,,ii #aac? ,,congress #a/ ,session ,s4 #afch ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,octob] #ca1 #bjac,mr4 ,:iteh\se 7= himself1 ,mr4 ,blunt1 ,mr4 ,graham1 & ,mr4 ,blum5?al7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ,a ,,bill ,to promote public aw>5ess ( cyb]security4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,cyb]security ,public ,aw>5ess ,act ( #bjac4 #b4 ,f9d+s 7a7 ,congress f9ds ! foll[+3 7#a7 ,in=mation te*nology is c5tral to ! effectiv5ess1 effici5cy1 & reliability ( indu/rial & comm]cial s]vices1 ,arm$ ,=ces & national security sy/ems1 & ! critical infra/ructure ( ! ,unit$ ,/ates4 7#b7 ,cyb] crim9als1 t]rori/s1 & ag5ts ( =eign p[]s h tak5 advantage ( ! connectivity ( ! ,unit$ ,/ates to inflict sub/antial damage to ! economic & national security int]e/s ( ! ,nation4 7#c7 ,! cyb] ?reat is sophi/icat$1 rel5tless1 & massive1 expos+ consum]s 9 ! ,unit$ ,/ates to ! risk ( sub/antial h>m4 7#d7 ,bus9esses 9 ! ,unit$ ,/ates are be>+ sub/antial losses z a result ( crim9al cyb] attacks1 depriv+ bus9esses ( h>d-e>n$ pr(its t c\ld be re9ve/$ 9 fur!r job-produc+ innovation4 7#e7 ,hack]s cont9u\sly probe ! networks ( ,f$]al & ,/ate ag5cies1 ! ,arm$ ,=ces1 & ! comm]cial indu/rial base ( ! ,arm$ ,=ces1 & already h caus$ sub/antial damage & compromis$ s5sitive & classifi$ in=mation4 7#f7 ,sev]e cyb] ?reats w cont9ue1 & w likely gr[1 z ! economy ( ! ,unit$ ,/ates gr[s m connect$1 crim9als become increas+ly sophi/icat$ 9 ef=ts to /eal f consum]s1 indu/ries1 & bus9esses 9 ! ,unit$ ,/ates1 & t]rori/s & =eign nations cont9ue to use cyb]space z a means ( attack aga9/ ! national & economic security ( ! ,unit$ ,/ates4 7#g7 ,public aw>5ess ( cyb] ?reats is ess5tial to cyb]security4 ,only a well-in=m$ public & ,congress c make ! decisions necess>y to protect consum]s1 indu/ries1 & ! national & economic security ( ! ,unit$ ,/ates4 7#h7 ,z ( #bjac1 ! level ( public aw>5ess ( cyb] ?reats is unacceptably l[4 ,only a t9y portion ( relevant cyb]security in=mation is releas$ to ! public4 ,in=mation ab\t attacks on ,f$]al ,gov]nm5t sy/ems is usually classifi$4 ,in=mation ab\t attacks on private sy/ems is ord9>ily kept confid5tial4 ,suffici5t me*anisms d n exi/ to provide mean+ful ?reat reports to ! public 9 unclassifi$ & anonymiz$ =m4 #c4 ,cyb] incid5ts aga9/ gov]nm5t networks 7a7 ,dep>tm5t ( ,homel& ,security ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 & annually !reaft]1 ! ,secret>y ( ,homel& ,security %all submit to ,congress a report t-- 7#a7 summ>izes major cyb] incid5ts involv+ networks ( executive ag5cies 7z def9$ 9 section #aje ( title #e1 ,unit$ ,/ates ,code71 except = ! ,dep>tm5t ( ,def5se2 7#b7 provides aggregate /ati/ics on ! numb] ( brea*es ( networks ( executive ag5cies1 ! volume ( data exfiltrat$1 & ! e/imat$ co/ ( rem$y+ ! brea*es2 & 7#c7 discusses ! risk ( cyb] sabotage4 7b7 ,dep>tm5t ( ,def5se ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 & annually !reaft]1 ! ,secret>y ( ,def5se %all submit to ,congress a report t-- 7#a7 summ>izes major cyb] incid5ts aga9/ networks ( ! ,dep>tm5t ( ,def5se & ! milit>y dep>tm5ts2 7#b7 provides aggregate /ati/ics on ! numb] ( brea*es aga9/ networks ( ! ,dep>tm5t ( ,def5se & ! milit>y dep>tm5ts1 ! volume ( data exfiltrat$1 & ! e/imat$ co/ ( rem$y+ ! brea*es2 & 7#c7 discusses ! risk ( cyb] sabotage4 7c7 ,=m ( reports ,ea* report submitt$ "u ?is section %all be 9 unclassifi$ =m1 b may include a classifi$ annex z necess>y to protect s\rces1 me?ods1 & national security4 #d4 ,prosecution = cyb]crime 7a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 ! ,attorney ,g5]al & ! ,director ( ! ,f$]al ,bureau ( ,inve/igation %all submit to ,congress reports-- 7#a7 describ+ inve/igations & prosecutions by ! ,dep>tm5t ( ,ju/ice relat+ to cyb] intrusions1 comput] or network compromise1 or o!r =ms ( illegal hack+ ! prec$+ ye>1 includ+-- 7,a7 ! numb] ( inve/igations initiat$ relat+ to su* crimes2 7,b7 ! numb] ( arre/s relat+ to su* crimes2 7,c7 ! numb] & description ( in/ances 9 :i* inve/igations or prosecutions relat+ to su* crimes h be5 delay$ or prev5t$ because ( an inability to extradite a crim9al def5dant 9 a timely mann]2 & 7,d7 ! numb] ( prosecutions = su* crimes1 includ+-- 7i7 ! numb] ( def5dants prosecut$2 7ii7 :e!r ! prosecutions result$ 9 a conviction2 7iii7 ! s5t5ce impos$ & ! /atutory maximum = ea* su* crime = :i* a def5dant 0 convict$2 & 7iv7 ! av]age s5t5ce impos$ = a conviction ( su* crimes2 7#b7 id5tify+ ! numb] ( employees1 f9ancial res\rces1 & o!r res\rces 7su* z te*nology & tra9+7 devot$ to ! en=cem5t1 inve/igation1 & prosecution ( cyb] intrusions1 comput] or network compromis$1 or o!r =ms ( illegal hack+1 includ+ ! numb] ( inve/igators1 prosecutors1 & =5sic speciali/s d$icat$ to inve/igat+ & prosecut+ cyb] intrusions1 comput] or network compromise1 or o!r =ms ( illegal hack+2 & 7#c7 discuss+ any imp$im5ts "u ! laws ( ! ,unit$ ,/ates or int]national law to prosecutions = cyb] intrusions1 comput] or network compromise1 or o!r =ms ( illegal hack+4 7b7 ,updates ,! ,attorney ,g5]al & ! ,director ( ! ,f$]al ,bureau ( ,inve/igation %all annually submit to ,congress reports updat+ ! reports submitt$ "u section 7a7 at ! same "t ! ,attorney ,g5]al & ,director submit annual reports "u section #djd ( ! ,prioritiz+ ,res\rces & ,organization = ,intellectual ,prop]ty ,act ( #bjjh 7#db ,u4,s4,c4 #cgac;d74 #e4 ,response to reque/s = assi/ance 9 private sector cyb] incid5ts 7a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 & annually !reaft]1 ! ,secret>y ( ,homel& ,security %all submit to ,congress a report t describes policies & proc$ures ?r\gh :i* ,f$]al ag5cies1 ^u reque/ f a private sector entity1 assi/ 9 ! def5se ( ! in=mation networks ( ! reque/+ private sector entity aga9/ cyb] ?reats t c\ld result 9 loss ( life or significant h>m to ! national economy or national security4 7b7 ,=m ( reports ,ea* report submitt$ "u ?is section %all be 9 unclassifi$ =m1 b may include a classifi$ annex z necess>y to protect s\rces1 me?ods1 propriet>y or s5sitive bus9ess in=mation1 & national security4 #f4 ,report+ to %>ehold]s ( cyb] risks & cyb] incid5ts 7a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 & annually !reaft] = #c ye>s1 ! ,securities & ,ex*ange ,commission1 9 consultation ) ! ,secret>y ( ,comm]ce & ! ,secret>y ( ,homel& ,security1 %all submit to ,congress a report-- 7#a7 assess+ ! report+ ( cyb] risk or cyb] incid5ts 9 f9ancial /atem5ts by issu]s ( securities2 & 7#b7 evaluat+ relevant ,commission actions1 includ+ ! /aff guidance issu$ by ! ,commission on ,octob] #ac1 #bjaa4 7b7 ,prohibition ,a report submitt$ "u ?is section %all n include propriet>y or s5sitive bus9ess in=mation or id5tify any individual issu]4 #g4 ,regulators ( critical infra/ructure 7a7 ,def9itions ,9 ?is section-- 7#a7 ! t]m critical infra/ructure sector means any sector id5tifi$ 9 ,presid5tial ,policy ,directive-#ba1 issu$ ,febru>y #ab1 #bjac 7or any successor !reto72 & 7#b7 ! t]m relevant ag5cies means-- 7,a7 ! sector-specific ag5cies id5tifi$ 9 ,presid5tial ,policy ,directive-#ba1 issu$ ,febru>y #ab1 #bjac 7or any successor !reto72 & 7,b7 ea* ag5cy 7z def9$ 9 section #cejb7a7 ( title #dd1 ,unit$ ,/ates ,code7 t has sub/antial regulatory au?ority 9 a critical infra/ructure sector4 7b7 ,reports ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 & annually !reaft] = #c ye>s1 ! ,secret>y ( ,homel& ,security1 9 consultation ) relevant ag5cies1 %all submit to ,congress a report t describes !-- 7#a7 nature & /ate ( ! vuln]abilities to cyb] ?reats ( ea* critical infra/ructure sector2 7#b7 preval5ce & s]i\sness ( cyb] ?reats 9 ea* critical infra/ructure sector2 7#c7 recomm5d$ /eps to ?w>t or dim9i% cyb] ?reats2 & 7#d7 ! degree to :i* cyb]security & in=mation assurance coop]ative activities ) private sector p>tn]s develop$ by ! ,dep>tm5t ( ,def5se & its def5se indu/rial base h be5 employ$ 9 ea* critical infra/ructure sector4 7c7 ,=m ( reports ,ea* report submitt$ "u ?is section-- 7#a7 %all be 9 unclassifi$ =m2 7#b7 %all n-- 7,a7 id5tify any individual private sector entity2 & 7,b7 include propriet>y or s5sitive bus9ess in=mation2 & 7#c7 may include a classifi$ annex z necess>y to protect s\rces1 me?ods1 & national security4 #h4 ,rese>* report on develop+ te*nologies t w\ld enhance cyb]security ( critical infra/ructure entities 7a7 ,def9ition ,9 ?is section1 ! t]m critical infra/ructure has ! mean+ giv5 t t]m 9 section #ajaf7;e7 ( ! ,,usa ,,patriot ,act 7#db ,u4,s4,c4 #eaie;c7e774 7b7 ,reports 7#a7 ,9 g5]al ,! ,secret>y ( ,homel& ,security %all ent] into a contract ) ! ,national ,rese>* ,c\ncil1 or ano!r f$]ally fund$ rese>* & developm5t corporation1 "u :i* ! ,c\ncil or corporation %all submit to ,congress a report on opportunities to develop new te*nologies or te*nological approa*es1 includ+ develop+ a secure doma91 t w\ld enhance ! cyb]security ( critical infra/ructure entities4 7#b7 ,limitations ,! report requir$ "u p>agraph 7#a7 %all-- 7,a7 consid] only te*nologies or te*nological options t c be deploy$ consi/5t ) con/itutional & /atutory privacy rights2 & 7,b7 id5tify any te*nologies or te*nological options describ$ 9 subp>agraph 7,a7 t m]it ,f$]al rese>* support4 7#c7 ,tim+ ,! contract ent]$ into "u p>agraph 7#a7 %all require t ! report describ$ 9 p>agraph 7#a7 be submitt$ n lat] ?an #a ye> aft] ! date ( enactm5t ( ?is ,act4 ,! ,secret>y ( ,homel& ,security may ent] into additional subsequ5t contracts z appropriate4 #i4 ,prep>$ness ( ,f$]al c\rts to promote cyb]security ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 ! ,attorney ,g5]al1 9 coord9ation ) ! ,adm9i/rative ,(fice ( ! ,unit$ ,/ates ,c\rts1 %all submit to ,congress a report-- 7#a7 on :e!r ,f$]al c\rts h grant$ timely relief 9 matt]s relat+ to botnets & o!r cyb]crime & cyb] ?reats2 & 7#b7 t includes1 z appropriate1 recomm5dations on *anges or improvem5ts to-- 7,a7 ! ,f$]al ,rules ( ,civil ,proc$ure or ! ,f$]al ,rules ( ,crim9al ,proc$ure2 7,b7 ! tra9+ & o!r res\rces available to support ! ,f$]al judici>y2 7,c7 ! capabilities & specialization ( c\rts to :i* su* cases may be assign$2 & 7,d7 ,f$]al civil & crim9al laws4 #aj4 ,imp$im5ts to public aw>5ess ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 & annually !reaft] = #c ye>s 7or m frequ5tly if det]m9$ appropriate by ! ,secret>y ( ,homel& ,security7 ! ,secret>y ( ,homel& ,security %all submit to ,congress a report on-- 7#a7 legal or o!r imp$im5ts to appropriate public aw>5ess (-- 7,a7 ! nature (1 me?ods ( propagation (1 & damage caus$ by common cyb] security ?reats su* z comput] viruses1 social eng9e]+ te*niques1 & malw>e2 7,b7 ! m9imal /&>ds ( comput] security necess>y = responsible int]net use2 & 7,c7 ! availability ( comm]cial (f-!-%elf te*nology t all[s consum]s to meet su* levels ( comput] security2 7#b7 a summ>y ( ! plans ( ! ,secret>y ( ,homel& ,security to enhance public aw>5ess ( common cyb] ?reats1 includ+ a description ( ! metrics us$ by ! ,dep>tm5t ( ,homel& ,security = evaluat+ ! efficacy ( public aw>5ess campaigns2 & 7#c7 recomm5dations = congressional actions to address ^! imp$im5ts to appropriate public aw>5ess ( common cyb] ?reats4