To require the Secretary of Homeland Security to produce a report that identifies gaps in resources, guidance, and policies to satisfy all event logging requirements for cybersecurity incidents at the Department of Homeland Security, and for other purposes.

119th Congress Introduced by Don Bacon

DHS would must produce a formal report detailing gaps in event logging capabilities, resources, and policies to improve detection, response, and forensics.

Introduced in House

Overview

HR 9492, introduced in the 119th Congress and referred to the House Committee on Homeland Security, seeks to require the Secretary of Homeland Security to produce a report identifying gaps in resources, guidance, and policies related to event logging for cybersecurity incidents at the Department of Homeland Security (DHS). The bill is sponsored with a co-sponsor: Rep. Don Bacon.

Purpose and intent

To assess and publicly document gaps within DHS regarding the capture, logging, and retention of event data related to cybersecurity incidents.

To identify deficiencies in resources, guidance, and policies that affect DHS’s ability to log and audit cybersecurity events.

To enhance DHS’s ability to detect, respond to, and recover from cyber incidents by illuminating shortcomings that may hinder incident logging and forensics.

Key provisions and changes (proposed)

Requirement for DHS to produce a formal report.

Report scope likely includes:

Current event logging capabilities across DHS components and agencies.
Availability and adequacy of resources (budget, personnel, tools) dedicated to logging and log management.
Existing guidance and policies governing what events must be logged, retention periods, log integrity, and access controls.
Gaps or deficiencies in interoperability, standardization, and data-sharing related to cybersecurity event logs.
Recommendations to address identified gaps (prioritized actions, timelines, and potential funding needs).

The bill does not appear to create new mandatory logging requirements directly, but rather mandates a comprehensive assessment and public-facing report on gaps.

Who would be affected

Primarily DHS and its component agencies, offices, and bureaus responsible for cybersecurity and information technology.

DHS personnel involved in cyber risk management, incident response, forensics, and log administration.

Potentially contractors and vendors supporting DHS logging infrastructure, policy development, and risk assessment activities.

The broader public and Congress, given the report’s likely public release and its potential use to inform oversight and budget decisions.

Procedural and timeline aspects

Status: Introduced in the House and referred to the House Committee on Homeland Security (as of the action history provided on 2026-06-25).

Next steps typically include committee review, potential amendments, committee vote, and consideration on the House floor.

The bill likely specifies a timeline for the DHS Secretary to deliver the report (common for such reporting bills), though the exact deadline is not stated in the summary provided.

Potential impact

Increased transparency about DHS’s readiness in event logging for cybersecurity incidents.

A foundation for prioritized budget requests and policy updates to close identified gaps.

May influence DHS’s incident response capabilities by guiding improvements in log collection, retention, integrity, and interoperability.

Could inform congressional oversight and security posture evaluations regarding federal cyber defense infrastructure.

Notes

The bill’s emphasis is analytical (reporting on gaps) rather than prescribing concrete new logging requirements or immediate operational changes.

If enacted, the report could serve as a catalyst for subsequent legislation or DHS policy updates addressing deficiencies in event logging and cybersecurity incident management.