HR 1258
Improving Contractor Cybersecurity Act
Jurisdiction
US Congress
Session
119th Congress (2025-2026)
Last updated at
Jun 14, 2026, 6:47 AM
Take action
Sign in to record your position, submit testimony, or contact your legislator.
Sign in to take action- Introduced
- Passed House
- Passed Senate
- To President
- Became Law
Bill overview
The Improving Contractor Cybersecurity Act requires federal executive agencies to ensure that any contracts for information technology include a vulnerability disclosure policy and program. Contractors must establish procedures for receiving and responding to vulnerability reports, including clear guidelines for researchers, timelines for assessment and remediation, and a public-facing website for submitting reports. The act also mandates that contractors report significant vulnerabilities to the Cybersecurity and Infrastructure Security Agency (CISA) for public dissemination.
Sponsors
Official sponsors from legislative records.
Primary sponsor
Arguments in favor
Reasons to support this legislation.
No arguments in favor have been submitted.
Submit yoursArguments opposed
Reasons to oppose this legislation.
No arguments opposed have been submitted.
Submit yoursRead the latest version inline or switch to a previous version.