skip to main content

H.R. 3359 (115th): Cybersecurity and Infrastructure Security Agency Act of 2018

About the bill

Source: Republican Policy Committee

H.R. 3359 redesignates the Department of Homeland Security’s National Protection and Programs Directorate as the Cybersecurity and Infrastructure Security Agency (CISA). The bill directs CISA to be headed by a Director of National Cybersecurity and Infrastructure Security to lead national efforts to protect and enhance the security and resiliency of U.S. cybersecurity, emergency communications, and critical infrastructure.

Within CISA, there shall be a cybersecurity division, an infrastructure security division, and an emergency communications division (previously the Office of Emergency Communications).

The Office of Biometric Identity Management within the existing National Protection and Programs Directorate is transferred to the Management Directorate of the Department, and the Federal Protective Service is authorized to be transferred to any component, directorate, or other office of the Department deemed appropriate by the Secretary.

Sponsor and status

Michael McCaul

Sponsor. Representative for Texas's 10th congressional district. Republican.

Read Text »
Last Updated: Nov 15, 2018
Length: 19 pages
Jul 24, 2017
115th Congress (2017–2019)

Enacted — Signed by the President on Nov 16, 2018

This bill was enacted after being signed by the President on November 16, 2018.

Pub.L. 115-278

11 Cosponsors (9 Republicans, 2 Democrats)


Incorporated legislation

This bill incorporates provisions from:

H.R. 2825: DHS Authorization Act

Passed House (Senate next) on Jul 20, 2017. 10% incorporated. (compare text)


Jul 24, 2017

Bills and resolutions are referred to committees which debate the bill before possibly sending it on to the whole chamber.

Jul 26, 2017
Ordered Reported

A committee has voted to issue a report to the full chamber recommending that the bill be considered further. Only about 1 in 4 bills are reported out of committee.

Dec 11, 2017
Passed House (Senate next)

The bill was passed in a vote in the House. It goes to the Senate next. The vote was by voice vote so no record of individual votes was made.

Dec 11, 2017
Reported by House Committee on Homeland Security

A committee issued a report on the bill, which often provides helpful explanatory background on the issue addressed by the bill and the bill's intentions.

Oct 3, 2018
Passed Senate with Changes (back to House)

The Senate passed the bill with changes not in the House version and sent it back to the House to approve the changes. The vote was by Unanimous Consent so no record of individual votes was made.

Nov 13, 2018
House Agreed to Changes

The bill was passed by both chambers in identical form. It goes to the President next who may sign or veto the bill. The vote was without objection so no record of individual votes was made.

Nov 16, 2018
Enacted — Signed by the President

The President signed the bill and it became law.

H.R. 3359 (115th) was a bill in the United States Congress.

A bill must be passed by both the House and Senate in identical form and then be signed by the President to become law.

Bills numbers restart every two years. That means there are other bills with the number H.R. 3359. This is the one from the 115th Congress.

This bill was introduced in the 115th Congress, which met from Jan 3, 2017 to Jan 3, 2019. Legislation not passed by the end of a Congress is cleared from the books.

How to cite this information.

We recommend the following MLA-formatted citation when using the information you see here in academic work:

“H.R. 3359 — 115th Congress: Cybersecurity and Infrastructure Security Agency Act of 2018.” 2017. November 29, 2022 <>

Where is this information from?

GovTrack automatically collects legislative information from a variety of governmental and non-governmental sources. This page is sourced primarily from, the official portal of the United States Congress. is generally updated one day after events occur, and so legislative activity shown here may be one day behind. Data via the congress project.