119th Congress · introduced in the House · Jan 31, 2025
Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
Official title from Congress.gov
Latest action (Mar 4, 2025): Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
View on Congress.govPolicy area: Government Operations and Politics
Congressional Research Service summary, version: Introduced in House (Jan 31, 2025)
Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
This bill requires revisions to acquisition regulations related to information systems vulnerabilities for certain federal contractors. The revisions apply to contractors whose contract is at or above the simplified acquisition threshold ($250,000 in most cases) or that use, operate, manage, or maintain a federal information system on behalf of an agency.
Under the bill, the Office of Management and Budget must review the Federal Acquisition Regulation (FAR) and recommend updated contract requirements and language for contractor vulnerability disclosure programs. (Such programs establish processes for identifying, reporting, and mitigating information system vulnerabilities discovered by security researchers, software developers, and others.) The recommendations must include requirements to ensure that such contractors implement vulnerability disclosure policies consistent with guidelines from the National Institute of Standards and Technology. The Federal Acquisition Regulation Council must review these recommendations and update the FAR as necessary to incorporate requirements for such contractors to receive information about potential security vulnerabilities in contractor information systems used in performance of contract.
The Department of Defense (DOD) must conduct a similar review and update of regulations with respect to the DOD Supplement to the FAR.
Includes amendment, cloture, and procedural votes. Each is labeled with its exact question; only a passage question is a vote to pass the bill.
No recorded roll calls on this bill in coverage.
Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Motion to reconsider laid on the table Agreed to without objection.
On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H930-931)
Passed/agreed to in House: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H930-931)
DEBATE - The House proceeded with forty minutes of debate on H.R. 872.
Considered under suspension of the rules. (consideration: CR H930-932)
Mr. Comer moved to suspend the rules and pass the bill, as amended.
Referred to the Committee on Oversight and Government Reform, and in addition to the Committee on Armed Services, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
Referred to the Committee on Oversight and Government Reform, and in addition to the Committee on Armed Services, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
Introduced in House
Introduced in House
Actions from Congress.gov, newest first.
Computer security and identity theft · Government information and archives · Public contracts and procurement
LD-2 reports whose issue descriptions explicitly cite this bill (bill type and number validated against Congress.gov records). A citation does not establish the client's position or any contact with a member.
Loading lobbying reportsCoverage: reports for 2025 onward, posted Jan 1, 2025 through Oct 24, 2026.
27 citations; showing the 25 most recently posted.
GOOGLE CLIENT SERVICES LLC · lobbying firm or registrant: GOOGLE CLIENT SERVICES LLC
2026 Q3 report (Jul 1, 2026 – Sep 30, 2026) · posted Oct 20, 2026 · issue area: Homeland Security
$3,230,000
Spent on own lobbying
Cybersecurity issues Online content moderation Cybersecurity workforce S. 438 / H.R. 1000 - Cyber PIVOTT Act H.R. 872 - Federal Contractor Cybersecurity Vulnerability Reduction Act H.R. 5079 - Widespread Information Management for the Welfare of Infrastructure and Government A…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
AIR TRANSPORT ASSOCIATION OF AMERICA, INC. (D/B/A AIRLINES FOR AMERICA) · lobbying firm or registrant: AIR TRANSPORT ASSOCIATION OF AMERICA, INC. (D/B/A AIRLINES FOR AMERICA)
2026 Q3 report (Jul 1, 2026 – Sep 30, 2026) · amended · posted Oct 17, 2026 · issue area: Aviation/Airlines/Airports
$1,131,400
Spent on own lobbying
…ensation, and for other purposes. H.R. 5663 To modify the termination of the aviation consumer protection advisory committee, and for other purposes. S. 1899 / H.R. 872 Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025 S. 3779 A bill to limit the Department of Homeland Security's use of facial recognition. H…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
NATIONAL SMALL BUSINESS ASSOCIATION · lobbying firm or registrant: NATIONAL SMALL BUSINESS ASSOCIATION
2026 Q2 report (Apr 1, 2026 – Jun 30, 2026) · posted Jul 20, 2026 · issue area: Small Business
$16,000
Spent on own lobbying
…al of the United States to report on access to credit for small business concerns owned and controlled by covered individuals, and for other purposes. Support. H.R.872 - Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025. To require covered contractors implement a vulnerability disclosure policy consistent w…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
GOOGLE CLIENT SERVICES LLC · lobbying firm or registrant: GOOGLE CLIENT SERVICES LLC
2026 Q2 report (Apr 1, 2026 – Jun 30, 2026) · posted Jul 20, 2026 · issue area: Homeland Security
$3,570,000
Spent on own lobbying
Cybersecurity issues Online content moderation Cybersecurity workforce S. 438 / H.R. 1000 - Cyber PIVOTT Act H.R. 872 - Federal Contractor Cybersecurity Vulnerability Reduction Act H.R. 5079 - Widespread Information Management for the Welfare of Infrastructure and Government A…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
AIR TRANSPORT ASSOCIATION OF AMERICA, INC. (D/B/A AIRLINES FOR AMERICA) · lobbying firm or registrant: AIR TRANSPORT ASSOCIATION OF AMERICA, INC. (D/B/A AIRLINES FOR AMERICA)
2026 Q2 report (Apr 1, 2026 – Jun 30, 2026) · posted Jul 20, 2026 · issue area: Aviation/Airlines/Airports
$1,100,700
Spent on own lobbying
…ensation, and for other purposes. H.R. 5663 To modify the termination of the aviation consumer protection advisory committee, and for other purposes. S. 1899 / H.R. 872 Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025 S. 3779A bill to limit the Department of Homeland Security's use of facial recognition. H.…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
NATIONAL SMALL BUSINESS ASSOCIATION · lobbying firm or registrant: NATIONAL SMALL BUSINESS ASSOCIATION
2026 Q1 report (Jan 1, 2026 – Mar 31, 2026) · posted Apr 21, 2026 · issue area: Small Business
$15,000
Spent on own lobbying
…al of the United States to report on access to credit for small business concerns owned and controlled by covered individuals, and for other purposes. Support. H.R.872 - Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025. To require covered contractors implement a vulnerability disclosure policy consistent w…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
GOOGLE CLIENT SERVICES LLC · lobbying firm or registrant: GOOGLE CLIENT SERVICES LLC
2026 Q1 report (Jan 1, 2026 – Mar 31, 2026) · posted Apr 20, 2026 · issue area: Homeland Security
$2,860,000
Spent on own lobbying
Cybersecurity issues Online content moderation Cybersecurity workforce S. 438 / H.R. 1000 - Cyber PIVOTT Act H.R. 872 - Federal Contractor Cybersecurity Vulnerability Reduction Act H.R. 5079 - Widespread Information Management for the Welfare of Infrastructure and Government A…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
AIR TRANSPORT ASSOCIATION OF AMERICA, INC. (D/B/A AIRLINES FOR AMERICA) · lobbying firm or registrant: AIR TRANSPORT ASSOCIATION OF AMERICA, INC. (D/B/A AIRLINES FOR AMERICA)
2026 Q1 report (Jan 1, 2026 – Mar 31, 2026) · posted Apr 17, 2026 · issue area: Aviation/Airlines/Airports
$1,036,900
Spent on own lobbying
…ensation, and for other purposes. H.R. 5663 To modify the termination of the aviation consumer protection advisory committee, and for other purposes. S. 1899 / H.R. 872 Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025 S.3779 A bill to limit the Department of Homeland Security's use of facial recognition. H.…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
HACKERONE · lobbying firm or registrant: VENABLE LLP
2026 Q1 report (Jan 1, 2026 – Mar 31, 2026) · posted Apr 10, 2026 · issue area: Computer Industry
$10,000
Paid to lobbying firm
Issues related to cybersecurity, National Defense Authorization Act H.R. 872, Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
GOOGLE CLIENT SERVICES LLC · lobbying firm or registrant: GOOGLE CLIENT SERVICES LLC
2025 Q4 report (Oct 1, 2025 – Dec 31, 2025) · posted Jan 20, 2026 · issue area: Homeland Security
$3,350,000
Spent on own lobbying
Cybersecurity issues Online content moderation Cybersecurity workforce S. 438 / H.R. 1000 - Cyber PIVOTT Act H.R. 872 - Federal Contractor Cybersecurity Vulnerability Reduction Act H.R. 5079 - Widespread Information Management for the Welfare of Infrastructure and Government A…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
CHAMBER OF COMMERCE OF THE U.S.A. · lobbying firm or registrant: CHAMBER OF COMMERCE OF THE U.S.A.
2025 Q4 report (Oct 1, 2025 – Dec 31, 2025) · posted Jan 20, 2026 · issue area: Homeland Security
$17,960,000
Spent on own lobbying
H.R. 872, Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025 H.R. 1000, Cyber PIVOTT Act H.R. 1604/S. 754, Farm and Food Cybersecurity Act of 2025 H.R…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
RED HAT INC · lobbying firm or registrant: RED HAT INC
2025 Q4 report (Oct 1, 2025 – Dec 31, 2025) · posted Jan 20, 2026 · issue area: Computer Industry
$70,000
Spent on own lobbying
…dernization; S. 1875, Streamlining Federal Cybersecurity Regulations Act of 2025; S.1956, Strengthening Agency Management and Oversight of Software Assets Act; H.R. 872, Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025; H.R. 2385 CREATE AI Act of 2025; Cybersecurity standards and practices, including issues…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
NATIONAL SMALL BUSINESS ASSOCIATION · lobbying firm or registrant: NATIONAL SMALL BUSINESS ASSOCIATION
2025 Q4 report (Oct 1, 2025 – Dec 31, 2025) · posted Jan 20, 2026 · issue area: Small Business
$30,000
Spent on own lobbying
…al of the United States to report on access to credit for small business concerns owned and controlled by covered individuals, and for other purposes. Support. H.R.872 - Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025. To require covered contractors implement a vulnerability disclosure policy consistent w…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
AIR TRANSPORT ASSOCIATION OF AMERICA, INC. (D/B/A AIRLINES FOR AMERICA) · lobbying firm or registrant: AIR TRANSPORT ASSOCIATION OF AMERICA, INC. (D/B/A AIRLINES FOR AMERICA)
2025 Q4 report (Oct 1, 2025 – Dec 31, 2025) · posted Jan 16, 2026 · issue area: Aviation/Airlines/Airports
$1,200,400
Spent on own lobbying
…ensation, and for other purposes. H.R. 5663 To modify the termination of the aviation consumer protection advisory committee, and for other purposes. S. 1899 / H.R. 872 Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025 In addition to contacts associated with the legislation described above: Sustainable Aviat…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
HACKERONE · lobbying firm or registrant: VENABLE LLP
2025 Q4 report (Oct 1, 2025 – Dec 31, 2025) · posted Jan 7, 2026 · issue area: Computer Industry
$10,000
Paid to lobbying firm
Issues related to cybersecurity, National Defense Authorization Act H.R. 872, Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
CHAMBER OF COMMERCE OF THE U.S.A. · lobbying firm or registrant: CHAMBER OF COMMERCE OF THE U.S.A.
2025 Q3 report (Jul 1, 2025 – Sep 30, 2025) · posted Oct 20, 2025 · issue area: Homeland Security
$13,650,000
Spent on own lobbying
H.R. 872, Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025 H.R. 1000, Cyber PIVOTT Act H.R. 1604/S. 754, Farm and Food Cybersecurity Act of 2025 H.R…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
GOOGLE CLIENT SERVICES LLC · lobbying firm or registrant: GOOGLE CLIENT SERVICES LLC
2025 Q3 report (Jul 1, 2025 – Sep 30, 2025) · posted Oct 20, 2025 · issue area: Homeland Security
$3,570,000
Spent on own lobbying
Cybersecurity issues Online content moderation Cybersecurity workforce S. 438 / H.R. 1000 - Cyber PIVOTT Act H.R. 872 - Federal Contractor Cybersecurity Vulnerability Reduction Act
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
NATIONAL SMALL BUSINESS ASSOCIATION · lobbying firm or registrant: NATIONAL SMALL BUSINESS ASSOCIATION
2025 Q3 report (Jul 1, 2025 – Sep 30, 2025) · posted Oct 20, 2025 · issue area: Small Business
$50,000
Spent on own lobbying
…al of the United States to report on access to credit for small business concerns owned and controlled by covered individuals, and for other purposes. Support. H.R.872 - Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025. To require covered contractors implement a vulnerability disclosure policy consistent w…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
RED HAT INC · lobbying firm or registrant: RED HAT INC
2025 Q3 report (Jul 1, 2025 – Sep 30, 2025) · posted Oct 14, 2025 · issue area: Computer Industry
$70,000
Spent on own lobbying
…dernization; S. 1875, Streamlining Federal Cybersecurity Regulations Act of 2025; S.1956, Strengthening Agency Management and Oversight of Software Assets Act; H.R. 872, Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025; H.R. 2385 CREATE AI Act of 2025; Cybersecurity standards and practices, including issues…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
HACKERONE · lobbying firm or registrant: VENABLE LLP
2025 Q3 report (Jul 1, 2025 – Sep 30, 2025) · posted Oct 13, 2025 · issue area: Computer Industry
$10,000
Paid to lobbying firm
Issues related to cybersecurity, National Defense Authorization Act H.R. 872, Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
GOOGLE CLIENT SERVICES LLC · lobbying firm or registrant: GOOGLE CLIENT SERVICES LLC
2025 Q2 report (Apr 1, 2025 – Jun 30, 2025) · posted Jul 21, 2025 · issue area: Homeland Security
$3,170,000
Spent on own lobbying
Cybersecurity issues Online content moderation Cybersecurity workforce S. 438 / H.R. 1000 - Cyber PIVOTT Act H.R. 872 - Federal Contractor Cybersecurity Vulnerability Reduction Act
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
NATIONAL SMALL BUSINESS ASSOCIATION · lobbying firm or registrant: NATIONAL SMALL BUSINESS ASSOCIATION
2025 Q2 report (Apr 1, 2025 – Jun 30, 2025) · posted Jul 21, 2025 · issue area: Small Business
$60,000
Spent on own lobbying
…al of the United States to report on access to credit for small business concerns owned and controlled by covered individuals, and for other purposes. Support. H.R.872 - Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025. To require covered contractors implement a vulnerability disclosure policy consistent w…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
RED HAT INC · lobbying firm or registrant: RED HAT INC
2025 Q2 report (Apr 1, 2025 – Jun 30, 2025) · posted Jul 21, 2025 · issue area: Computer Industry
$70,000
Spent on own lobbying
…dernization; S. 1875, Streamlining Federal Cybersecurity Regulations Act of 2025; S.1956, Strengthening Agency Management and Oversight of Software Assets Act; H.R. 872, Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025; H.R. 2385 CREATE AI Act of 2025; Cybersecurity standards and practices, including issues…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
HACKERONE · lobbying firm or registrant: VENABLE LLP
2025 Q2 report (Apr 1, 2025 – Jun 30, 2025) · posted Jul 11, 2025 · issue area: Computer Industry
$10,000
Paid to lobbying firm
Issues related to cybersecurity, National Defense Authorization Act H.R. 872, Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
GOOGLE CLIENT SERVICES LLC · lobbying firm or registrant: GOOGLE CLIENT SERVICES LLC
2025 Q1 report (Jan 1, 2025 – Mar 31, 2025) · posted Apr 21, 2025 · issue area: Homeland Security
$3,010,000
Spent on own lobbying
Cybersecurity issues Online content moderation Cybersecurity workforce S. 438 / H.R. 1000 - Cyber PIVOTT Act H.R. 872 - Federal Contractor Cybersecurity Vulnerability Reduction Act
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing