Sponsor
Ronald Lee Wyden
Senator · D-OR
Senator · D-OR
The bill increases timely transparency of CISA's unclassified telecom-vulnerability findings to help defenders and public oversight, at the risk of exposing exploitable details to attackers and imposing administrative burdens on DHS/CISA.
Researchers, private telecom operators, and state/local cyber defenders gain timely access to CISA's unclassified findings (released in full within 30 days), enabling them to prioritize mitigations and improve network resilience.
Taxpayers and oversight bodies gain greater government transparency and oversight because DHS/CISA must disclose an internal unclassified study prepared under contract.
The general public and national security stakeholders receive earlier awareness of telecommunications vulnerabilities, which can inform policy and accountability discussions.
Releasing the report in full could disclose operational details that, if not properly redacted, would help malicious actors identify and exploit telecom weaknesses.
DHS/CISA will need to allocate staff time and resources to prepare, review, and publish the document within 30 days, diverting personnel and attention from other priorities.
Based on analysis of 2 sections of legislative text.
Requires DHS to publish the unclassified "U.S. Telecommunications Insecurity 2022" report within 30 days of enactment.
Requires the Department of Homeland Security to publicly release the full unclassified report titled "U.S. Telecommunications Insecurity 2022," which was prepared for CISA under a DHS contract, within 30 days of the Act becoming law. The bill only sets a short title and directs publication of an existing unclassified study; it does not create new programs, funding, or regulatory changes.
Official title: Require the Secretary of Homeland Security to publicly release, in full, the unclassified report titled "U.S. Telecommunications Insecurity 2022", and for other purposes.
Introduced July 28, 2025 by Ronald Lee Wyden · Last progress July 29, 2025