119-HR-2659 DC Insider Procedural Viability Check

Where it stands (as of Nov 18, 2025)

House passed H.R. 2659 on Nov 17 by 402–8 under suspension; motion to reconsider laid on the table. Measure now awaits Senate action. [1]Congress.gov — All Information for H.R.2659 (House passed 11/17/2025)

Substance: establishes a DHS/CISA‑led interagency task force to assess and counter PRC state‑sponsored cyber threats (notably Volt Typhoon) within critical infrastructure, aligning with NSM‑22. [7]Congress.gov — Text of H.R.2659 (Reported in House)[8]CISA — CISA Advisory: PRC State-Sponsored Actors (Volt Typhoon)[9]Reuters — Biden signs NSM‑22 on critical infrastructure security

Budget scorekeeping: House report adopts CBO estimate — roughly $5M over 2025–2030, subject to appropriation; no direct‑spending or revenue effects, so no PAYGO complications. [2]govinfo (GPO) — House Report 119‑230 with CBO estimate for H.R.2659

Senate landscape: Republicans control the chamber; John Thune is Majority Leader and has pledged to preserve the 60‑vote filibuster. HSGAC jurisdiction applies; Chair Rand Paul, Ranking Member Gary Peters. [3]Sen. John Thune — Thune’s first remarks as Senate Majority Leader (filibuster s…[4]U.S. Senate HSGAC — HSGAC leadership for the 119th Congress (Paul chair, Peters…

Procedural Viability Check Rubric — 119‑HR‑2659

Operator’s read on power, process, and timing.

• Chamber of Origin: House bill with overwhelming bipartisan vote (402–8). Senate hasn’t acted yet; strong cross‑party House margin helps in hotline/UC. [1]Congress.gov — All Information for H.R.2659 (House passed 11/17/2025)
• Vehicle Type: Stand‑alone authorizing bill, but readily attachable to must‑pass vehicles (NDAA conference; year‑opening CR/minibus through Jan 30). [5]Congress.gov — S.2296 FY2026 NDAA (Senate-passed; held at House desk)[6]Congress.gov — H.R.5371 CR through Jan 30, 2026 (ends shutdown)
• Senate Threshold: Not reconciliation‑eligible; absent UC, expect a 60‑vote cloture world. Thune’s stated commitment to the filibuster makes UC/hotline the preferred route. [3]Sen. John Thune — Thune’s first remarks as Senate Majority Leader (filibuster s…
• Committee Path: Likely referral to Homeland Security & Governmental Affairs. Chair Rand Paul can be skeptical of new mandates, but the scope/cost are narrow and the target (PRC cyber) is broadly bipartisan; Peters can help assemble a bipartisan package. [4]U.S. Senate HSGAC — HSGAC leadership for the 119th Congress (Paul chair, Peters…
• Must‑Pass Potential: High. Cyber/PRC provisions routinely ride NDAA; alternative is inclusion in an appropriations/CR sidecar before Jan 30. [5]Congress.gov — S.2296 FY2026 NDAA (Senate-passed; held at House desk)[6]Congress.gov — H.R.5371 CR through Jan 30, 2026 (ends shutdown)
• Budget Scorekeeping: Clean. CBO: ~$5M over five years, discretionary, minimal. That eases UC/hotline and reduces PAYGO noise. [2]govinfo (GPO) — House Report 119‑230 with CBO estimate for H.R.2659
• Calendar Math: Two near‑term windows — (1) NDAA conference wrap in December; (2) post‑shutdown funding track now extended to Jan 30, 2026. Both provide viable rides. [10]Washington Post — Senate passes FY2026 NDAA 77–20[11]AP News — Trump signs funding bill ending 43‑day shutdown

Composite score: 4/5 — strong bipartisan profile, minimal scorekeeping friction, and multiple vehicles; not “must‑pass” on its own, hence not a 5.

Likely procedural path (pragmatic scenarios)

Two clean paths; leadership will choose based on floor time and negotiations around NDAA/CR.

1. Hotline + unanimous consent: HSGAC consults; Leader’s office hotlines the House‑passed bill; UC passage on the Senate floor with no amendments. Timing: late Nov–Dec window alongside NDAA movement. Risk: individual holds (privacy/civil liberties concerns). [4]U.S. Senate HSGAC — HSGAC leadership for the 119th Congress (Paul chair, Peters…
2. NDAA or CR rider: Drop H.R. 2659 text into the NDAA managers’ package or an end‑of‑year/January funding vehicle. Timing: NDAA conference report in December; fallback is the Jan 30 CR. [5]Congress.gov — S.2296 FY2026 NDAA (Senate-passed; held at House desk)[10]Washington Post — Senate passes FY2026 NDAA 77–20[6]Congress.gov — H.R.5371 CR through Jan 30, 2026 (ends shutdown)
3. If committee action is demanded: Quick HSGAC markup with minor tweaks (e.g., reporting cadence, duplication guardrails with existing CISA efforts), then UC or wrap into first moving vehicle. [4]U.S. Senate HSGAC — HSGAC leadership for the 119th Congress (Paul chair, Peters…

Risks and amendments to watch

Threat and policy context (why the politics align)

Member incentives line up: PRC cyber threat is a rare bipartisan zone; the bill tracks existing policy architecture and leadership priorities.

• CISA/NSA/FBI say PRC’s “Volt Typhoon” has targeted U.S. critical infrastructure; bipartisan appetite to show action remains high. [8]CISA — CISA Advisory: PRC State-Sponsored Actors (Volt Typhoon)
• NSM‑22 (Apr 30, 2024) reset critical‑infrastructure governance; H.R. 2659 operationalizes that framework with a DHS/CISA‑led task force. [9]Reuters — Biden signs NSM‑22 on critical infrastructure security
• Trump DHS leadership (Sec. Noem) and a GOP Senate are unlikely to oppose a low‑cost, China‑focused coordination measure. [14]Department of Homeland Security — DHS press release: Kristi Noem confirmed as S…

Bottom line

H.R. 2659 is well‑positioned to clear the Senate quickly if no one objects; failing that, it’s a textbook rider for NDAA or the Jan 30 CR. Expect minimal changes, possibly clarifying anti‑duplication or reporting language. Composite viability: 4/5. [5]Congress.gov — S.2296 FY2026 NDAA (Senate-passed; held at House desk)[6]Congress.gov — H.R.5371 CR through Jan 30, 2026 (ends shutdown)