In Response to Extensive Salt Typhoon Hacks, Warner, Cruz Introduce Bipartisan Bill to Strengthen Telecommunications Cybersecurity

WASHINGTON – U.S. Sens. Mark R. Warner (D-VA), Vice Chairman of the Senate Select Committee on Intelligence and former technology entrepreneur who cofounded the wireless firm Nextel, and Ted Cruz (R-TX), Chairman of the Commerce, Science, and Transportation Committee, today introduced the Telecommunications Cybersecurity and Resilience Act , bipartisan legislation that would create a voluntary framework, developed by experts from government and the private sector, to strengthen telecommunications cybersecurity. This bill comes after the Salt Typhoon hacks that widely compromised the U.S. and global telecommunications sector. “The Salt Typhoon intrusion was the worst telecom hack in our nation’s history and showed us just how vulnerable our critical infrastructure is, but it does not have to be that way. If telecommunications companies adopt cybersecurity best practices, our networks can be more resilient,” said Sen. Warner . “This bipartisan legislation is a good start in protecting our nation and strengthening the communications networks Americans rely on every day.” “Foreign adversaries are increasingly targeting America’s communications networks. Securing them requires an approach that keeps pace with evolving threats. This sensible bill brings government and industry together to develop voluntary, telecom-specific cybersecurity best practices rather than adopting rigid federal mandates that quickly become outdated. As Commerce Committee chairman, I will continue working to strengthen the networks Americans rely on while preserving the innovation needed to protect them,” said Chairman Cruz . The Telecommunications Cybersecurity and Resilience Act would: Create a telecommunications cybersecurity working group among providers, suppliers, cybersecurity experts, and relevant state, local, and federal agencies, to develop practical, risk-based cybersecurity best practices focusing specifically on the telecommunications sector. Create a voluntary certification process , that puts real accountability behind the adoption of best practices through independent third-party assessment and certification. Require the best practices to be reviewed and updated at least every two years and following major cyber incidents or significant changes in the threat landscape. Read the full bill here . Read a one pager here and a section by section here . ###