Analyses / Public Summary / 119 · HR 2659 Public Summary

119-HR-2659 Journalist Public Summary

119 · HR 2659 Strengthening Cyber Resilience Against State-Sponsored Threats Act

science Science, Technology, Communications
Strengthening Cyber Resilience Against State-Sponsored Threats ActThe bill creates a joint interagency task force to facilitate agency collaboration on efforts to respond to Chinese...

Creates a DHS/CISA‑led task force to coordinate the federal response to Chinese state‑sponsored cyber threats (including “Volt Typhoon”), sets deadlines for classified reports with public summaries, and passed the House 402–8 on November 17, 2025; it now heads to the Senate. [1]Congress.gov (Library of Congress) — Text - H.R.2659 (Reported in House): Stren…[2]CISA — CISA Advisory: PRC State‑Sponsored Actors Compromise and Maintain Persis…[3]Congress.gov (Library of Congress) — H.R.2659 Overview and Actions (status: Pas…

Published
18 Nov 2025
Updated
18 Nov 2025
Tags
US Congress · Cybersecurity · Public Summary
Unvetted
01 · Section

Public Summary: 119-HR-2659 (Strengthening Cyber Resilience Against State-Sponsored Threats Act)

1) Headline Summary: A bipartisan House bill to stand up a DHS/CISA‑led task force focused on Chinese state‑sponsored hackers like “Volt Typhoon,” with regular threat reporting to Congress and public executive summaries. [3]Congress.gov (Library of Congress) — H.R.2659 Overview and Actions (status: Pas…[2]CISA — CISA Advisory: PRC State‑Sponsored Actors Compromise and Maintain Persis…

2) What It Does: The bill orders DHS’s Cybersecurity and Infrastructure Security Agency (CISA) to create an interagency task force with the FBI and sector risk‑management agencies to detect, analyze, and respond to People’s Republic of China (PRC) state‑sponsored cyber threats. It requires an initial report within 540 days of the task force’s creation, then annual reports for five years, and it posts an unclassified executive summary online after each. The task force sunsets 60 days after its final briefing. The measure also exempts the task force from the Federal Advisory Committee Act (FACA) and the Paperwork Reduction Act (PRA). [1]Congress.gov (Library of Congress) — Text - H.R.2659 (Reported in House): Stren…

3) Why It Matters: U.S. cyber authorities warn PRC actors have sought persistent access inside critical infrastructure—activity associated with “Volt Typhoon”—to be positioned for disruption in a crisis. The bill aligns with the federal critical‑infrastructure framework set by National Security Memorandum‑22, which designates DHS/CISA to coordinate cross‑sector risk management. [2]CISA — CISA Advisory: PRC State‑Sponsored Actors Compromise and Maintain Persis…[4]The White House (archived) — National Security Memorandum on Critical Infrastru…

  • Bipartisan support: The House approved the bill 402–8 under suspension of the rules on November 17, 2025—an indicator of broad, cross‑party backing. [3]Congress.gov (Library of Congress) — H.R.2659 Overview and Actions (status: Pas…
  • Lead sponsors and committee backers: Sponsor Rep. Andrew Ogles and Homeland Security Committee leaders (Reps. Mark E. Green and Andrew Garbarino) argue the bill enables a coordinated, whole‑of‑government response to PRC‑linked campaigns like Volt Typhoon. [5]Office of Rep. Andrew Ogles — Rep. Andy Ogles press release announcing H.R. 265…[6]House Committee on Homeland Security — Homeland Security Committee press releas…
  • National security officials’ context: CISA, NSA, and FBI have publicly warned about PRC state‑sponsored actors pre‑positioning in U.S. infrastructure, underscoring the bill’s focus. [2]CISA — CISA Advisory: PRC State‑Sponsored Actors Compromise and Maintain Persis…

4) Who’s Against It: A small number of House members (8) voted no. Some transparency advocates and lawmakers generally caution that exemptions from FACA and PRA can reduce public visibility into advisory bodies; supporters counter that classified threat work requires flexibility. The bill also tries to avoid duplication by allowing coordination with pre‑existing efforts. [3]Congress.gov (Library of Congress) — H.R.2659 Overview and Actions (status: Pas…[7]U.S. Senate Homeland Security & Governmental Affairs Committee — HSGAC release:…[1]Congress.gov (Library of Congress) — Text - H.R.2659 (Reported in House): Stren…

5) What’s Next: After House passage on November 17, 2025, the bill goes to the Senate for consideration; as of November 18, 2025, no Senate action is recorded on Congress.gov. [3]Congress.gov (Library of Congress) — H.R.2659 Overview and Actions (status: Pas…

House vote
402yea (8 nay)
Task force start
120days after enactment
First report due
540days after task force created
Follow‑up reports
5annual cycles
Public element
1unclassified executive summary per report
Sources cited
  1. [1] Text - H.R.2659 (Reported in House): Strengthening Cyber Resilience Against State-Sponsored Threats Act Congress.gov (Library of Congress)
  2. [2] CISA Advisory: PRC State‑Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure (AA24‑038A) CISA
  3. [3] H.R.2659 Overview and Actions (status: Passed House; vote 402–8 on Nov. 17, 2025) Congress.gov (Library of Congress)
  4. [4] National Security Memorandum on Critical Infrastructure Security and Resilience (NSM‑22) The White House (archived)
  5. [5] Rep. Andy Ogles press release announcing H.R. 2659 (April 8, 2025) Office of Rep. Andrew Ogles
  6. [6] Homeland Security Committee press release on reintroducing H.R. 2659 (April 8, 2025) House Committee on Homeland Security
  7. [7] HSGAC release: Federal Advisory Committee Transparency Act (background on FACA transparency) U.S. Senate Homeland Security & Governmental Affairs Committee

Discussion