1. Short title This Act may be cited as the Cybersecurity Disclosure Act of 2017 . 2. Cybersecurity transparency (a) Definitions In this section— (1) the term Commission means the Securities and Exchange Commission; (2) the term cybersecurity threat — (A) means an action, not protected by the First Amendment to the Constitution of the United States, on or through an information system that may result in an unauthorized effort to adversely impact the security, availability, confidentiality, or integrity of an information system or information that is stored on, processed by, or transiting an information system; and (B) does not include any action that solely involves a violation of a consumer term of service or a consumer licensing agreement; (3) the term information system — (A) has the meaning given the term in section 3502 of title 44, United States Code; and (B) includes industrial control systems, such as supervisory control and data acquisition systems, distributed control systems, and programmable logic controllers; (4) the term issuer has the meaning given the term in section 3 of the Securities Exchange Act of 1934 ( 15 U.S.C. 78c ); (5) the term NIST means the National Institute of Standards and Technology; and (6) the term reporting company means any company that is an issuer— (A) the securities of which are registered under section 12 of the Securities Exchange Act of 1934 ( 15 U.S.C. 78l )