement for unclassified executive summary may create tension between transparency and operational security; DHS will need to balance public disclosure with protecting sensitive security practices.
Who it affects
The bill increases transparency and accountability for federal cybersecurity practices by requiring DHS to publicly report on compliance gaps and resource shortfalls. Citizens benefit from clearer visibility into whether government agencies are meeting their own cybersecurity standards, which affects public trust and the security of government systems that serve the public.
Who stands to gain
- cybersecurity software and services vendors (VRSN, CSCO, HPE, CTSH, AMD)
- IT consulting and systems integration firms
Named in the bill
Department of Homeland Security, Executive Order 14028, Office of Management and Budget, OMB Memorandum M–26–14, National Institute of Standards and Technology, NIST Special Publication 800–53, House Committee on Homeland Security, Senate Committee on Homeland Security and Governmental Affairs, House Committee on Appropriations, Senate Committee on Appropriations
Where it stands
2 cosponsors: 2 Republicans.
- Jun 25, 2026 — Introduced · Congress.gov: “Introduced in House”
- Jun 25, 2026 — Referred to House Committee on Homeland Security · Congress.gov: “Referred to the House Committee on Homeland Security”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
Money around this bill
1 lobbying clients named this bill on 1 disclosure filings across 1 quarter, Jun 2026 to Jun 2026. Those filings disclosed $720,000 in lobbying spend. A filing names 45 bills on average, so that figure is what each filing reported, not a share belonging to this bill.
More lobbying clients named this bill than 0% of bills with at least one filing.
James Walkinshaw, the sponsor, reported $964,818 in PAC receipts in the 2026 cycle.
- Information Technology Industry Council — $720,000 on 1 filing
Lobbying Disclosure Act filings through Jul 17, 2026. A filing shows who paid to lobby on a bill it names, not what changed.
How this was measured
Analysis — Quorum's AI read the full bill text on Jul 8, 2026; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
Money — Senate Lobbying Disclosure Act filings whose specific-issue field names this bill for quarters ending Jun 2026 to Jun 2026. A filing's amount is reported whole beside the median number of bills a filing names; it is never divided across them. PAC receipts are FEC-reported contributions to the sponsor's candidate committee in the 2026 cycle.
As of — lobbying records through Jul 17, 2026 · page rendered 2026-10-20.
“DHS must publicly report cybersecurity compliance gaps—or admit it's falling short” QuorumCivic. https://share.quorumcivic.app/bill/119/hr9492 Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.