The record

LegislationLegislation· Mar 2025
HR 872 Passed House — in Senate

Sponsored by Nancy Mace (R)

Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025

Requires federal contractors to adopt vulnerability disclosure policies matching national cybersecurity standards.

Tradeoff

Mandates contractors report security flaws to the government, aligning with NIST guidelines and industry standards. Agencies can waive the requirement for national security or research reasons with congressional notification.

What's in it

See official bill text

Passed the House by on March 3, 2025 — now in the Senate.

  1. House

    Introduced

    (Jan 31, 2025)

  2. House

    Committee on Oversight and Government Reform(Jan 31, 2025)

    The bill went to more than one committee at the same time.

  3. House

    Passage of the bill

    Passed by (Mar 3, 2025)

    No individual votes were recorded.

  4. Senate

    Received from the House

    on Homeland Security and Governmental Affairs(Mar 4, 2025)