2 U.S.C. § 4111 — Annual report by Comptroller General of the United States on cybersecurity and surveillance threats to Congress

(a) Annual report required Not later than 180 days after December 20, 2019 , and not less frequently than once each year thereafter, the Comptroller General of the United States shall submit to the congressional intelligence committees a report on cybersecurity and surveillance threats to Congress . (b) Statistics Each report submitted under subsection (a) shall include statistics on cyber attacks and other incidents of espionage or surveillance targeted against Senators or the immediate families or staff of the Senators, and Representatives, Delegates, and the Resident Commissioner, or the immediate families or staff of the Representatives, Delegates, and the Resident Commissioner, in which the nonpublic communications and other private information of such targeted individuals were lost, stolen, or otherwise subject to unauthorized access. (c) Consultation In preparing a report to be submitted under subsection (a), the Comptroller General shall consult with the Director of National Intelligence, the Secretary of Homeland Security , the Sergeant at Arms of the House of Representatives , and the Sergeant at Arms and Doorkeeper of the Senate . (d) Form The report under subsection (a), including the contents of the report in subsection (b), shall be submitted in unclassified form, but may include a classified annex to protect sources and methods and any appropriate redactions of personally identifiable information. ( Pub. L. 116–92, div. E, title LVII, § 5710 , Dec. 20, 2019 , 133 Stat. 2170 .) Statutory Notes and Related Subsidiaries Definitions For definition of “congressional intelligence committees” as used in this section, see section 5003 of div. E of Pub. L. 116–92 , set out as a note under section 3003 of Title 50 , War and National Defense.

Related documents

• 42 U.S.C. § 10801 — Congressional findings and statement of purpose#590149
• NIST SP 800-225: Fiscal Year 2022 Cybersecurity and Privacy Annual Report#2977
• NIST SP 800-238: Fiscal Year 2025 Cybersecurity and Privacy Annual Report#213682
• NIST SP 800-229: Fiscal Year 2023 Cybersecurity and Privacy Annual Report#2981
• 42 U.S.C. § 3331 — Congressional findings and declaration of purpose#592762