H. Rept. 116-193: Cybersecurity Vulnerability Remediation Act, Report to Accompany H.R. 3710, Including Cost Estimate of the Congressional Budget Office, August 30, 2019 [open pdf - 347KB]
From the Purpose and Summary: "H.R. 3710, the 'Cybersecurity Vulnerability Remediation Act,' seeks to improve how the Department of Homeland Security's (DHS) Cybersecurity and Infrastructure Security Agency (CISA) helps Federal and non-Federal entities manage known cybersecurity risks. Toward that end, the bill would authorize the CISA Director to identify, develop, and disseminate actionable protocols to mitigate cybersecurity vulnerabilities--including for software or hardware that is no longer supported by the vendor. Additionally, the bill would authorize the DHS Under Secretary for Science and Technology to establish an incentive-based program that allows industry, individuals, academia, and others to compete in providing remediation solutions for cybersecurity vulnerabilities."
H. Rept. 116-193; House Report 116-193
U. S. Government Publishing Office: http://www.gpo.gov/