The reform bill also would update agency and chief information officer responsibilities, including ensuring cybersecurity is integrated with agency strategic and operational planning processes and developing and maintaining a risk management strategy.