Subramanyam, McCormick Introduce Bill to Strengthen Federal Cyber Data Recovery Standards

U.S. Representatives Suhas Subramanyam (D-VA) and Richard McCormick (R-GA) have introduced the National Defense Data Resilience Act, legislation aimed at establishing enforceable data recovery standards across the federal government as global cyber threats continue to evolve.

According to a statement from Rep. Subramanyam’s office, the bill seeks to ensure the United States can restore critical systems and data within defined Recovery Time Objectives (RTOs) following a cyberattack or other digital disruption. RTOs refer to the maximum acceptable time to recover systems and essential data after a cyber incident.

“Cyber warfare is a growing threat, and our federal government should be prepared. Without this bill, we are leaving the safety and security of our nation vulnerable instead of maintaining necessary technological advancements. Now more than ever, we need to do everything we can to prevent the threats we know are coming from our adversaries,” said Rep. Suhas Subramanyam.

McCormick emphasized the importance of safeguarding military data and maintaining operational readiness.

“Having a strong national defense starts with protecting the data our military relies on every day. When vital information is lost or disrupted, missions and readiness can be put at risk,” said Congressman McCormick. “This bill takes an important step toward ensuring we can quickly restore critical systems by strengthening the way we safeguard and recover essential data. By building a more resilient defense infrastructure, we keep our servicemembers prepared for whatever they face next.”

The statement described data recovery as a critical component of national defense preparedness.

“Data recovery is now a mission assurance requirement,” the statement added. “The National Defense Data Resilience Act recognizes that restoring critical defense data quickly and securely after a cyberattack is essential to readiness, deterrence, and American cyber power,” said Cory Simpson, Chief Executive Officer of the Institute for Critical Infrastructure Technology.

According to the statement, the legislation would establish mandatory RTO standards for varying categories of federal data, including within the Department of Defense and the Pentagon. The bill would also require federal agencies to meet specific data recovery capability standards and direct the Secretary of Defense to submit a comprehensive data recovery strategy for the Department of Defense.

Related posts:

Jenifer Rajkumar’s Cybersecurity Bill Signed Into Law, Blocking High-Risk Foreign Technology in New York US Lawmakers Say India–US Partnership Could Shape a Century of Peace, Warn Against Russia and China Influence Reps. Subramanyam and Hinson Introduce Bipartisan Bill to Help First-Time Homebuyers Save for a Down Payment Reps. Subramanyam and Bilirakis Introduce Bipartisan HEALTHY BRAINS Act to Advance Neurodegenerative Research