Budget

$37 million in emergency OPM funding left out of CISA

Barbara Milkulski

Sen Barbara Mikulski (D-Md.) tried unsuccessfully to secure $37 million for IT modernization at Office of Personnel Management.

The Senate's information-sharing cybersecurity bill cleared a procedural hurdle Oct. 22, but conspicuously absent from the bill was an amendment for $37 million in emergency funding for the Office of Personnel Management's IT modernization efforts.

OPM could use the funding: it is struggling to come up with the money for crucial IT projects worth at least $117 million. The Senate Appropriations Committee in July rejected an earlier request from Sen Barbara Mikulski (D-Md.), the vice chairwoman of the committee, to provide the $37 million in IT funding.

Mikulski also sponsored the CISA amendment to increase OPM's funding, and on Oct. 22 she urged her colleagues to support the provision.

"Some say this funding is premature, and OPM is not ready to deploy it effectively," Mikulski said in a statement. "However, those reports were written before Beth Cobert became OPM acting director.  She is turning OPM around, but she needs the resources to secure OPM's IT systems, and cybersecurity is a critical issue."

The Maryland Democrat added: "We know what OPM needs to do. They have the will, they have a business plan and now they need the wallet."

However, the agency's inspector general has explicitly characterized OPM's lack of a business plan, in the form of a Major IT Business Case, as irresponsible. As of a Sept. 3 update to the IG's flash audit, OPM had yet to determine "the full scope and overall costs" of its Shell modernization project, which is part of the $117 million in projects that the agency is straining to fund.

The Cybersecurity Information Sharing Act to which Mikulski tried to hitch the OPM funding is the latest in a long line of legislative efforts to encourage private firms to share more cyber threat data amongst themselves and with the government. Information-sharing bills in recent years have stalled in the face of privacy concerns, concerns that are again center stage this Congress.

Apple and a trade group representing Amazon, Google and Facebook have come out against the legislation. The powerful U.S. Chamber of Commerce, however, strongly backs the bill.

CISA supporters received a boost Oct. 22 when the White House offered its support for the bill via a Statement of Administration Policy. The statement praised legislators for strengthening privacy protections in the bill with amendments. But the administration nonetheless "remains concerned that the bill's authorization to share with any federal entity, notwithstanding any other provision of law, weakens the bill's requirement that information be shared with a civilian entity," the statement said. "This remains a significant concern, and the administration is eager to work with the Congress to seek a workable solution."

Any bill coming out of the Senate would have to be reconciled with the version of information-sharing legislation that the House passed in April.

A set of seven amendments to CISA is slated for a Senate vote on Oct. 27. That will be followed by a cloture vote and a final vote on the underlying bill.

About the Author

Sean Lyngaas is an FCW staff writer covering defense, cybersecurity and intelligence issues. Prior to joining FCW, he was a reporter and editor at Smart Grid Today, where he covered everything from cyber vulnerabilities in the U.S. electric grid to the national energy policies of Britain and Mexico. His reporting on a range of global issues has appeared in publications such as The Atlantic, The Economist, The Washington Diplomat and The Washington Post.

Lyngaas is an active member of the National Press Club, where he served as chairman of the Young Members Committee. He earned his M.A. in international affairs from The Fletcher School of Law and Diplomacy at Tufts University, and his B.A. in public policy from Duke University.

Click here for previous articles by Lyngaas, or connect with him on Twitter: @snlyngaas.


Featured

  • Cybersecurity
    malware detection (Alexander Yakimov/Shutterstock.com)

    Microsoft targets copycat influence websites

    Microsoft went to court to take down websites it believes to be part of a foreign intelligence operation targeting conservative think tanks and the U.S. Senate.

  • Cybersecurity
    secure network

    FAA explores shifting its network to FISMA high

    The Federal Aviation Administration is exploring an upgrade to the information security categorization of IT systems as part of air traffic control modernization.

  • Cybersecurity
    Shutterstock photo id 669226093 By Gorodenkoff

    The disinformation game

    The federal government is poised to bring new tools and strategies to bear in the fight against foreign-backed online disinformation campaigns, but how and when they choose to act could have ramifications on the U.S. political ecosystem.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.