,,ib  ,union ,cal5d> ,no4 #daa  #aac?   
,,congress  #b;d ,session  ,h4 ,r4 #cfif
  ,report ,no4 #aac-eej1 ,"p ,i  ,,9 ,,!
 ,,h\se ,,( ,,repres5tatives  ,decemb]  
#aa1 #bjac ,mr4 ,mc,caul 7= himself1    
,mr4 ,meehan1 ,mr4 ,?ompson (           
,mississippi1 & ,ms4 ,cl>ke7 introduc$ !
 foll[+ bill2 :i* 0 ref]r$ to !         
,committee on ,homel& ,security1 & 9    
addition to ! ,committees on ,sci5ce1   
,space1 & ,te*nology & ,ov]sight &      
,gov]nm5t ,re=m1 = a p]iod to be        
subsequ5tly det]m9$ by ! ,speak]1 9 ea* 
case = consid]ation ( su* provisions z  
fall )9 ! jurisdiction ( ! committee    
conc]n$  ,july #bc1 #bjad ,report$ f !  
,committee on ,homel& ,security ) an    
am5dm5t ,/rike out all aft] ! enact+    
clause & ins]t ! "p pr9t$ 9 italic      
,july #bc1 #bjad ,! ,committees on      
,sci5ce1 ,space1 & ,te*nology &         
,ov]sight & ,gov]nm5t ,re=m dis*>g$2    
committ$ to ! ,committee ( ! ,:ole ,h\se
 on ! ,/ate ( ! ,union & ord]$ to be    
pr9t$ ,= text ( introduc$ bill1 see copy

 ( bill z introduc$ on ,decemb] #aa1    
#bjac  ,a ,,bill  ,to am5d ! ,homel&    
,security ,act ( #bjjb to make c]ta9    
improvem5ts reg>d+ cyb]security &       
critical infra/ructure protection1 & =  
o!r purposes4  #a4 ,%ort title ,?is ,act
 may be cit$ z ! ,national ,cyb]security
 & ,critical ,infra/ructure ,protection 
,act ( #bjad4  #b4 ,table ( cont5ts ,!  
table ( cont5ts = ?is ,act is z foll[s3 
,sec4 #a4 ,%ort title4 ,sec4 #b4 ,table 
( cont5ts4 ,title ,i--,secur+ ! ,nation 
,aga9/ ,cyb] ,attack ,sec4 #aja4 ,homel&
 ,security ,act ( #bjjb def9itions4     
,sec4 #ajb4 ,enhancem5t ( cyb]security4 
,sec4 #ajc4 ,protection ( critical      
infra/ructure & in=mation %>+4 ,sec4    
#ajd4 ,national ,cyb]security &         
,communications ,integration ,c5t]4     
,sec4 #aje4 ,cyb] incid5t response &    
te*nical assi/ance4 ,sec4 #ajf4         
,/reaml9+ ( ,dep>tm5t cyb]security      
organization4 ,title                    
,,ii--,public-,private ,collaboration on
 ,cyb]security ,sec4 #bja4              

,public-private collaboration on        
cyb]security4 ,sec4 #bjb4 ,,safety ,act 
& qualify+ cyb] incid5ts4 ,sec4 #bjc4   
,prohibition on new regulatory au?ority4
 ,sec4 #bjd4 ,prohibition on additional 
au?orization ( appropriations4 ,sec4    
#bje4 ,prohibition on collection        
activities to track individuals'        
p]sonally id5tifiable in=mation4 ,sec4  
#bjf4 ,cyb]security s*ol>s4 ,sec4 #bjg4 
,national ,rese>* ,c\ncil /udy on !     
resili5ce & reliability ( ! ,nation's   
p[] grid4 ,title ,,iii--,homel&         
,security ,cyb]security ,work=ce ,sec4  
#cja4 ,homel& security cyb]security     
work=ce4 ,sec4 #cjb4 ,p]sonnel          
au?orities4  ,i ,secur+ ! ,nation ,aga9/
 ,cyb] ,attack  #aja4 ,homel& ,security 
,act ( #bjjb def9itions ,section #b ( ! 
,homel& ,security ,act ( #bjjb 7#f      
,u4,s4,c4 #aja7 is am5d$ by add+ at !   
end ! foll[+ new p>agraphs3  7#ai7 ,!   
t]m critical infra/ructure has ! mean+  
giv5 t t]m 9 section #ajaf7;e7 ( ! ,,usa
 ,patriot ,act 7#db ,u4,s4,c4           

#eaie;c7e774  7#bj7 ,! t]m critical     
infra/ructure own] means a p]son t owns 
critical infra/ructure4  7#ba7 ,! t]m   
critical infra/ructure op]ator means a  
critical infra/ructure own] or o!r p]son
 t manages1 runs1 or op]ates1 9 :ole or 
9 "p1 ! day-to-day op]ations ( critical 
infra/ructure4  7#bb7 ,! t]m cyb]       
incid5t means an incid5t1 or an attempt 
to cause an incid5t1 t1 if successful1  
w\ld--  7,a7 jeop>dize or imm95tly      
jeop>dize1 )\t lawful au?ority1 !       
security1 integrity1 confid5tiality1 or 
availability ( an in=mation sy/em or    
network ( in=mation sy/ems or any       
in=mation /or$ on1 process$ on1 or      
transit+ su* a sy/em or network2  7,b7  
con/itute a violation or imm95t ?reat ( 
violation ( law1 security policies1     
security proc$ures1 or acceptable use   
policies relat$ to su* a sy/em or       
network1 or an act ( t]rorism aga9/ su* 
a sy/em or network2 or  7,c7 result 9 ! 
d5ial ( access to or degradation1       
disruption1 or de/ruction ( su* a sy/em 

or network1 or ! defeat ( an op]ations  
control or te*nical control ess5tial to 
! security or op]ation ( su* a sy/em or 
network4  7#bc7 ,! t]m cyb]security     
mission means activities t encompass !  
full range ( ?reat r$uction1            
vuln]ability r$uction1 det]r5ce1 incid5t
 response1 resili5cy1 & recov]y         
activities to fo/] ! security & /ability
 ( cyb]space4  7#bd7 ,! t]m cyb]security
 purpose means ! purpose ( ensur+ !     
security1 integrity1 confid5tiality1 or 
availability (1 or safegu>d+1 an        
in=mation sy/em or network ( in=mation  
sy/ems1 includ+ protect+ su* a sy/em or 
network1 or data resid+ on su* a sy/em  
or network1 includ+ protection ( su* a  
sy/em or network1 f--  7,a7 a           
vuln]ability ( su* a sy/em or network2  
7,b7 a ?reat to ! security1 integrity1  
confid5tiality1 or availability ( su* a 
sy/em or network1 or any in=mation /or$ 
on1 process$ on1 or transit+ su* a sy/em
 or network2  7,c7 ef=ts to d5y access  
to or degrade1 disrupt1 or de/roy su* a 

sy/em or network2 or  7,d7 ef=ts to ga9 
unau?oriz$ access to su* a sy/em or     
network1 includ+ to ga9 su* unau?oriz$  
access = ! purpose ( exfiltrat+         
in=mation /or$ on1 process$ on1 or      
transit+ su* a sy/em or network4  7#be7 
,! t]m cyb] ?reat means any action t may
 result 9 unau?oriz$ access to1         
exfiltration (1 manipulation (1 h>m (1  
or impairm5t to ! security1 integrity1  
confid5tiality1 or availability ( an    
in=mation sy/em or network ( in=mation  
sy/ems1 or in=mation t is /or$ on1      
process$ by1 or transit+ su* a sy/em or 
network4  7#bf7 ,! t]m cyb] ?reat       
in=mation means in=mation directly      
p]ta9+ to--  7,a7 a vuln]ability ( an   
in=mation sy/em or network ( in=mation  
sy/ems ( a gov]nm5t or private entity2  
7,b7 a ?reat to ! security1 integrity1  
confid5tiality1 or availability ( su* a 
sy/em or network ( a gov]nm5t or private
 entity1 or any in=mation /or$ on1      
process$ on1 or transit+ su* a sy/em or 
network2  7,c7 ef=ts to d5y access to or

 degrade1 disrupt1 or de/roy su* a sy/em
 or network ( a gov]nm5t or private     
entity2  7,d7 ef=ts to ga9 unau?oriz$   
access to su* a sy/em or network1       
includ+ to ga9 su* unau?oriz$ access = !
 purpose ( exfiltrat+ in=mation /or$ on1
 process$ on1 or transit+ su* a sy/em or
 network2 or  7,e7 an act ( t]rorism    
aga9/ an in=mation sy/em or network (   
in=mation sy/ems4  7#bg7 ,! t]m ,f$]al  
civilian in=mation sy/ems--  7,a7 means 
in=mation1 in=mation sy/ems1 & networks 
( in=mation sy/ems t are own$1 op]at$1  
controll$1 or lic5s$ = use by1 or on    
behalf (1 any ,f$]al ag5cy1 includ+ su* 
sy/ems or networks us$ or op]at$ by     
ano!r entity on behalf ( a ,f$]al ag5cy2
 b  7,b7 does n include--  7i7 a        
national security sy/em2 or  7ii7       
in=mation1 in=mation sy/ems1 & networks 
( in=mation sy/ems t are own$1 op]at$1  
controll$1 or lic5s$ solely = use by1 or
 on behalf (1 ! ,dep>tm5t ( ,def5se1 a  
milit>y dep>tm5t1 or an elem5t ( !      
intellig5ce community4  7#bh7 ,! t]m    

in=mation security means ! protection ( 
in=mation1 in=mation sy/ems1 & networks 
( in=mation sy/ems f unau?oriz$ access1 
use1 disclosure1 disruption1            
modification1 or de/ruction 9 ord] to   
provide--  7,a7 integrity1 includ+ gu>d+
 aga9/ improp] in=mation modification or
 de/ruction1 includ+ ensur+             
nonrepudiation & au!nticity2  7,b7      
confid5tiality1 includ+ pres]v+ au?oriz$
 re/rictions on access & disclosure1    
includ+ means = protect+ p]sonal privacy
 & propriet>y in=mation2 &  7,c7        
availability1 includ+ ensur+ timely &   
reliable access to & use ( in=mation4   
7#bi7 ,! t]m in=mation sy/em means !    
und]ly+ framework & functions us$ to    
process1 transmit1 receive1 or /ore     
in=mation electronically1 includ+       
programmable electronic devices1        
communications networks1 & indu/rial or 
sup]visory control sy/ems & any         
associat$ h>dw>e1 s(tw>e1 or data4      
7#cj7 ,! t]m private entity means any   
individual or any private or            

publically-trad$ company1 public or     
private utility 7includ+ a utility t is 
a unit ( a ,/ate or local gov]nm5t1 or a
 political subdivision ( a ,/ate        
gov]nm5t71 organization1 or corporation1
 includ+ an (fic]1 employee1 or ag5t    
!re(4  7#ca7 ,! t]m %>$ situational     
aw>5ess means an environm5t 9 :i* cyb]  
?reat in=mation is %>$ 9 real "t betwe5 
all designat$ ,f$]al cyb] op]ations     
c5t]s to provide actionable in=mation   
ab\t all kn[n cyb] ?reats4  4  #ajb4    
,enhancem5t ( cyb]security  7a7 ,9 g5]al
 ,subtitle ,c ( title ,,ii ( ! ,homel&  
,security ,act ( #bjjb is am5d$ by add+ 
at ! end ! foll[+ new section3  #bbf4   
,enhancem5t ( cyb]security ,! ,secret>y1
 9 collaboration ) ! heads ( o!r        
appropriate ,f$]al ,gov]nm5t entities1  
%all conduct activities = cyb]security  
purposes1 includ+ ! provision ( %>$     
situational aw>5ess to ea* o!r to enable
 real-"t1 integrat$1 & op]ational       
actions to protect f1 prev5t1 mitigate1 
respond to1 & recov] f cyb] incid5ts4  4

  7b7 ,cl]ical am5dm5ts  7#a7 ,subtitle 
head+ ,! head+ = subtitle ,c ( title    
,,ii ( su* ,act is am5d$ to read z      
foll[s3  ,c ,cyb]security & ,in=mation  
,%>+  4  7#b7 ,table ( cont5ts ,! table 
( cont5ts 9 section #a7;b7 ( su* ,act is
 am5d$--  7,a7 by add+ aft] ! item      
relat+ to section #bbe ! foll[+ new     
item3  ,sec4 #bbf4 ,enhancem5t (        
cyb]security4  2  &  7,b7 by /rik+ !    
item relat+ to subtitle ,c ( title ,,ii 
& ins]t+ ! foll[+ new item3  ,subtitle  
,c--,cyb]security & ,in=mation ,%>+  4  
#ajc4 ,protection ( critical            
infra/ructure & in=mation %>+  7a7 ,9   
g5]al ,subtitle ,c ( title ,,ii ( !     
,homel& ,security ,act ( #bjjb1 z am5d$ 
by section #ajb1 is fur!r am5d$ by add+ 
at ! end ! foll[+ new section3  #bbg4   
,protection ( critical infra/ructure &  
in=mation %>+  7a7 ,protection (        
critical infra/ructure  7#a7 ,9 g5]al ,!
 ,secret>y %all coord9ate1 on an ongo+  
basis1 ) ,f$]al1 ,/ate1 & local         
gov]nm5ts1 national laboratories1       

critical infra/ructure own]s1 critical  
infra/ructure op]ators1 & o!r cross     
sector coord9at+ entities to--  7,a7    
facilitate a national ef=t to /r5g!n &  
ma9ta9 secure1 function+1 & resili5t    
critical infra/ructure f cyb] ?reats2   
7,b7 ensure t ,dep>tm5t policies &      
proc$ures enable critical infra/ructure 
own]s & critical infra/ructure op]ators 
to receive real-"t1 actionable1 &       
relevant cyb] ?reat in=mation2  7,c7    
seek indu/ry sector-specific exp]tise   
to--  7i7 assi/ 9 ! developm5t (        
volunt>y security & resili5cy /rategies2
 &  7ii7 ensure t ! allocation ( ,f$]al 
res\rces are co/ effective & r$uce any  
burd5 on critical infra/ructure own]s & 
critical infra/ructure op]ators2  7,d7  
^u reque/ ( entities1 facilitate & assi/
 risk managem5t ef=ts ( su* entities to 
r$uce vuln]abilities1 id5tify & disrupt 
?reats1 & m9imize consequ5ces to _!     
critical infra/ructure2  7,e7 ^u reque/ 
( critical infra/ructure own]s or       
critical infra/ructure op]ators1 provide

 education & assi/ance to su* own]s &   
op]ators on h[ !y may use protective    
measures & c\nt]measures to /r5g!n !    
security & resili5ce ( ! ,nation's      
critical infra/ructure2 &  7,f7         
coord9ate a rese>* & developm5t /rategy 
to facilitate & promote advancem5ts &   
innovation 9 cyb]security te*nologies to
 protect critical infra/ructure4  7#b7  
,additional responsibilities ,!         
,secret>y %all--  7,a7 manage ,f$]al    
ef=ts to secure1 protect1 & ensure !    
resili5cy ( ,f$]al civilian in=mation   
sy/ems us+ a risk-bas$ & p]=mance-bas$  
approa*1 &1 ^u reque/ ( critical        
infra/ructure own]s or critical         
infra/ructure op]ators1 support su*     
own]s' & op]ators' ef=ts to secure1     
protect1 & ensure ! resili5cy ( critical
 infra/ructure f cyb] ?reats2  7,b7     
direct an entity )9 ! ,dep>tm5t to s]ve 
z a ,f$]al civilian entity by & among   
,f$]al1 ,/ate1 & local gov]nm5ts1       
private entities1 & critical            
infra/ructure sectors to provide        

multi-directional %>+ ( real-"t1        
actionable1 & relevant cyb] ?reat       
in=mation2  7,c7 build ^u exi/+         
me*anisms to promote a national aw>5ess 
ef=t to educate ! g5]al public on !     
importance ( secur+ in=mation sy/ems2   
7,d7 ^u reque/ ( ,f$]al1 ,/ate1 & local 
gov]nm5t entities & private entities1   
facilitate exp$iti\s cyb] incid5t       
response & recov]y assi/ance1 & provide 
analysis & w>n+s relat$ to ?reats to &  
vuln]abilities ( critical in=mation     
sy/ems1 crisis & consequ5ce managem5t   
support1 & o!r remote or on-site        
te*nical assi/ance ) ! heads ( o!r      
appropriate ,f$]al ag5cies to ,f$]al1   
,/ate1 & local gov]nm5t entities &      
private entities = cyb] incid5ts affect+
 critical infra/ructure2  7,e7 engage ) 
int]national p>tn]s to /r5g!n ! security
 & resili5ce ( dome/ic critical         
infra/ructure & critical infra/ructure  
locat$ outside ( ! ,unit$ ,/ates ^u :i* 
! ,unit$ ,/ates dep5ds2 &  7,f7 conduct 
outrea* to educational in/itutions1     

includ+ hi/orically black colleges &    
univ]sities1 ,hispanic s]v+ in/itutions1
 ,native ,am]ican colleges1 &           
in/itutions s]v+ p]sons ) disabilities1 
to enc\rage su* in/itutions to promote  
cyb]security aw>5ess4  7#c7 ,rule (     
con/ruction ,no?+ 9 ?is section may be  
con/ru$ to require any private entity to
 reque/ assi/ance f ! ,secret>y1 or     
require any private entity reque/+ su*  
assi/ance to implem5t any measure or    
recomm5dation sugge/$ by ! ,secret>y4   
7b7 ,critical infra/ructure sectors ,!  
,secret>y1 9 collaboration ) ! heads (  
o!r appropriate ,f$]al ag5cies1 %all    
designate critical infra/ructure sectors
 7t may include subdivisions ( sectors  
)9 a sector z ! ,secret>y may det]m9e   
appropriate74 ,! critical infra/ructure 
sectors designat$ "u ?is subsection may 
include ! foll[+3  7#a7 ,*emical4  7#b7 
,comm]cial facilities4  7#c7            
,communications4  7#d7 ,critical        
manufactur+4  7#e7 ,dams4  7#f7 ,def5se 
,indu/rial ,base4  7#g7 ,em]g5cy        

s]vices4  7#h7 ,en]gy4  7#i7 ,f9ancial  
s]vices4  7#aj7 ,food & agriculture4    
7#aa7 ,gov]nm5t facilities4  7#ab7      
,heal?c>e & public heal?4  7#ac7        
,in=mation te*nology4  7#ad7 ,nucle>    
reactors1 mat]ials1 & wa/e4  7#ae7      
,transportation sy/ems4  7#af7 ,wat] &  
wa/ewat] sy/ems4  7#ag7 ,su* o!r sectors
 z ! ,secret>y det]m9es appropriate4    
7c7 ,sector specific ag5cies ,!         
,secret>y1 9 collaboration ) ! relevant 
critical infra/ructure sector & ! heads 
( o!r appropriate ,f$]al ag5cies1 %all  
recognize ! ,f$]al ag5cy designat$ z (  
,novemb] #a1 #bjac1 z ! ,sector         
,specific ,ag5cy = ea* critical         
infra/ructure sector designat$ "u       
subsection 7b74 ,if ! designat$ ,sector 
,specific ,ag5cy = a p>ticul> critical  
infra/ructure sector is ! ,dep>tm5t1 = !
 purposes ( ?is section1 ! ,secret>y    
%all c>ry out ?is section4 ,! ,secret>y1
 9 coord9ation ) ! heads ( ea* su*      
,sector ,specific ,ag5cy %all--  7#a7   
support ! security & resili5ce          

activities ( ! relevant critical        
infra/ructure sector 9 accordance ) ?is 
subtitle2 &  7#b7 provide in/itutional k
 & specializ$ exp]tise to ! relevant    
critical infra/ructure sector4  7d7     
,sector coord9at+ c\ncils  7#a7         
,recognition ,! ,secret>y1 9            
collaboration ) ea* critical            
infra/ructure sector & ! relevant       
,sector ,specific ,ag5cy1 %all recognize
 & p>tn] ) ! ,sector ,coord9at+ ,c\ncil 
= ea* critical infra/ructure sector     
designat$ "u subsection 7b7 to coord9ate
 ) ea* su* sector on security &         
resili5ce activities & em]g5cy response 
& recov]y ef=ts4  7#b7 ,memb]%ip  7,a7  
,9 g5]al ,! ,sector ,coord9at+ ,c\ncil =
 a critical infra/ructure sector        
designat$ "u subsection 7b7 %all--  7i7 
be compris$ exclusively ( relevant      
critical infra/ructure own]s1 critical  
infra/ructure op]ators1 private         
entities1 & repres5tative trade         
associations = ! sector2  7ii7 reflect !
 unique composition ( ea* sector2 &     

7iii7 include relevant small1 m$ium1 &  
l>ge critical infra/ructure own]s1      
critical infra/ructure op]ators1 private
 entities1 & repres5tative trade        
associations = ! sector4  7,b7          
,prohibition ,no gov]nm5t entity )      
regulat+ au?ority %all be a memb] ( !   
,sector ,coord9at+ ,c\ncil4  7,c7       
,limitation ,! ,secret>y %all h no role 
9 ! det]m9ation ( ! memb]%ip ( a ,sector
 ,coord9at+ ,c\ncil4  7#c7 ,roles &     
responsibilities ,! ,sector ,coord9at+  
,c\ncil = a critical infra/ructure      
sector %all--  7,a7 s]ve z a            
self-gov]n+1 self-organiz$ prim>y       
policy1 plann+1 & /rategic              
communications entity = coord9at+ ) !   
,dep>tm5t1 ! relevant ,sector-,specific 
,ag5cy designat$ "u subsection 7c71 & ! 
relevant ,in=mation ,%>+ & ,analysis    
,c5t]s "u subsection 7e7 on security &  
resili5ce activities & em]g5cy response 
& recov]y ef=ts2  7,b7 e/abli% gov]nance
 & op]at+ proc$ures1 & designate a      
*airp]son = ! sector to c>ry out !      

activities describ$ 9 ?is subsection2   
7,c7 coord9ate ) ! ,dep>tm5t1 ! relevant
 ,in=mation ,%>+ & ,analysis ,c5t]s "u  
subsection 7e71 & o!r ,sector ,coord9at+
 ,c\ncils to update1 ma9ta91 & ex]cise !
 ,national ,cyb]security ,incid5t       
,response ,plan 9 accordance ) section  
#bbi7;b72 &  7,d7 provide any           
recomm5dations to ! ,dep>tm5t on        
infra/ructure protection te*nology gaps 
to help in=m rese>* & developm5t ef=ts  
at ! ,dep>tm5t4  7e7 ,sector in=mation  
%>+ & analysis c5t]s  7#a7 ,recognition 
,! ,secret>y1 9 collaboration ) !       
relevant ,sector ,coord9at+ ,c\ncil & ! 
critical infra/ructure sector repres5t$ 
by su* ,c\ncil1 & 9 coord9ation ) !     
relevant ,sector ,specific ,ag5cy1 %all 
recognize at lea/ "o ,in=mation ,%>+ &  
,analysis ,c5t] = ea* critical          
infra/ructure sector designat$ "u       
subsection 7b7 = purposes ( p>agraph    
7#c74 ,no o!r ,in=mation ,%>+ &         
,analysis ,organizations1 includ+       
,in=mation ,%>+ & ,analysis ,c5t]s1 may 

be preclud$ f hav+ an in=mation %>+     
relation%ip )9 ! ,national ,cyb]security
 & ,communications ,integration ,c5t]   
e/abli%$ pursuant to section #bbh4 ,no?+
 9 ?is subsection or any o!r provision (
 ?is subtitle may be con/ru$ to limit1  
re/rict1 or condition any private entity
 or activity utiliz$ by1 among1 or      
betwe5 private entities4  7#b7 ,roles & 
responsibilities ,9 addition to su* o!r 
activities z may be au?oriz$ by law1 at 
lea/ "o ,in=mation ,%>+ & ,analysis     
,c5t] = a critical infra/ructure sector 
%all--  7,a7 s]ve z an in=mation %>+    
res\rce = su* sector & promote ongo+    
multi-directional %>+ ( real-"t1        
relevant1 & actionable cyb] ?reat       
in=mation & analysis by & among su*     
sector1 ! ,dep>tm5t1 ! relevant ,sector 
,specific ,ag5cy1 & o!r critical        
infra/ructure sector ,in=mation ,%>+ &  
,analysis ,c5t]s2  7,b7 e/abli%         
gov]nance & op]at+ proc$ures to c>ry out
 ! activities conduct$ "u ?is           
subsection2  7,c7 s]ve z an em]g5cy     

response & recov]y op]ations coord9ation
 po9t = su* sector1 & ^u reque/1        
facilitate cyb] incid5t response        
capabilities 9 coord9ation ) !          
,dep>tm5t1 ! relevant ,sector ,specific 
,ag5cy & ! relevant ,sector ,coord9at+  
,c\ncil2  7,d7 facilitate cross-sector  
coord9ation & %>+ ( cyb] ?reat in=mation
 to prev5t relat$ or consequ5tial       
impacts to o!r critical infra/ructure   
sectors2  7,e7 coord9ate ) ! ,dep>tm5t1 
! relevant ,sector ,coord9at+ ,c\ncil1 !
 relevant ,sector ,specific ,ag5cy1 &   
o!r critical infra/ructure sector       
,in=mation ,%>+ & ,analysis ,c5t]s on ! 
developm5t1 integration1 & implem5tation
 ( proc$ures to support te*nology       
neutral1 real-"t in=mation %>+          
capabilities & me*anisms )9 ! ,national 
,cyb]security & ,communications         
,integration ,c5t] e/abli%$ pursuant to 
section #bbh1 includ+--  7i7 !          
e/abli%m5t ( a me*anism to volunt>ily   
report id5tifi$ vuln]abilities &        
opportunities = improvem5t2  7ii7 !     

e/abli%m5t ( metrics to assess !        
effectiv5ess & timel9ess ( ! ,dep>tm5t's
 & ,in=mation ,%>+ & ,analysis ,c5t]s'  
in=mation %>+ capabilities2 &  7iii7 !  
e/abli%m5t ( a me*anism = anonym\s      
sugge/ions & comm5ts2  7,f7 implem5t an 
integration & analysis function to in=m 
sector plann+1 risk mitigation1 &       
op]ational activities reg>d+ !          
protection ( ea* critical infra/ructure 
sector f cyb] incid5ts2  7,g7 comb9e    
consequ5ce1 vuln]ability1 & ?reat       
in=mation to %>e actionable assessm5ts (
 critical infra/ructure sector risks f  
cyb] incid5ts2  7,h7 coord9ate ) !      
,dep>tm5t1 ! relevant ,sector ,specific 
,ag5cy1 & ! relevant ,sector ,coord9at+ 
,c\ncil to update1 ma9ta91 & ex]cise !  
,national ,cyb]security ,incid5t        
,response ,plan 9 accordance ) section  
#bbi7;b72 &  7,i7 safegu>d cyb] ?reat   
in=mation f unau?oriz$ disclosure4  7#c7
 ,fund+ ,( ! am\nts au?oriz$ to be      
appropriat$ = ea* ( fiscal ye>s #bjad1  
#bjae1 & #bjaf = ! ,cyb]security &      

,communications ,(fice ( ! ,dep>tm5t1 ! 
,secret>y is au?oriz$ to use n less ?an 
#be1jjj1jjj = any su* ye> = op]ations   
support at ! ,national ,cyb]security &  
,communications ,integration ,c5t]      
e/abli%$ "u section #bbh7;a7 ( all      
recogniz$ ,in=mation ,%>+ & ,analysis   
,c5t]s "u p>agraph 7#a7 ( ?is           
subsection4  7f7 ,cle>ances ,!          
,secret>y--  7#a7 %all exp$ite ! process
 ( security cle>ances "u ,executive     
,ord] #acedi or successor ord]s =       
appropriate repres5tatives ( ,sector    
,coord9at+ ,c\ncils & ! critical        
infra/ructure sector ,in=mation ,%>+ &  
,analysis ,c5t]s2 &  7#b7 may s exp$ite 
su* process+ to--  7,a7 appropriate     
p]sonnel ( critical infra/ructure own]s 
& critical infra/ructure op]ators2 &    
7,b7 any o!r p]son z det]m9$ by !       
,secret>y4  7g7 ,public-,private        
collaboration ,! ,secret>y1 9           
collaboration ) ! critical infra/ructure
 sectors designat$ "u subsection 7b71   
su* sectors' ,sector ,specific ,ag5cies 

recogniz$ "u subsection 7c71 & ! ,sector
 ,coord9at+ ,c\ncils recogniz$ "u       
subsection 7d71 %all--  7#a7 conduct an 
analysis & review ( ! exi/+             
public-private p>tn]%ip model & evaluate
 h[ ! model betwe5 ! ,dep>tm5t &        
critical infra/ructure own]s & critical 
infra/ructure op]ators c be improv$ to  
ensure ! ,dep>tm5t1 critical            
infra/ructure own]s1 & critical         
infra/ructure op]ators are equal p>tn]s 
& regul>ly collaborate on all programs &
 activities ( ! ,dep>tm5t to protect    
critical infra/ructure2  7#b7 develop & 
implem5t proc$ures to ensure cont9u\s1  
collaborative1 & effective int]actions  
betwe5 ! ,dep>tm5t1 critical            
infra/ructure own]s1 & critical         
infra/ructure op]ators2 &  7#c7 ensure  
critical infra/ructure sectors h a      
reasonable p]iod = review & comm5t ( all
 jo9tly produc$ mat]ials ) ! ,dep>tm5t4 
7h7 ,protection ( ,f$]al civilian       
in=mation sy/ems  7#a7 ,9 g5]al ,!      
,secret>y %all adm9i/] ! op]ational     

in=mation security activities &         
functions to protect & ensure !         
resili5cy ( all ,f$]al civilian         
in=mation sy/ems4  7#b7 ,roles &        
responsibilities ,! ,secret>y1 9        
coord9ation ) ! heads ( o!r ,f$]al      
civilian ag5cies1 %all--  7,a7 develop1 
issue1 & ov]see ! implem5tation &       
compliance ( all op]ational in=mation   
security policies & proc$ures to protect
 & ensure ! resili5cy ( ,f$]al civilian 
in=mation sy/ems2  7,b7 adm9i/] ,f$]al  
,gov]nm5t-wide ef=ts to develop &       
provide adequate1 risk-bas$1            
co/-effective1 & te*nology neutral      
in=mation security capabilities2  7,c7  
e/abli% & su/a9 cont9u\s diagno/ics     
sy/ems = ,f$]al civilian in=mation      
sy/ems to aggregate data & id5tify &    
prioritize ! mitigation ( cyb]          
vuln]abilities 9 su* sy/ems =           
cyb]security purposes2  7,d7 develop1   
acquire1 & op]ate an integrat$ &        
consolidat$ sy/em ( intrusion detection1
 analytics1 intrusion prev5tion1 & o!r  

in=mation %>+ & protective capabilities 
to def5d ,f$]al civilian in=mation      
sy/ems f cyb] ?reats2  7,e7 develop &   
conduct t>get$ risk assessm5ts &        
op]ational evaluations ( ,f$]al civilian
 in=mation sy/ems1 9 consultation )     
gov]nm5t & private entities t own &     
op]ate su* in=mation sy/ems1 includ+    
?reat1 vuln]ability1 & impact assessm5ts
 & p5etration te/+2  7,f7 develop &     
provide te*nical assi/ance & cyb]       
incid5t response capabilities to secure 
& ensure ! resili5ce ( ,f$]al civilian  
in=mation sy/ems2  7,g7 review annually 
! op]ational in=mation security         
activities & functions ( ea* ( ! ,f$]al 
civilian ag5cies2  7,h7 develop m9imum  
te*nology neutral op]ational requirem5ts
 = network & security op]ations c5t]s to
 facilitate ! protection ( all ,f$]al   
civilian in=mation sy/ems2  7,i7 develop
 report+ requirem5ts1 consi/5t )        
relevant law1 to ensure ! ,national     
,cyb]security & ,communications         
,integration ,c5t] e/abli%$ pursuant to 

section #bbh receives all actionable    
cyb] ?reat in=mation id5tifi$ on ,f$]al 
civilian in=mation sy/ems2  7,j7 develop
 te*nology neutral p]=mance requirem5ts 
& metrics = ! security ( ,f$]al civilian
 in=mation sy/ems2  7,k7 implem5t tra9+ 
requirem5ts t include indu/ry recogniz$ 
c]tifications to ensure t ,f$]al        
civilian ag5cies are able to fully &    
timely comply ) policies & proc$ures    
issu$ by ! ,secret>y "u ?is subsection2 
&  7,l7 develop tra9+ requirem5ts reg>d+
 privacy1 civil rights1 civil lib]ties1 
& in=mation ov]sight = in=mation        
security employees :o op]ate ,f$]al     
civilian in=mation sy/ems4  7#c7 ,use ( 
c]ta9 communications  7,a7 ,9 g5]al ,!  
,secret>y may ent] into contracts or o!r
 agreem5ts1 or o!rwise reque/ & obta91 9
 accordance ) applicable law1 !         
assi/ance ( private entities t provide  
electronic communication s]vices1 remote
 comput+ s]vices1 or cyb]security       
s]vices to acquire1 int]cept1 reta91    
use1 & disclose communications & o!r    

sy/em traffic1 deploy c\nt]measures1 or 
o!rwise op]ate protective capabilities 9
 accordance ) subp>agraphs 7,c71 7,d71  
7,e71 & 7,f7 ( p>agraph 7#b74 ,no cause 
( action %all exi/ aga9/ private        
entities = assi/ance provid$ to !       
,secret>y 9 accordance ) ?is subsection4
  7,b7 ,rule ( con/ruction ,no?+ 9      
subp>agraph 7,a7 may be con/ru$ to--    
7i7 require or compel any private entity
 to ent] 9 a contract or agreem5t       
describ$ 9 su* subp>agraph2 or  7ii7    
au?orize ! ,secret>y to take any action 
) respect to any communications or sy/em
 traffic transit+ or resid+ on any      
in=mation sy/em or network ( in=mation  
sy/ems o!r ?an a ,f$]al civilian        
in=mation sy/em4  7i7 ,recomm5dations   
reg>d+ new agreem5ts ,n lat] ?an #ahj   
days aft] ! date ( ! enactm5t ( ?is     
section1 ! ,secret>y %all submit to !   
appropriate congressional committees    
recomm5dations on h[ to exp$ite !       
implem5tation ( in=mation %>+ agreem5ts 
= cyb]security purposes betwe5 !        

,secret>y & critical in=mation own]s &  
critical infra/ructure op]ators & o!r   
private entities4 ,su* recomm5dations   
%all address ! developm5t & utilization 
( a scalable =m t reta9s all privacy &  
o!r protections 9 su* agreem5ts 9       
exi/5ce z ( su* date1 includ+           
,coop]ative & ,rese>* ,developm5t       
,agreem5ts4 ,su* recomm5dations %\ld    
also include any additional au?orities  
or res\rces t may be ne$$ to c>ry out ! 
implem5tation ( any su* new agreem5ts4  
7j7 ,rule ( con/ruction ,no provision ( 
?is title may be con/ru$ z modify+1     
limit+1 or o!rwise affect+ ! au?ority ( 
any o!r ,f$]al ag5cy "u any o!r         
provision ( law4  4  7b7 ,cl]ical       
am5dm5t ,! table ( cont5ts 9 section    
#a7;b7 ( su* ,act is am5d$ by add+ aft] 
! item relat+ to section #bbf 7z add$ by
 section #ajb7 ! foll[+ new item3  ,sec4
 #bbg4 ,protection ( critical           
infra/ructure & in=mation %>+4  4  #ajd4
 ,national ,cyb]security &              
,communications ,integration ,c5t]  7a7 

,9 g5]al ,subtitle ,c ( title ,,ii ( !  
,homel& ,security ,act ( #bjjb1 z am5d$ 
by sections #ajb & #ajc1 is fur!r am5d$ 
by add+ at ! end ! foll[+ new section3  
#bbh4 ,national ,cyb]security &         
,communications ,integration ,c5t]  7a7 
,e/abli%m5t ,!re is e/abli%$ 9 !        
,dep>tm5t ! ,national ,cyb]security &   
,communications ,integration ,c5t]      
7ref]r$ to 9 ?is section z ! ,c5t]71 :i*
 %all be a ,f$]al civilian in=mation %>+
 int]face t provides %>$ situational    
aw>5ess to enable real-"t1 integrat$1 & 
op]ational actions across ! ,f$]al      
,gov]nm5t1 & %>e cyb] ?reat in=mation by
 & among ,f$]al1 ,/ate1 & local gov]nm5t
 entities1 ,in=mation ,%>+ & ,analysis  
,c5t]s1 private entities1 & critical    
infra/ructure own]s & critical          
infra/ructure op]ators t h an in=mation 
%>+ relation%ip ) ! ,c5t]4  7b7         
,composition ,! ,c5t] %all include ea* (
 ! foll[+ entities3  7#a7 ,at lea/ "o   
,in=mation ,%>+ & ,analysis ,c5t]       
e/abli%$ "u section #bbg7;e7 = ea*      

critical infra/ructure sector4  7#b7 ,! 
,multi-,/ate ,in=mation ,%>+ & ,analysis
 ,c5t] to collaborate ) ,/ate & local   
gov]nm5ts4  7#c7 ,! ,unit$ ,/ates       
,comput] ,em]g5cy ,read9ess ,team to    
coord9ate cyb] ?reat in=mation %>+1     
proactively manage cyb] risks to !      
,unit$ ,/ates1 collaboratively respond  
to cyb] incid5ts1 provide te*nical      
assi/ance to in=mation sy/em own]s &    
op]ators1 & dissem9ate timely           
notifications reg>d+ curr5t & pot5tial  
cyb] ?reats & vuln]abilities4  7#d7 ,!  
,indu/rial ,control ,sy/em ,cyb]        
,em]g5cy ,response ,team to coord9ate ) 
indu/rial control sy/ems own]s &        
op]ators & %>e indu/rial control        
sy/ems-relat$ security incid5ts &       
mitigation measures4  7#e7 ,! ,national 
,coord9at+ ,c5t] = ,telecommunications  
to coord9ate ! protection1 response1 &  
recov]y ( national security em]g5cy     
communications4  7#f7 ,su* o!r ,f$]al1  
,/ate1 & local gov]nm5t entities1       
private entities1 organizations1 or     

individuals z ! ,secret>y may consid]   
appropriate t agree to be includ$4  7c7 
,cyb] incid5t ,9 ! ev5t ( a cyb]        
incid5t1 ! ,secret>y may grant !        
entities ref]r$ to 9 subsection 7a7     
imm$iate tempor>y access to ! ,c5t] z a 
situation may w>rant4  7d7 ,roles &     
responsibilities ,! ,c5t] %all--  7#a7  
promote ongo+ multi-directional %>+ by &
 among ! entities ref]r$ to 9 subsection
 7a7 ( timely & actionable cyb] ?reat   
in=mation & analysis on a real-"t basis 
t includes em]g+ tr5ds1 evolv+ ?reats1  
incid5t reports1 intellig5ce in=mation1 
risk assessm5ts1 & be/ practices2  7#b7 
coord9ate ) o!r ,f$]al ag5cies to       
/reaml9e & r$uce r$undant report+ ( cyb]
 ?reat in=mation2  7#c7 provide1 ^u     
reque/1 timely te*nical assi/ance &     
crisis managem5t support to ,f$]al1     
,/ate1 & local gov]nm5t entities &      
private entities t own or op]ate        
in=mation sy/ems or networks ( in=mation
 sy/ems to protect f1 prev5t1 mitigate1 
respond to1 & recov] f cyb] incid5ts2   

7#d7 facilitate cross-sector coord9ation
 & %>+ ( cyb] ?reat in=mation to prev5t 
relat$ or consequ5tial impacts to o!r   
critical infra/ructure sectors2  7#e7   
collaborate & facilitate discussions )  
,sector ,coord9at+ ,c\ncils1 ,in=mation 
,%>+ & ,analysis ,c5t]s1 ,sector        
,specific ,ag5cies1 & relevant critical 
infra/ructure sectors on ! developm5t ( 
prioritiz$ ,f$]al response ef=ts1 if    
necess>y1 to support ! def5se & recov]y 
( critical infra/ructure f cyb]         
incid5ts2  7#f7 collaborate ) ! ,sector 
,coord9at+ ,c\ncils1 ,in=mation ,%>+ &  
,analysis ,c5t]s1 ,sector ,specific     
,ag5cies1 & ! relevant critical         
infra/ructure sectors on ! developm5t & 
implem5tation ( proc$ures to support    
te*nology neutral real-"t in=mation %>+ 
capabilities & me*anisms2  7#g7         
collaborate ) ! ,sector ,coord9at+      
,c\ncils1 ,in=mation ,%>+ & ,analysis   
,c5t]s1 ,sector ,specific ,ag5cies1 & ! 
relevant critical infra/ructure sectors 
to id5tify requirem5ts = data &         

in=mation =mats & accessibility1 sy/em  
int]op]ability1 & r$undant sy/ems &     
alt]native capabilities 9 ! ev5t ( a    
disruption 9 ! prim>y in=mation %>+     
capabilities & me*anisms at ! ,c5t]2    
7#h7 )9 ! scope ( relevant treaties1    
coop]ate ) int]national p>tn]s to %>e   
in=mation & respond to cyb] incid5ts2   
7#i7 safegu>d s5sitive cyb] ?reat       
in=mation f unau?oriz$ disclosure2      
7#aj7 require o!r ,f$]al civilian       
ag5cies to--  7,a7 s5d reports &        
in=mation to ! ,c5t] ab\t cyb] incid5ts1
 ?reats1 & vuln]abilities affect+ ,f$]al
 civilian in=mation sy/ems & critical   
infra/ructure sy/ems &1 9 ! ev5t a      
private v5dor product or s]vice ( su* an
 ag5cy is s implicat$1 ! ,c5t] %all fir/
 notify su* private v5dor ( !           
vuln]ability be=e fur!r disclos+ su*    
in=mation2  7,b7 provide to ! ,c5t] cyb]
 incid5t detection1 analysis1           
mitigation1 & response in=mation2 &     
7,c7 imm$iately s5d & disclose to !     
,c5t] cyb] ?reat in=mation receiv$ by   

su* ag5cies2  7#aa7 p]=m su* o!r duties 
z ! ,secret>y may require to facilitate 
a national ef=t to /r5g!n & ma9ta9      
secure1 function+1 & resili5t critical  
infra/ructure f cyb] ?reats2  7#ab7     
implem5t policies & proc$ures to--  7,a7
 provide te*nical assi/ance to ,f$]al   
civilian ag5cies to prev5t & respond to 
data brea*es involv+ unau?oriz$         
acquisition or access ( p]sonally       
id5tifiable in=mation t occur on ,f$]al 
civilian in=mation sy/ems2  7,b7 require
 ,f$]al civilian ag5cies to notify !    
,c5t] ab\t data brea*es involv+         
unau?oriz$ acquisition or access (      
p]sonally id5tifiable in=mation t occur 
on ,f$]al civilian in=mation sy/ems n   
lat] ?an two bus9ess days aft] !        
discov]y ( su* a brea*2 &  7,c7 require 
,f$]al civilian ag5cies to notify all   
pot5tial victims ( a data brea* involv+ 
unau?oriz$ acquisition or access (      
p]sonally id5tifiable in=mation t occur 
on ,f$]al civilian in=mation sy/ems )\t 
unreasonable delay consi/5t ) ! ne$s (  

law en=cem5t2 &  7#ac7 p>ticipate 9     
ex]cises run by ! ,dep>tm5t's ,national 
,ex]cise ,program1 :]e appropriate4  7e7
 ,integration & analysis ,! ,c5t]1 9    
coord9ation ) ! ,(fice ( ,intellig5ce & 
,analysis ( ! ,dep>tm5t1 %all ma9ta9 an 
integration & analysis function1 :i*    
%all --  7#a7 integrate & analyze all   
cyb] ?reat in=mation receiv$ f o!r      
,f$]al ag5cies1 ,/ate & local gov]nm5ts1
 ,in=mation ,%>+ & ,analysis ,c5t]s1    
private entities1 critical infra/ructure
 own]s1 & critical infra/ructure        
op]ators1 & %>e relevant in=mation 9 ne>
 real-"t2  7#b7 on an ongo+ basis1      
assess & evaluate consequ5ce1           
vuln]ability1 & ?reat in=mation to %>e )
 ! entities ref]r$ to 9 subsection 7a7  
actionable assessm5ts ( critical        
infra/ructure sector risks f cyb]       
incid5ts & to assi/ critical            
infra/ructure own]s & critical          
infra/ructure op]ators by mak+          
recomm5dations to facilitate cont9u\s   
improvem5ts to ! security & resili5cy ( 

! critical infra/ructure ( ! ,unit$     
,/ates2  7#c7 facilitate cross-sector   
integration1 id5tification1 & analysis (
 key int]dep5d5cies to prev5t relat$ or 
consequ5tial impacts to o!r critical    
infra/ructure sectors2  7#d7 collaborate
 ) ! ,in=mation ,%>+ & ,analysis ,c5t]s 
to tailor ! analysis ( in=mation to !   
specific *>act]i/ics & risk to a        
relevant critical infra/ructure sector2 
&  7#e7 assess & evaluate consequ5ce1   
vuln]ability1 & ?reat in=mation reg>d+  
cyb] incid5ts 9 coord9ation ) ! ,(fice (
 ,em]g5cy ,communications ( ! ,dep>tm5t 
to help facilitate cont9u\s improvem5ts 
to ! security & resili5cy ( public      
safety communications networks4  7f7    
,report ( cyb] attacks aga9/ ,f$]al     
,gov]nm5t networks ,! ,secret>y %all    
submit to ! ,committee on ,homel&       
,security ( ! ,h\se ( ,repres5tatives1 !
 ,committee on ,homel& ,security &      
,gov]nm5tal ,affairs ( ! ,s5ate1 & !    
,comptroll] ,g5]al ( ! ,unit$ ,/ates an 
annual report t summ>izes major cyb]    

incid5ts involv+ ,f$]al civilian ag5cy  
in=mation sy/ems & provides aggregate   
/ati/ics on ! numb] ( brea*es1 ! ext5t (
 any p]sonally id5tifiable in=mation t 0
 involv$1 ! volume ( data exfiltrat$1 ! 
consequ5tial impact1 & ! e/imat$ co/ (  
rem$y+ su* brea*es4  7g7 ,report on !   
op]ations ( ! ,c5t] ,! ,secret>y1 9     
consultation ) ! ,sector ,coord9at+     
,c\ncils & appropriate ,f$]al ,gov]nm5t 
entities1 %all submit to ! ,committee on
 ,homel& ,security ( ! ,h\se (          
,repres5tatives1 ! ,committee on ,homel&
 ,security & ,gov]nm5tal ,affairs ( !   
,s5ate1 & ! ,comptroll] ,g5]al ( !      
,unit$ ,/ates an annual report on--     
7#a7 ! capability & capacity ( ! ,c5t]  
to c>ry out its cyb]security mission 9  
accordance ) ?is section1 & sections    
#bbf1 #bbg1 #bbi1 #bcj1 #bcj;,a1 &      
#bcj;,b2  7#b7 ! ext5t to :i* !         
,dep>tm5t is engag$ 9 in=mation %>+ )   
ea* critical infra/ructure sector       
designat$ "u section #bbg7;b71 includ+--
  7,a7 ! ext5t to :i* ea* su* sector has

 repres5tatives at ! ,c5t]2 &  7,b7 !   
ext5t to :i* critical infra/ructure     
own]s & critical infra/ructure op]ators 
( ea* critical infra/ructure sector     
p>ticipate 9 in=mation %>+ at ! ,c5t]2  
7#c7 ! volume & range ( activities )    
respect to :i* ! ,secret>y collaborat$ )
 ! ,sector ,coord9at+ ,c\ncils & !      
,sector-,specific ,ag5cies to promote   
great] engagem5t ) ! ,c5t]2 &  7#d7 !   
volume & range ( volunt>y te*nical      
assi/ance s\ght & provid$ by ! ,dep>tm5t
 to ea* critical infra/ructure own] &   
critical infra/ructure op]ator4  4  7b7 
,cl]ical am5dm5t ,! table ( cont5ts 9   
section #a7;b7 ( su* ,act is am5d$ by   
add+ aft] ! item relat+ to section #bbg 
7z add$ by section #ajc7 ! foll[+ new   
item3  ,sec4 #bbh4 ,national            
,cyb]security & ,communications         
,integration ,c5t]4  4  7c7 ,,gao report
 ,n lat] ?an "o ye> aft] ! date ( !     
enactm5t ( ?is ,act1 ! ,comptroll]      
,g5]al ( ! ,unit$ ,/ates %all submit to 
! ,committee on ,homel& ,security ( !   

,h\se ( ,repres5tatives & ! ,committee  
on ,homel& ,security & ,gov]nm5tal      
,affairs ( ! ,s5ate a report on !       
effectiv5ess ( ! ,national ,cyb]security
 & ,communications ,integration ,c5t]   
e/abli%$ "u section #bbh ( ! ,homel&    
,security ,act ( #bjjb1 z add$ by       
subsection 7a7 ( ?is section1 9 c>ry+   
out its cyb]security mission 7z su* t]m 
is def9$ 9 section #b ( ! ,homel&       
,security ,act ( #bjjb1 z am5d$ by      
section #aja7 9 accordance ) ?is ,act & 
su* section #bbh & sections #bbf1 #bbg1 
#bbi1 #bcj1 #bcj;,a1 & #bcj;,b ( !      
,homel& ,security ,act ( #bjjb1 z add$  
by ?is ,act4  #aje4 ,cyb] incid5t       
response & te*nical assi/ance  7a7 ,9   
g5]al ,subtitle ,c ( title ,,ii ( !     
,homel& ,security ,act ( #bjjb1 z am5d$ 
by sections #ajb1 #ajc1 & #ajd1 is fur!r
 am5d$ by add+ at ! end ! foll[+ new    
section3  #bbi4 ,cyb] incid5t response &
 te*nical assi/ance  7a7 ,9 g5]al ,!    
,secret>y %all e/abli% ,cyb] ,incid5t   
,response ,teams to--  7#a7 ^u reque/1  

provide timely te*nical assi/ance &     
crisis managem5t support to ,f$]al1     
,/ate1 & local gov]nm5t entities1       
private entities1 & critical            
infra/ructure own]s & critical          
infra/ructure op]ators involv+ cyb]     
incid5ts affect+ critical infra/ructure2
 &  7#b7 ^u reque/1 provide actionable  
recomm5dations on security & resili5ce  
measures & c\nt]measures to ,f$]al1     
,/ate1 & local gov]nm5t entities1       
private entities1 & critical            
infra/ructure own]s & critical          
infra/ructure op]ators prior to1 dur+1 &
 aft] cyb] incid5ts4  7b7 ,coord9ation  
,9 c>ry+ out subsection 7a71 ! ,secret>y
 %all coord9ate ) ! relevant ,sector    
,specific ,ag5cies1 if applicable4  7c7 
,cyb] incid5t response plan ,!          
,secret>y1 9 coord9ation ) ! ,sector    
,coord9at+ ,c\ncils1 ,in=mation ,%>+ &  
,analysis ,c5t]s1 & ,f$]al1 ,/ate1 &    
local gov]nm5ts1 %all develop1 regul>ly 
update1 ma9ta91 & ex]cise a ,national   
,cyb]security ,incid5t ,response ,plan  

:i* %all--  7#a7 include effective      
em]g5cy response plans associat$ ) cyb] 
?reats to critical infra/ructure1       
in=mation sy/ems1 or networks (         
in=mation sy/ems2  7#b7 ensure t su*    
,national ,cyb]security ,incid5t        
,response ,plan c adapt to & reflect a  
*ang+ cyb] ?reat environm5t1 &          
incorporate be/ practices & lessons     
le>n$ f regul> ex]cises1 tra9+1 &       
aft]-action reports2 &  7#c7 facilitate 
discussions on ! be/ me?ods = develop+  
innovative & useful cyb]security        
ex]cises = coord9at+ betwe5 ! ,dep>tm5t 
& ea* ( ! critical infra/ructure sectors
 designat$ "u section #bbg7;b74  7d7    
,update to ,cyb] ,incid5t ,annex to !   
,national ,response ,framework ,!       
,secret>y1 9 coord9ation ) ! heads ( o!r
 ,f$]al ag5cies & 9 accordance ) !      
,national ,cyb]security ,incid5t        
,response ,plan "u subsection 7c71 %all 
regul>ly update1 ma9ta91 & ex]cise !    
,cyb] ,incid5t ,annex to ! ,national    
,response ,framework ( ! ,dep>tm5t4  4  

7b7 ,cl]ical am5dm5t ,! table ( cont5ts 
9 section #a7;b7 ( su* ,act is am5d$ by 
add+ aft] ! item relat+ to section #bbh 
7z add$ by section #ajd7 ! foll[+ new   
item3  ,sec4 #bbi4 ,cyb] incid5t        
response & te*nical assi/ance4  4  #ajf4
 ,/reaml9+ ( ,dep>tm5t cyb]security     
organization  7a7 ,cyb]security &       
infra/ructure protection directorate ,! 
,national ,protection & ,programs       
,directorate ( ! ,dep>tm5t ( ,homel&    
,security %all1 aft] ! date ( ! enactm5t
 ( ?is ,act1 be kn[n & designat$ z !    
,cyb]security & ,infra/ructure          
,protection ,directorate4 ,any ref]5ce  
to ! ,national ,protection & ,programs  
,directorate ( ! ,dep>tm5t 9 any law1   
regulation1 map1 docum5t1 record1 or o!r
 pap] ( ! ,unit$ ,/ates %all be deem$ to
 be a ref]5ce to ! ,cyb]security &      
,infra/ructure ,protection ,directorate 
( ! ,dep>tm5t4  7b7 ,s5ior lead]%ip ( ! 
,cyb]security & ,infra/ructure          
,protection ,directorate  7#a7 ,9 g5]al 
,p>agraph 7#a7 ( section #ajc7;a7 ( !   

,homel& ,security ,act ( #bjjb 7#f      
,u4,s4,c4 #aac7;a77 is am5d$ by add+ at 
! end ! foll[+ new subp>agraphs3  7,k7  
,"u ,secret>y = ,cyb]security &         
,infra/ructure ,protection4  7,l7       
,deputy ,"u ,secret>y = ,cyb]security4  
7,m7 ,deputy ,"u ,secret>y =            
,infra/ructure ,protection4  4  7#b7    
,cont9uation 9 (fice ,! individuals :o  
hold ! positions ref]r$ to 9            
subp>agraphs 7,k71 7,l71 & 7,m7 (       
subsection 7a7 ( section #ajc ( !       
,homel& ,security ,act ( #bjjb 7z add$  
by p>agraph 7#a7 ( ?is subsection7 z ( !
 date ( ! enactm5t ( ?is ,act may       
cont9ue to hold su* positions4  7c7     
,report on improv+ ! capability &       
effectiv5ess ( ! ,cyb]security &        
,communications ,(fice ,to improve !    
op]ational capability & effectiv5ess 9  
c>ry+ out ! cyb]security mission 7z su* 
t]m is def9$ 9 section #b ( ! ,homel&   
,security ,act ( #bjjb1 z am5d$ by      
section #aja7 ( ! ,dep>tm5t ( ,homel&   
,security1 ! ,secret>y ( ,homel&        

,security %all submit to ! ,committee on
 ,homel& ,security ( ! ,h\se (          
,repres5tatives & ! ,committee on       
,homel& ,security & ,gov]nm5tal ,affairs
 ( ! ,s5ate a report on--  7#a7 !       
feasibility ( mak+ ! ,cyb]security &    
,communications ,(fice ( ! ,dep>tm5t an 
op]ational compon5t ( ! ,dep>tm5t2  7#b7
 recomm5dations = re/ructur+ ! ,,safety 
,act ,(fice )9 ! ,dep>tm5t to protect & 
ma9ta9 op]ations 9 accordance ) !       
,(fice's mission to provide inc5tives = 
! developm5t & deploym5t ( anti-t]rorism
 te*nologies :ile elevat+ ! pr(ile &    
mission ( ! ,(fice1 includ+ !           
feasibility ( utiliz+ ?ird-p>ty regi/r>s
 = improv+ ! ?r\ghput & effectiv5ess ( !
 c]tification process4  7d7 ,report on  
cyb]security acquisition capabilities ,!
 ,secret>y ( ,homel& ,security %all     
assess ! effectiv5ess ( ! ,dep>tm5t (   
,homel& ,security's acquisition         
processes & ! use ( exi/+ au?orities =  
acquir+ cyb]security te*nologies to     
ensure t su* processes & au?orities are 

capable ( meet+ ! ne$s & dem&s ( !      
,dep>tm5t's cyb]security mission 7z su* 
t]m is def9$ 9 section #b ( ! ,homel&   
,security ,act ( #bjjb1 z am5d$ by      
section #aja74 ,n lat] ?an #ahj days    
aft] ! date ( ! enactm5t ( ?is ,act1 !  
,secret>y %all submit to ! ,committee on
 ,homel& ,security ( ! ,h\se (          
,repres5tatives & ! ,committee on       
,homel& ,security & ,gov]nm5tal ,affairs
 ( ! ,s5ate a report on ! effectiv5ess (
 ! ,dep>tm5t's acquisition processes =  
cyb]security te*nologies4  7e7 ,res\rce 
in=mation ,! ,secret>y ( ,homel&        
,security %all make available ,dep>tm5t 
( ,homel& ,security contact in=mation to
 s]ve z a res\rce = ,sector ,coord9at+  
,c\ncils & critical infra/ructure own]s 
& critical infra/ructure op]ators to    
bett] coord9ate cyb]security ef=ts ) !  
,dep>tm5t relat+ to em]g5cy response &  
recov]y ef=ts = cyb] incid5ts4  ,,ii    
,public-,private ,collaboration on      
,cyb]security  #bja4 ,public-private    
collaboration on cyb]security  7a7      

,national ,in/itute ( ,/&>ds &          
,te*nology  7#a7 ,9 g5]al ,! ,director (
 ! ,national ,in/itute ( ,/&>ds &       
,te*nology1 9 coord9ation ) ! ,secret>y 
( ,homel& ,security1 %all1 on an ongo+  
basis1 facilitate & support ! developm5t
 ( a volunt>y1 indu/ry-l$ set ( /&>ds1  
guidel9es1 be/ practices1 me?odologies1 
proc$ures1 & processes to r$uce cyb]    
risks to critical infra/ructure4 ,!     
,director1 9 coord9ation ) ! ,secret>y--
  7,a7 %all--  7i7 coord9ate closely &  
cont9u\sly ) relevant private entities1 
critical infra/ructure own]s & critical 
infra/ructure op]ators1 ,sector         
,coord9at+ ,c\ncils1 ,in=mation ,%>+ &  
,analysis ,c5t]s1 & o!r relevant indu/ry
 organizations1 & incorporate indu/ry   
exp]tise to ! fulle/ ext5t possible2    
7ii7 consult ) ! ,sector ,specific      
,ag5cies1 ,f$]al1 ,/ate & local         
gov]nm5ts1 ! gov]nm5ts ( o!r c\ntries1 &
 int]national organizations2  7iii7     
utilize a prioritiz$1 flexible1         
repeatable1 p]=mance-bas$1 &            

co/-effective approa*1 includ+ in=mation
 security measures & controls1 t may be 
volunt>ily adopt$ by critical           
infra/ructure own]s & critical          
infra/ructure op]ators to help !m       
id5tify1 assess1 & manage cyb] risks2   
7iv7 include me?odologies to--  7,i7    
id5tify & mitigate impacts ( !          
cyb]security measures or controls on    
bus9ess confid5tiality2 &  7,,ii7       
protect individual privacy & civil      
lib]ties2  7v7 incorporate volunt>y     
cons5sus /&>ds & indu/ry be/ practices1 
& align ) volunt>y int]national /&>ds to
 ! fulle/ ext5t possible2  7vi7 prev5t  
duplication ( exi/+ regulatory processes
 & prev5t conflict ) or sup]s$+ ( exi/+ 
regulatory requirem5ts & processes2 &   
7vii7 include su* o!r simil> & consi/5t 
elem5ts z det]m9$ necess>y2 &  7,b7 %all
 n prescribe or o!rwise require--  7i7 !
 use ( specific solutions2  7ii7 ! use (
 specific in=mation te*nology products  
or s]vices2 or  7iii7 t in=mation       
te*nology products or s]vices be        

design$1 develop$1 or manufactur$ 9 a   
p>ticul> mann]4  7#b7 ,limitation       
,in=mation %>$ ) or provid$ to !        
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology or ! ,secret>y (    
,homel& ,security = ! purpose ( !       
activities "u p>agraph 7#a7 may n be us$
 by any ,f$]al1 ,/ate1 or local gov]nm5t
 dep>tm5t or ag5cy to regulate !        
activity ( any private entity4  7b7     
,am5dm5t  7#a7 ,9 g5]al ,subtitle ,c (  
title ,,ii ( ! ,homel& ,security ,act ( 
#bjjb1 z am5d$ by sections #ajb1 #ajc1  
#ajd1 & #aje1 is fur!r am5d$ by add+ at 
! end ! foll[+ new section3  #bcj4      
,public-private collaboration on        
cyb]security  7a7 ,meet+s ,! ,secret>y  
%all meet ) ! ,sector ,coord9at+ ,c\ncil
 = ea* critical infra/ructure sector    
designat$ "u section #bbg7;b7 on a      
biannual basis to discuss ! cyb]security
 ?reat to critical infra/ructure1       
volunt>y activities to address          
cyb]security1 & ideas to improve !      
public-private p>tn]%ip to enhance      

cyb]security1 9 :i* ! ,secret>y %all--  
7#a7 provide ea* ,sector ,coord9at+     
,c\ncil an assessm5t ( ! cyb]security   
?reat to ea* critical infra/ructure     
sector designat$ "u section #bbg7;b71   
includ+ in=mation relat+ to--  7,a7 any 
actual or assess$ cyb] ?reat1 includ+ a 
consid]ation ( adv]s>y capability &     
int5t1 prep>$ness1 t>get attractiv5ess1 
& det]r5ce capabilities2  7,b7 ! ext5t &
 likelihood ( dea?1 injury1 or s]i\s    
adv]se effects to human heal? & safety  
caus$ by an act ( t]rorism or o!r       
disruption1 de/ruction1 or unau?oriz$   
use ( critical infra/ructure2  7,c7 !   
?reat to national security caus$ by an  
act ( t]rorism or o!r disruption1       
de/ruction1 or unau?oriz$ use ( critical
 infra/ructure2 &  7,d7 ! h>m to !      
economy t w\ld result f an act (        
t]rorism or o!r disruption1 de/ruction1 
or unau?oriz$ use ( critical            
infra/ructure2 &  7#b7 provide          
recomm5dations1 :i* may be volunt>ily   
adopt$1 on ways to improve cyb]security 

( critical infra/ructure4  7b7 ,report  
7#a7 ,9 g5]al ,/>t+ #cj days aft] ! end 
( ! fiscal ye> 9 :i* ! ,national        
,cyb]security & ,critical ,infra/ructure
 ,protection ,act ( #bjac is enact$ &   
annually !reaft]1 ! ,secret>y %all      
submit to ! appropriate congressional   
committees a report on ! /ate (         
cyb]security = ea* critical             
infra/ructure sector designat$ "u       
section #bbg7;b7 bas$ on discussions    
betwe5 ! ,dep>tm5t & ! ,sector          
,coord9at+ ,c\ncil 9 accordance )       
subsection 7a7 ( ?is section4 ,!        
,secret>y %all ma9ta9 a public copy (   
ea* report1 & ea* report may include a  
non-public annex = propriet>y1          
bus9ess-s5sitive in=mation1 or o!r      
s5sitive in=mation4 ,ea* report %all    
include1 at a m9imum in=mation relat+   
to--  7,a7 ! risk to ea* critical       
infra/ructure sector1 includ+ kn[n cyb] 
?reats1 vuln]abilities1 & pot5tial      
consequ5ces2  7,b7 ! ext5t & nature (   
any cyb]security incid5ts dur+ ! previ\s

 ye>1 includ+ ! ext5t to :i* cyb]       
incid5ts jeop>diz$ or imm95tly jeop>diz$
 in=mation sy/ems2  7,c7 ! curr5t /atus 
( ! volunt>y1 indu/ry-l$ set ( /&>ds1   
guidel9es1 be/ practices1 me?odologies1 
proc$ures1 & processes to r$uce cyb]    
risks )9 ea* critical infra/ructure     
sector2 &  7,d7 ! volume & range (      
volunt>y te*nical assi/ance s\ght &     
provid$ by ! ,dep>tm5t to ea* critical  
infra/ructure sector4  7#b7 ,sector     
,coord9at+ ,c\ncil response ,be=e mak+  
public & submitt+ ea* report requir$ "u 
p>agraph 7#a71 ! ,secret>y %all provide 
a draft ( ea* report to ! ,sector       
,coord9at+ ,c\ncil = ! critical         
infra/ructure sector cov]$ by ea* su*   
report4 ,! ,sector ,coord9at+ ,c\ncil at
 issue may provide to ! ,secret>y a     
writt5 response to su* report )9 #de    
days ( receiv+ ! draft4 ,if su* ,sector 
,coord9at+ ,c\ncil provides a writt5    
response1 ! ,secret>y %all include su*  
writt5 response 9 ! f9al v]sion ( ea*   
report requir$ "u p>agraph 7#a74  7c7   

,limitation ,in=mation %>$ ) or provid$ 
to a ,sector ,coord9at+ ,c\ncil1 a      
critical infra/ructure sector1 or !     
,secret>y = ! purpose ( ! activities "u 
subsections 7a7 & 7b7 may n be us$ by   
any ,f$]al1 ,/ate1 or local gov]nm5t    
dep>tm5t or ag5cy to regulate ! activity
 ( any private entity4  4  7#b7 ,cl]ical
 am5dm5t ,! table ( cont5ts 9 section   
#a7;b7 ( su* ,act is am5d$ by add+ aft] 
! item relat+ to section #bbi 7z add$ by
 section #aje7 ! foll[+ new item3  ,sec4
 #bcj4 ,public-private collaboration on 
cyb]security4  4  #bjb4 ,,safety ,act & 
qualify+ cyb] incid5ts  7a7 ,9 g5]al ,! 
,support ,anti-,t]rorism ,by ,fo/]+     
,effective ,te*nologies ,act ( #bjjb 7#f
 ,u4,s4,c4 #dda et seq47 is am5d$--     
7#a7 9 section #hfb7;b7 7#f ,u4,s4,c4   
#dda7;b77--  7,a7 9 ! head+1 by /rik+   
,designation ( ,qualifi$ ,anti-,t]rorism
 ,te*nologies & ins]t+ ,designation (   
,anti-,t]rorism & ,cyb]security         
,te*nologies2  7,b7 9 ! matt] prec$+    
p>agraph 7#a71 by ins]t+ & cyb]security 

aft] anti-t]rorism2  7,c7 9 p>agraphs   
7#c71 7#d71 & 7#e71 by ins]t+ or        
cyb]security aft] anti-t]rorism ea*     
place x appe>s2 &  7,d7 9 p>agraph      
7#g7--  7i7 by ins]t+ or cyb]security   
te*nology aft] ,anti-t]rorism te*nology2
 &  7ii7 by ins]t+ or qualify+ cyb]     
incid5ts aft] acts ( t]rorism2  7#b7 9  
section #hfc 7#f ,u4,s4,c4 #ddb7--  7,a7
 by ins]t+ or cyb]security aft]         
anti-t]rorism ea* place x appe>s2  7,b7 
by ins]t+ or qualify+ cyb] incid5t aft] 
act ( t]rorism ea* place x appe>s2 &    
7,c7 by ins]t+ or qualify+ cyb] incid5ts
 aft] acts ( t]rorism ea* place x       
appe>s2  7#c7 9 section #hfd 7#f        
,u4,s4,c4 #ddc7--  7,a7 by ins]t+ or    
cyb]security aft] anti-t]rorism ea*     
place x appe>s2 &  7,b7 by ins]t+ or    
qualify+ cyb] incid5t aft] act (        
t]rorism ea* place x appe>s2 &  7#d7 9  
section #hfe 7#f ,u4,s4,c4 #ddd7--  7,a7
 9 p>agraph 7#a7--  7i7 9 ! head+1 by   
ins]t+ or cyb]security aft]             
anti-t]rorism2  7ii7 by ins]t+ or       

cyb]security aft] anti-t]rorism2  7iii7 
by ins]t+ or qualify+ cyb] incid5ts aft]
 acts ( t]rorism2 &  7iv7 by ins]t+ or  
incid5ts aft] su* acts2 &  7,b7 by add+ 
at ! end ! foll[+ new p>agraph3  7#g7   
,qualify+ cyb] incid5t  7,a7 ,9 g5]al ,!
 t]m qualify+ cyb] incid5t means any act
 t ! ,secret>y det]m9es meets !         
requirem5ts "u subp>agraph 7,b71 z su*  
requirem5ts are fur!r def9$ & specifi$  
by ! ,secret>y4  7,b7 ,requirem5ts ,a   
qualify+ cyb] incid5t meets !           
requirem5ts ( ?is subp>agraph if--  7i7 
! incid5t is unlawful or o!rwise exce$s 
au?oriz$ access au?ority2  7ii7 !       
incid5t disrupts or imm95tly jeop>dizes 
! integrity1 op]ation1 confid5tiality1  
or availability ( programmable          
electronic devices1 communication       
networks1 includ+ h>dw>e1 s(tw>e & data 
t are ess5tial to _! reliable op]ation1 
electronic /orage devices1 or any o!r   
in=mation sy/em1 or ! in=mation t sy/em 
controls1 processes1 /ores1 or          
transmits2  7iii7 ! p]petrator ( !      

incid5t ga9s access to an in=mation     
sy/em or a network ( in=mation sy/ems   
result+ 9--  7,i7 misappropriation or   
!ft ( data1 assets1 in=mation1 or       
intellectual prop]ty2  7,,ii7 corruption
 ( data1 assets1 in=mation1 or          
intellectual prop]ty2  7,,iii7          
op]ational disruption2 or  7,,iv7 an    
adv]se effect on su* sy/em or network1  
or ! data1 assets1 in=mation1 or        
intellectual prop]ty conta9$ !re92 &    
7iv7 ! incid5t causes h>m inside or     
outside ! ,unit$ ,/ates t results 9     
mat]ial levels ( damage1 disruption1 or 
casualties sev]ely affect+ ! ,unit$     
,/ates population1 infra/ructure1       
economy1 or national morale1 or ,f$]al1 
,/ate1 local1 or tribal gov]nm5t        
functions4  7,c7 ,rule ( con/ruction ,= 
purposes ( clause 7iv7 ( subp>agraph    
7,b71 ! t]m sev]ely includes any        
qualify+ cyb] incid5t1 :e!r at a local1 
regional1 /ate1 national1 int]national1 
or tribal level1 t affects--  7i7 !     
,unit$ ,/ates population1 infra/ructure1

 economy1 or national morale1 or  7ii7  
,f$]al1 ,/ate1 local1 or tribal gov]nm5t
 functions4  4  7b7 ,fund+ ,( ! am\nts  
au?oriz$ to be appropriat$ = ea* (      
fiscal ye>s #bjad1 #bjae1 & #bjaf = !   
,dep>tm5t ( ,homel& ,security1 !        
,secret>y ( ,homel& ,security is        
au?oriz$ to use n less ?an #bj1jjj1jjj =
 any su* ye> = ! ,dep>tm5t's ,,safety   
,act ,(fice4  #bjc4 ,prohibition on new 
regulatory au?ority ,?is ,act & !       
am5dm5ts made by ?is ,act 7except t ?is 
section %all n apply 9 ! case ( section 
#bjb ( ?is ,act & ! am5dm5ts made by su*
 section #bjb7 d n--  7#a7 create or    
au?orize ! issuance ( any new           
regulations or additional ,f$]al        
,gov]nm5t regulatory au?ority2 or  7#b7 
p]mit regulatory actions t w\ld         
duplicate1 conflict )1 or sup]c$e exi/+ 
regulatory requirem5ts1 m&atory /&>ds1  
or relat$ processes4  #bjd4 ,prohibition
 on additional au?orization (           
appropriations ,no additional funds are 
au?oriz$ to be appropriat$ to c>ry out  

?is ,act & ! am5dm5ts made by ?is ,act4 
,?is ,act & su* am5dm5ts %all be c>ri$  
out us+ am\nts o!rwise available = su*  
purposes4  #bje4 ,prohibition on        
collection activities to track          
individuals' p]sonally id5tifiable      
in=mation ,no?+ 9 ?is ,act %all p]mit ! 
,dep>tm5t ( ,homel& ,security to engage 
9 ! monitor+1 surveillance1             
exfiltration1 or o!r collection         
activities = ! purpose ( track+ an      
individual's p]sonally id5tifiable      
in=mation4  #bjf4 ,cyb]security s*ol>s  
,! ,secret>y ( ,homel& ,security %all   
det]m9e ! feasibility & pot5tial b5efit 
( develop+ a visit+ security rese>*]s   
program f academia1 includ+ cyb]security
 s*ol>s at ! ,dep>tm5t ( ,homel&        
,security's ,c5t]s ( ,excell5ce1 z      
designat$ by ! ,secret>y1 to enhance k )
 respect to ! unique *all5ges ( address+
 cyb] ?reats to critical infra/ructure4 
,eligible c&idates %all possess necess>y
 security cle>ances & h a hi/ory ( work+
 ) ,f$]al ag5cies 9 matt]s ( national or

 dome/ic security4  #bjg4 ,national     
,rese>* ,c\ncil /udy on ! resili5ce &   
reliability ( ! ,nation's p[] grid  7a7 
,indep5d5t /udy ,n lat] ?an #fj days    
aft] ! date ( ! enactm5t ( ?is ,act1 !  
,secret>y ( ,homel& ,security1 9        
coord9ation ) ! heads ( o!r dep>tm5ts & 
ag5cies1 z necess>y1 %all ent] into an  
agreem5t ) ! ,national ,rese>* ,c\ncil  
to conduct rese>* ( ! future resili5ce &
 reliability ( ! ,nation's electric p[] 
transmission & di/ribution sy/em4 ,!    
rese>* "u ?is subsection %all be kn[n z 
! ,sav+ ,m ,am]ican ,res\rces ,today    
,/udy or ! ,,sm>t ,/udy4 ,9 conduct+ su*
 rese>*1 ! ,national ,rese>* ,c\ncil    
%all--  7#a7 rese>* ! options = improv+ 
! ,nation's ability to exp& & /r5g!n !  
capabilities ( ! ,nation's p[] grid1    
includ+ e/imation ( ! co/1 "t scale =   
implem5tation1 & id5tification ( ! scale
 & scope ( any pot5tial significant     
heal? & environm5tal impacts2  7#b7     
consid] ! =ces affect+ ! grid1 includ+  
te*nical1 economic1 regulatory1         

environm5tal1 & geopolitical factors1 & 
h[ su* =ces are likely to affect--  7,a7
 ! effici5cy1 control1 reliability &    
robu/ness ( op]ation2  7,b7 ! ability ( 
! grid to recov] f disruptions1 includ+ 
natural disa/]s & t]rori/ attacks2  7,c7
 ! ability ( ! grid to incorporate      
great] reliance on di/ribut$ &          
int]mitt5t p[] g5]ation & electricity   
/orage2  7,d7 ! ability ( ! grid to     
adapt to *ang+ patt]ns ( dem& =         
electricity2 &  7,e7 ! economic &       
regulatory factors affect+ ! evolution (
 ! grid2  7#c7 review ,f$]al1 ,/ate1    
indu/ry1 & academic rese>* & developm5t 
programs & id5tify te*nological options 
t c\ld improve ! future grid2  7#d7     
review ! implications ( increas$        
reliance on digital in=mation & control 
( ! p[] grid = improv+ reliability1     
resili5ce1 & conge/ion & = pot5tially   
increas+ vuln]ability to cyb] attack2   
7#e7 review regulatory1 indu/ry1 &      
in/itutional factors & programs affect+ 
! future ( ! grid2  7#f7 rese>* ! co/s &

 b5efits1 z well z ! /r5g?s &           
weaknesses1 ( ! options id5tifi$ "u     
p>agraph 7#a7 to address ! em]g+ =ces   
describ$ 9 p>agraph 7#b7 t are %ap+ !   
grid2  7#g7 id5tify ! b>ri]s to realiz+ 
! options id5tifi$ & sugge/ /rategies = 
ov]com+ ^? b>ri]s includ+ sugge/$       
actions1 priorities1 inc5tives1 &       
possible legislative & executive        
actions2 &  7#h7 rese>* ! ability ( !   
grid to integrate exi/+ & future        
infra/ructure1 includ+ utilities1       
telecommunications l9es1 highways1 & o!r
 critical infra/ructure4  7b7           
,coop]ation & access to in=mation &     
p]sonnel ,! ,secret>y %all ensure t !   
,national ,rese>* ,c\ncil receives full 
& timely coop]ation1 includ+ full access
 to in=mation & p]sonnel1 f ! ,dep>tm5t 
( ,homel& ,security1 ! ,dep>tm5t (      
,en]gy1 includ+ ! managem5t & op]at+    
compon5ts ( ! ,dep>tm5ts1 & o!r ,f$]al  
dep>tm5ts & ag5cies1 z necess>y1 = !    
purposes ( conduct+ ! /udy describ$ 9   
subsection 7a74  7c7 ,report  7#a7 ,9   

g5]al ,n lat] ?an #ah mon?s f ! date on 
:i* ! ,secret>y ent]s into ! agreem5t ) 
! ,national ,rese>* ,c\ncil describ$ 9  
subsection 7a71 ! ,national ,rese>*     
,c\ncil %all submit to ! ,secret>y & !  
,committee on ,homel& ,security ( !     
,h\se ( ,repres5tatives & ! ,committee  
on ,homel& ,security & ,gov]nm5tal      
,affairs ( ! ,s5ate a report conta9+ !  
f9d+s ( ! rese>* requir$ by t           
subsection4  7#b7 ,=m ( report ,! report
 "u p>agraph 7#a7 %all be submitt$ 9    
unclassifi$ =m1 b may include a         
classifi$ annex4  7d7 ,fund+ ,( ! am\nts
 au?oriz$ to be appropriat$ = #bjad = ! 
,dep>tm5t ( ,homel& ,security1 !        
,secret>y ( ,homel& ,security is        
au?oriz$ to obligate & exp5d n m ?an    
#b1jjj1jjj = ! ,national ,rese>* ,c\ncil
 report4  ,,iii ,homel& ,security       
,cyb]security ,work=ce  #cja4 ,homel&   
security cyb]security work=ce  7a7 ,9   
g5]al ,subtitle ,c ( title ,,ii ( !     
,homel& ,security ,act ( #bjjb1 z am5d$ 
by sections #aja1 #ajb1 #ajc1 #ajd1     

#aje1 & #bja1 is fur!r am5d$ by add+ at 
! end ! foll[+ new section3  #bcj;,a4   
,cyb]security occupation categories1    
work=ce assessm5t1 & /rategy  7a7 ,%ort 
title ,?is section may be cit$ z !      
,homel& ,security ,cyb]security         
,boots-on-!-,gr\nd ,act4  7b7           
,cyb]security occupation categories     
7#a7 ,9 g5]al ,n lat] ?an #ij days aft] 
! date ( ! enactm5t ( ?is section1 !    
,secret>y %all develop & issue          
compreh5sive occupation categories =    
individuals p]=m+ activities 9 fur!rance
 ( ! cyb]security mission ( ! ,dep>tm5t4
  7#b7 ,applicability ,! ,secret>y %all 
ensure t ! compreh5sive occupation      
categories issu$ "u p>agraph 7#a7 are   
us$ ?r\gh\t ! ,dep>tm5t & are made      
available to o!r ,f$]al ag5cies4  7c7   
,cyb]security work=ce assessm5t  7#a7 ,9
 g5]al ,n lat] ?an #ahj days aft] ! date
 ( ! enactm5t ( ?is section & annually  
!reaft]1 ! ,secret>y %all assess !      
read9ess & capacity ( ! work=ce ( !     
,dep>tm5t to meet its cyb]security      

mission4  7#b7 ,cont5ts ,! assessm5t    
requir$ "u p>agraph 7#a7 %all1 at a     
m9imum1 include ! foll[+3  7,a7         
,in=mation :]e cyb]security positions   
are locat$ )9 ! ,dep>tm5t1 specifi$ 9   
accordance ) ! cyb]security occupation  
categories issu$ "u subsection 7b74     
7,b7 ,in=mation on :i* cyb]security     
positions are--  7i7 p]=m$ by--  7,i7   
p]man5t full "t dep>tm5tal employees1   
toge!r ) demographic in=mation ab\t su* 
employees' race1 e?nicity1 g5d]1        
disability /atus1 & vet]ans /atus2      
7,,ii7 individuals employ$ by indep5d5t 
contractors2 &  7,,iii7 individuals     
employ$ by o!r ,f$]al ag5cies1 includ+ !
 ,national ,security ,ag5cy2 &  7ii7    
vacant4  7,c7 ,! numb] ( individuals    
hir$ by ! ,dep>tm5t pursuant to !       
au?ority grant$ to ! ,secret>y 9 #bjji  
to p]mit ! ,secret>y to fill #a1jjj     
cyb]security positions across !         
,dep>tm5t ov] a ?ree ye> p]iod1 &       
in=mation on :at *all5ges1 if any1 7    
enc\nt]$ ) respect to ! implem5tation ( 

su* au?ority4  7,d7 ,in=mation on       
vacancies )9 ! ,dep>tm5t's cyb]security 
sup]visory work=ce1 f fir/ l9e          
sup]visory positions ?r\gh s5ior        
dep>tm5tal cyb]security positions4  7,e7
 ,in=mation on ! p]c5tage ( individuals 
)9 ea* cyb]security occupation category 
:o receiv$ ess5tial tra9+ to p]=m _!    
jobs1 & 9 cases 9 :i* su* tra9+ is n    
receiv$1 in=mation on :at *all5ges1 if  
any1 7 enc\nt]$ ) respect to ! provision
 ( su* tra9+4  7,f7 ,in=mation on       
recruit+ co/s incurr$ ) respect to ef=ts
 to fill cyb]security positions across !
 ,dep>tm5t 9 a mann] t all[s = track+ ( 
ov]all recruit+ & id5tify+ areas = bett]
 coord9ation & lev]ag+ ( res\rces )9 !  
,dep>tm5t4  7d7 ,work=ce /rategy  7#a7  
,9 g5]al ,n lat] ?an #ahj days aft] !   
date ( ! enactm5t ( ?is section1 !      
,secret>y %all develop1 ma9ta91 &1 z    
necess>y1 update1 a compreh5sive work=ce
 /rategy t enhances ! read9ess1         
capacity1 tra9+1 recruitm5t1 & ret5tion 
( ! cyb]security work=ce ( ! ,dep>tm5t4 

7#b7 ,cont5ts ,! compreh5sive work=ce   
/rategy develop$ "u p>agraph 7#a7 %all  
include--  7,a7 a multiphas$ recruitm5t 
plan1 includ+ relat+ to exp]i5c$        
pr(essionals1 memb]s ( disadvantag$ or  
und]s]v$ communities1 ! unemploy$1 &    
vet]ans2  7,b7 a #e-ye> implem5tation   
plan2  7,c7 a #aj-ye> projection ( !    
,dep>tm5t's cyb]security work=ce ne$s2 &
  7,d7 ob/acles imp$+ ! hir+ &          
developm5t ( a cyb]security work=ce at !
 ,dep>tm5t4  7e7 ,in=mation security    
tra9+ ,n lat] ?an #bgj days aft] ! date 
( ! enactm5t ( ?is section1 ! ,secret>y 
%all e/abli% & ma9ta9 a process to v]ify
 on an ongo+ basis t individuals employ$
 by indep5d5t contractors :o s]ve 9     
cyb]security positions at ! ,dep>tm5t   
receive initial & recurr5t in=mation    
security tra9+ compris$ ( g5]al security
 aw>5ess tra9+ necess>y to p]=m _! job  
functions1 & role-bas$ security tra9+ t 
is comm5surate ) assign$                
responsibilities4 ,! ,secret>y %all     
ma9ta9 docum5tation to ensure t tra9+   

provid$ to an individual "u ?is         
subsection meets or exce$s requirem5ts =
 su* individual's job function4  7f7    
,updates ,! ,secret>y %all submit to !  
appropriate congressional committees    
annual updates reg>d+ ! cyb]security    
work=ce assessm5t requir$ "u subsection 
7c71 in=mation on ! progress ( c>ry+ out
 ! compreh5sive work=ce /rategy develop$
 "u subsection 7d71 & in=mation on !    
/atus ( ! implem5tation ( ! in=mation   
security tra9+ requir$ "u subsection    
7e74  7g7 ,,gao /udy ,! ,secret>y %all  
provide ! ,comptroll] ,g5]al ( ! ,unit$ 
,/ates ) in=mation on ! cyb]security    
work=ce assessm5t requir$ "u subsection 
7c7 & progress on c>ry+ out !           
compreh5sive work=ce /rategy develop$ "u
 subsection 7d74 ,! ,comptroll] ,g5]al  
%all submit to ! ,secret>y & !          
appropriate congressional committees a  
/udy on su* assessm5t & /rategy4  7h7   
,cyb]security ,fell[%ip ,program ,n lat]
 ?an #abj days aft] ! date ( ! enactm5t 
( ?is section1 ! ,secret>y %all submit  

to ! appropriate congressional          
committees a report on ! feasibility (  
e/abli%+ a ,cyb]security ,fell[%ip      
,program to (f] a tuition paym5t plan = 
und]graduate & doctoral c&idates :o     
agree to "w = ! ,dep>tm5t = an agre$-^u 
p]iod ( "t4  4  7b7 ,cl]ical am5dm5t ,! 
table ( cont5ts 9 section #a7;b7 ( su*  
,act is am5d$ by add+ aft] ! item relat+
 to section #bcj 7z add$ by section     
#bja7 ! foll[+ new item3  ,sec4 #bcj;,a4
 ,cyb]security occupation categories1   
work=ce assessm5t1 & /rategy4  4  #cjb4 
,p]sonnel au?orities  7a7 ,9 g5]al      
,subtitle ,c ( title ,,ii ( ! ,homel&   
,security ,act ( #bjjb1 z am5d$ by      
sections #aja1 #ajb1 #ajc1 #ajd1 #aje1  
#ajf1 #bja1 & #cja is fur!r am5d$ by    
add+ at ! end ! foll[+ new section3     
#bcj;,b4 ,p]sonnel au?orities  7a7 ,9   
g5]al  7#a7 ,p]sonnel au?orities ,!     
,secret>y may ex]cise ) respect to      
qualifi$ employees ( ! ,dep>tm5t ! same 
au?ority t ! ,secret>y ( ,def5se has )  
respect to civilian intellig5ce p]sonnel

 & ! s*ol>%ip program "u sections #afja1
 #afjb1 #afjc1 & #bbjj;a ( title #aj1   
,unit$ ,/ates ,code1 to e/abli% z       
positions 9 ! except$ s]vice1 appo9t    
individuals to su* positions1 fix pay1 &
 pay a ret5tion bonus to any employee   
appo9t$ "u ?is section if ! ,secret>y   
det]m9es t su* is ne$$ to reta9 ess5tial
 p]sonnel4 ,be=e ann\nc+ ! paym5t ( a   
bonus "u ?is p>agraph1 ! ,secret>y %all 
submit to ! ,committee on ,homel&       
,security ( ! ,h\se ( ,repres5tatives & 
! ,committee on ,homel& ,security &     
,gov]nm5tal ,affairs ( ! ,s5ate a writt5
 explanation ( su* det]m9ation4 ,su*    
au?ority %all be ex]cis$--  7,a7 to !   
same ext5t & subject to ! same          
conditions & limitations t ! ,secret>y (
 ,def5se may ex]cise su* au?ority )     
respect to civilian intellig5ce p]sonnel
 ( ! ,dep>tm5t ( ,def5se2 &  7,b7 9 a   
mann] consi/5t ) ! m]it sy/em pr9ciples 
set =? 9 section #bcja ( title #e1      
,unit$ ,/ates ,code4  7#b7 ,civil s]vice
 protections ,sections #abba & #bcjb1 & 

*apt] #ge ( title #e1 ,unit$ ,/ates     
,code1 %all apply to ! positions        
e/abli%$ pursuant to ! au?orities       
provid$ "u p>agraph 7#a74  7#c7 ,plan = 
execution ( au?orities ,n lat] ?an #abj 
days aft] ! date ( ! enactm5t ( ?is     
section1 ! ,secret>y %all submit to !   
,committee on ,homel& ,security ( !     
,h\se ( ,repres5tatives & ! ,committee  
on ,homel& ,security & ,gov]nm5tal      
,affairs ( ! ,s5ate a report t conta9s a
 plan = ! use ( ! au?orities provid$ "u 
?is subsection4  7b7 ,annual report ,n  
lat] ?an "o ye> aft] ! date ( ! enactm5t
 ( ?is section & annually !reaft] = f\r 
ye>s1 ! ,secret>y %all submit to !      
,committee on ,homel& ,security ( !     
,h\se ( ,repres5tatives & ! ,committee  
on ,homel& ,security & ,gov]nm5tal      
,affairs ( ! ,s5ate a detail$ report    
7includ+ appropriate metrics on actions 
occurr+ dur+ ! report+ p]iod7 t         
discusses ! processes us$ by ! ,secret>y
 9 implem5t+ ?is section & accept+      
applications1 assess+ c&idates1 ensur+  

adh]5ce to vet]ans' pref]5ce1 & select+ 
applicants = vacancies to be fill$ by a 
qualifi$ employee4  7c7 ,def9ition (    
qualifi$ employee ,9 ?is section1 ! t]m 
qualifi$ employee means an employee :o  
p]=ms functions relat+ to ! security (  
,f$]al civilian in=mation sy/ems1       
critical infra/ructure in=mation sy/ems1
 or networks ( ei!r ( su* sy/ems4  4    
7b7 ,cl]ical am5dm5t ,! table ( cont5ts 
9 section #a7;b7 ( su* ,act is am5d$ by 
add+ aft] ! item relat+ to section      
#bcj;,a 7z add$ by section #cja7 !      
foll[+ new item3  ,sec4 #bcj;,b4        
,p]sonnel au?orities4  4  ,july #bc1    
#bjad ,report$ f ! ,committee on ,homel&
 ,security ) an am5dm5t ,july #bc1 #bjad
 ,! ,committees on ,sci5ce1 ,space1 &   
,te*nology & ,ov]sight & ,gov]nm5t ,re=m
 dis*>g$2 committ$ to ! ,committee ( !  
,:ole ,h\se on ! ,/ate ( ! ,union &     
ord]$ to be pr9t$