1. Short title This Act may be cited as the Building Cyber Resilience After SolarWinds Act of 2023 . 2. Building cyber resilience after SolarWinds (a) Definitions In this section: (1) Critical infrastructure The term critical infrastructure has the meaning given such term in section 1016(e) of Public Law 107–56 ( 42 U.S.C. 5195c(e) ). (2) Director The term Director means the Director of the Cybersecurity and Infrastructure Security Agency. (3) Information system The term information system has the meaning given such term in section 2200 of the Homeland Security Act of 2002 ( 6 U.S.C. 650 ). (4) Significant cyber incident The term significant cyber incident has the meaning given such term in section 2240 of the Homeland Security Act of 2002 ( 6 U.S.C. 681 ). (5) Solarwinds incident The term SolarWinds incident refers to the significant cyber incident that prompted the establishment of a Unified Cyber Coordination Group, as provided by section V(B)(2) of Presidential Policy Directive 41, in December 2020. (b) SolarWinds investigation and report (1) Investigation The Director, in consultation with the National Cyber Director and the heads of other relevant Federal departments and agencies, shall carry out an investigation to evaluate the impact of the SolarWinds incident on information systems owned and operated by Federal departments and agencies, and, to the extent practicable, other critical infrastructure. (2) Elements In carrying out subsection (b), the Director shall review the following: (A) The extent to which Federal information systems were accessed, compromised, or otherwise impacted by the SolarWinds incident, and any potential ongoing security concerns or consequences arising from such incident. (B) The extent to which information systems that support other critical infrastructure were accessed, compromised, or otherwise impacted by the SolarWinds incident, where such information is available to the Director. (C) Any ongoing security concerns or consequences arising from the SolarWinds incident,