,i #aadth ,,congress #ast ,session ,h4 ,r4 #he ,,in ,,the ,,house ,,of ,,representatives ,january #f1 #bjae ,ms4 ,jackson ,lee introduced the following bill2 which was referred to the ,committee on ,homeland ,security ,a ,,bill ,to codify the objective of ,presidential ,policy ,directive #ba to improve critical infrastructure security and resilience1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,terrorism ,prevention and ,critical ,infrastructure ,protection ,act of #bjae4 #b4 ,findings ,the ,congress finds the following3 7#a7 ,the ,nation's critical infrastructure provides the essential services that underpin ,american society4 ,proactive and coordinated efforts are necessary to strengthen and maintain secure1 functioning1 and resilient critical infrastructure1 including assets1 networks1 and systems1 that are vital to public confidence and the ,nation's safety1 prosperity1 and well-being4 7#b7 ,the ,nation's critical infrastructure is diverse and complex4 ,it includes distributed networks1 varied organizational structures and operating models 7including multinational ownership71 interdependent functions and systems in both the physical space and cyber space1 and governance constructs that involve multilevel authorities1 responsibilities1 and regulations4 ,critical infrastructure owners and operators are uniquely positioned to manage risks to their individual operations and assets1 and to determine effective strategies to make them more secure and resilient4 7#c7 ,critical infrastructure must be secured against terrorist attacks1 and must be designed and maintained in such a way as to withstand and recover quickly in the event of an attack4 ,achieving this will require integration with the national preparedness system across prevention1 protection1 mitigation1 response1 and recovery efforts4 #c4 ,policy 7a7 ,security and resilience ,the ,secretary of ,homeland ,security shall work with critical infrastructure owners and operators and ,s,l,t,ts to take proactive steps to manage risk and strengthen the security and resilience of the ,nation's critical infrastructure against terrorist attacks that could have a debilitating impact on national security1 economic stability1 public health and safety1 or any combination thereof4 ,such efforts shall seek to reduce vulnerabilities1 minimize consequences1 identify and disrupt terrorism threats1 and hasten response and recovery efforts related to critical infrastructure4 7b7 ,international partners ,the ,secretary shall1 in consultation with appropriate ,federal agencies1 establish terrorism prevention policy to engage with international partners to strengthen the security and resilience of domestic critical infrastructure and critical infrastructure located outside of the ,united ,states on which the ,nation depends4 7c7 ,integrated1 holistic approach 7#a7 ,research task force ,the ,secretary shall establish a research task force to conduct research into the best means and methods to address the security and resilience of critical infrastructure in an integrated1 holistic manner to reflect critical infrastructure's interconnectedness and interdependency4 7#b7 ,duties of the research task force ,the research task force shall provide the ,secretary with-- 7,a7 a list of critical infrastructure2 7,b7 the degree the critical infrastructure is reliant upon other infrastructure2 7,c7 the cyber preparedness of suppliers1 contractors1 or service providers of critical infrastructure2 7,d7 programs1 projects1 or professional development for persons responsible for the security and operation of critical infrastructure2 and 7,e7 vulnerabilities and threats that are found in software systems1 firewalls1 applications1 and methods of accessing systems4 7#c7 ,membership ,the research task force shall consist of #ai members appointed by the ,secretary4 ,the ,secretary shall appoint one member to represent each of-- 7,a7 the ,national ,institutes of ,standards and ,technology2 7,b7 the ,association of ,computing ,machinery2 7,c7 ,,ieee 7formerly the ,institute of ,electrical and ,electronic ,engineers72 7,d7 ,carnegie ,mellon ,cylabs2 7,e7 the ,edison ,electric ,institute2 7,f7 the ,national ,telecommunication and ,information ,administration2 7,g7 the ,utilities ,telecom ,council2 7,h7 the ,,us ,oil and ,gas ,association2 7,i7 the ,american ,chemistry ,council2 7,j7 the ,american ,fuel and ,petrochemical ,manufacturers2 7,k7 the ,pharmaceutical ,research ,manufacturers of ,america2 and 7,l7 the ,national ,oceanic and ,atmospheric ,administration4 7#d7 ,report ,the research task force shall provide a research report to the ,secretary on its findings and recommendations #ahj days after its establishment4 7#e7 ,critical infrastructure defined ,in this subsection1 the term critical infrastructure means infrastructure of-- 7,a7 energy capture1 refining1 manufacturing1 and delivery systems2 7,b7 transportation and transportation systems2 7,c7 water and sewer capture1 processing1 and delivery systems2 7,d7 healthcare systems1 with respect to preventing threats to the quality and safety of medicines1 medical devices1 and delivery of life-saving health care services2 7,e7 food production1 processing1 and delivery systems2 7,f7 virtual and physical communication systems2 7,g7 financial systems2 and 7,h7 the electricity grid4 7d7 ,strategic imperatives 7#a7 ,in general ,the ,secretary shall establish the ,strategic ,research ,imperatives ,program1 which shall have the responsibility of leading the ,department of ,homeland ,security's ,federal civilian agency approach to strengthen critical infrastructure security and resilience4 7#b7 ,duties ,the duties of the program are the following3 7,a7 ,collect data1 refine and clarify functional relationships across the ,federal ,government to advance the national unity of effort to strengthen critical infrastructure1 terrorism prevention1 security1 and resilience4 7,b7 ,investigate effective measures that support information exchange by identifying baseline data and systems requirements for the ,federal ,government4 7,c7 ,recommend methods to implement an integration and analysis function to inform planning and operations decisions regarding the protection of critical infrastructure from terrorist threats4 7e7 ,guidance ,the ,secretary of ,homeland ,security shall make available research findings and guidance to ,federal civilian department and agency heads 7or their designees7 for the identification1 prioritization1 assessment1 remediation1 and security of their respective internal critical infrastructure to assist in the prevention1 mediation1 and recovery from terrorism events4 #d4 ,roles and responsibilities 7a7 ,unity of effort 7#a7 ,in general ,the ,secretary shall establish and appoint a research working group that shall-- 7,a7 study and make recommendations on how best to achieve and implement national unity of effort to protect against terrorism threats1 through investigation of strategic guidance from existing laws1 ,presidential policy directives1 and ,executive orders2 and 7,b7 investigate the security and resilience of the ,nation's information assurance components that provide protection against terrorism threats4 7#b7 ,in-depth approach ,the research working group shall also consider research by subject-matter experts on cyber security in-depth approaches that study the following1 and make recommendations thereon to the ,secretary3 7,a7 ,the program of the ,department of ,homeland ,security to secure ,federal agencies and critical infrastructure to create resilient secure computer systems and networks4 7,b7 ,cyber security preparedness of vendors1 contractors1 or nongovernment agency entities that provide computer-related support or services to critical infrastructure owners and operators as well as government agencies charged with securing them4 7,c7 ,investigation of the feasibility of developing industry- or sector-specific computer emergency rapid response teams4 7,d7 ,the feasibility of the agency developing a guest visiting security researchers program to provide instruction to private sector and civilian agency personnel responsible for cyber security4 7#c7 ,membership ,the research working group shall be comprised of individuals with expertise and day-to-day engagement from the sector-specific agency terrorism prevention1 remediation1 and response experts1 as well as the specialized or support terrorism prevention capabilities of other ,federal departments and agencies1 as well as experts who engage in strong collaboration with critical infrastructure owners and operators and ,s,l,t,ts1 and academic researchers with in-depth knowledge in computing security4 7b7 ,secretary of homeland security 7#a7 ,in general ,the ,secretary of ,homeland ,security shall establish a research program to provide strategic guidance1 promote a national unity of effort1 and coordinate the overall ,federal effort to promote the security and resilience of the ,nation's critical infrastructure from terrorist threats4 7#b7 ,additional roles and responsibilities ,additional roles and responsibilities for the ,secretary of ,homeland ,security include the following3 7,a7 ,identify and prioritize critical infrastructure1 considering physical and cyber threats1 vulnerabilities1 and consequences of terrorist attacks1 in coordination with ,s,s,as and other ,federal departments and agencies4 7,b7 ,maintain national terrorism critical infrastructure centers that shall provide a situational awareness capability that includes integrated1 actionable information about potential terrorist trends1 imminent terrorist threats1 and the status of terrorist incidents that may impact critical infrastructure4 7,c7 ,in coordination with ,s,s,as and other ,federal departments and agencies1 provide analysis1 expertise1 and other technical assistance to critical infrastructure owners and operators on terrorism prevention security protocols and facilitate access to and exchange of information and intelligence necessary to strengthen the security and resilience of critical infrastructure4 7,d7 ,conduct comprehensive assessments of the vulnerabilities of the ,nation's critical infrastructure in coordination with the ,s,s,as and in collaboration with ,s,l,t,ts and critical infrastructure owners and operators4 7,e7 ,coordinate ,federal ,government responses to cyber or physical terrorism incidents affecting critical infrastructure consistent with statutory authorities4 7,f7 ,support the ,attorney ,general and law enforcement agencies with their responsibilities to investigate and prosecute threats to and terrorist attacks against critical infrastructure4 7,g7 ,coordinate with and utilize the expertise of ,s,s,as and other appropriate ,federal departments and agencies to map geospatially1 image1 analyze1 and sort critical infrastructure by employing commercial satellite and airborne systems1 as well as existing capabilities within other departments and agencies4 7,h7 ,report annually to ,congress on the status of national critical infrastructure efforts to meet the objectives of this section4 7c7 ,sector-,specific agencies ,recognizing existing statutory or regulatory authorities of specific ,federal departments and agencies1 and leveraging existing sector familiarity and relationships1 the head of each ,,ssa shall carry out the following roles and responsibilities for their respective sectors3 7#a7 ,serve as a day-to-day ,federal interface for the dynamic prioritization and coordination of sector-specific activities related to cyber security critical infrastructure protection from terrorism4 7#b7 ,carry out terrorism incident management responsibilities consistent with statutory authority and other appropriate policies1 directives1 or regulations4 7#c7 ,provide1 support1 or facilitate technical assistance and consultations for such sectors to identify vulnerabilities and help mitigate terrorism incidents1 as appropriate4 7d7 ,research and report on best practices for coordinating ,the ,secretary shall conduct research and submit a report to ,congress not later than #ahj days after the date of the enactment of this ,act on the best practices for coordinating with civilian agencies1 private sector critical infrastructure owners1 local1 ,state1 tribal1 and territorial agencies1 other relevant ,federal departments and agencies1 where appropriate with independent regulatory agencies1 and ,s,l,t,ts1 as appropriate1 to implement this ,act4 #e4 ,strategic imperatives 7a7 ,research and report on the most efficient means for information exchange by identifying baseline data and systems requirements for the federal government ,the ,secretary shall facilitate the timely exchange of terrorism threat and vulnerability information as well as information that allows for the development of a situational awareness capability for ,federal civilian agencies during terrorist incidents4 ,the goal of such facilitation is to enable efficient information exchange through the identification of requirements for data and information formats and accessibility1 system interoperability1 and redundant systems and alternate capabilities should there be a disruption in the primary systems4 7b7 ,implementation of an integration and analysis function ,to inform planning and operational decisions regarding the protection of critical infrastructure from terrorism events ,the ,secretary of ,homeland ,security shall implement an integration and analysis function for critical infrastructure that includes operational and strategic analysis on terrorism incidents1 threats1 and emerging risks4 ,such function shall include establishment by the ,secretary of #b national centers to accomplish the following3 7#a7 ,implement a capability to collate1 assess1 and integrate vulnerability and consequence information with threat streams and hazard information to-- 7,a7 aid in prioritizing assets and managing risks to critical infrastructure2 7,b7 determine the staffing and professional need for cyber security critical infrastructure protection2 7,c7 determine the agency staffing needed and to support cyber security critical infrastructure protection and report the findings to ,congress2 7,d7 research and report findings regarding the feasibility of exploring terrorist incident correlations between critical infrastructure damage1 destruction1 and diminished capacity1 and what occurs during certain natural disasters2 7,e7 anticipate interdependencies and cascading impacts related to cyber telecommunications failures2 7,f7 recommend security and resilience measures for critical infrastructure prior to1 during1 and after a terrorism event or incident2 7,g7 support post-terrorism incident management and restoration efforts related to critical infrastructure2 and 7,h7 make recommendations on preventing the collapse or serious degrading of the telecommunication capability in an area impacted by a terrorism event4 7#b7 ,support the ,department of ,homeland ,security's ability to maintain and share1 as a common ,federal service1 a near real-time situational awareness capability for critical infrastructure that includes actionable information about imminent terrorist threats1 significant trends1 and awareness of incidents that may affect critical infrastructure4 #f4 ,protection of privacy and civil liberties 7a7 ,in ,general ,the ,secretary of ,homeland ,security shall support greater terrorism cyber security information sharing by civilian ,federal agencies with the private sector that protects constitutional privacy and civil liberties rights4 ,the heads of ,federal departments and agencies shall ensure that all existing privacy principles1 policies1 and procedures are implemented consistent with applicable law and policy and shall include senior agency officials for privacy in their efforts to govern and oversee terrorism program information sharing properly4 7b7 ,ensuring independence of privacy officer 7#a7 ,in general ,section #bbb of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #adb7 is amended-- 7,a7 in subsection 7a71 by striking so much as precedes paragraph 7#a7 and inserting the following3 7a7 ,in general ,there shall be in the ,department a ,privacy ,officer who shall be appointed by the ,president1 by and with the advice and consent of the ,senate4 ,the ,privacy ,officer shall report directly to the ,secretary1 and shall have primary responsibility in the ,department for privacy policy1 including-- 2 7,b7 by striking senior official appointed under subsection 7a7 each place it appears and inserting ,privacy ,officer2 7,c7 in subsection 7b77#a77;,a71 by striking senior official and inserting ,privacy ,officer2 7,d7 in subsection 7b77#a77;,b71 by striking senior official's and inserting ,privacy ,officer's2 7,e7 in subsection 7b77#a77;,c71 by striking senior official and inserting ,privacy ,officer2 7,f7 in subsection 7b77#a77;,d71 by striking senior official and inserting ,privacy ,officer2 7,g7 in subsection 7c77#b77;,b71 by striking senior official each place it appears and inserting ,privacy ,officer2 7,h7 in the heading for subsection 7c77#b77;,b77iii71 by striking by senior official2 7,i7 in subsection 7d71 by striking the senior official appointed under subsection 7a7 or transfers that senior official to another position or location within the ,department and inserting individual appointed as ,privacy ,officer2 7,j7 in the heading for subsection 7e71 by striking 8by ,senior ,official02 and 7,k7 in subsection 7e7-- 7i7 by striking senior official and inserting ,privacy ,officer2 and 7ii7 by striking senior official's each place it appears and inserting ,privacy ,officer4 7#b7 ,continued service ,the senior official serving as the ,privacy ,officer of the ,department of ,homeland ,security immediately before the enactment of this ,act may continue to act as the ,privacy ,officer until a successor is appointed in accordance with the amendments made by this subsection4 #g4 ,innovation and research and development ,the ,secretary of ,homeland ,security may consult with other ,federal departments and agencies to produce and submit to congressional oversight committees a report on how best to align federally funded research and development activities that seek to strengthen the security and resilience of the ,nation's critical infrastructure1 including-- 7#a7 promoting research and development to enable the secure and resilient design and construction of critical infrastructure and more secure accompanying cyber technology2 7#b7 enhancing modeling capabilities to determine potential impacts on critical infrastructure of an incident or threat scenario1 and cascading effects on other sectors2 7#c7 facilitating initiatives to incentivize cyber security investments and the adoption of critical infrastructure design features that strengthen all-hazards security and resilience2 and 7#d7 prioritizing efforts to support the strategic guidance issued by the ,secretary of ,homeland ,security4 #h4 ,implementation by ,department of ,homeland ,security 7a7 ,critical infrastructure terrorism prevention security and computer network resilience functional relationships 7#a7 ,in general ,within #abj days after the date of the enactment of this ,act1 the ,secretary of ,homeland ,security shall conduct research and develop a description of the functional relationships within the ,department of ,homeland ,security and across the ,federal ,government related to critical infrastructure security and resilience4 ,the description shall-- 7,a7 include the roles and functions of the #b national critical infrastructure centers and a discussion of the analysis and integration function2 7,b7 serve as a roadmap for critical infrastructure owners and operators and ,s,l,t,ts to navigate the ,federal ,government's functions and primary points of contact assigned to those functions for critical infrastructure security and resilience against both physical and cyber threats2 and 7,c7 include identification of every contact within the ,federal ,government for critical infrastructure protection security and resilience1 by company and industry4 7#b7 ,coordination ,the ,secretary shall prepare a report on efforts to coordinate this effort with the ,s,s,as and other relevant ,federal departments and agencies4 7#c7 ,provision to president ,the ,secretary shall provide the description1 supported by agency-conducted research1 to the ,president through the ,assistant to the ,president for ,homeland ,security and ,counterterrorism1 and to the relevant congressional homeland security oversight committees4 7b7 ,evaluation of the existing public-,private partnership model 7#a7 ,in general ,within #aej days after the date of the enactment of this ,act1 the ,secretary of ,homeland ,security1 in coordination with the ,s,s,as1 other relevant ,federal departments and agencies1 ,s,l,t,ts1 and critical infrastructure owners and operators1 shall conduct an analysis of the existing public-private partnership model1 evaluate its effectiveness1 and recommend options for improving the effectiveness of the partnership in both the physical and cyber space4 7#b7 ,contents ,the research and recommendations shall-- 7,a7 consider options to streamline or automate 7or both7 processes for collaboration and exchange of terrorism-related information and to minimize duplication of effort2 7,b7 consider how the model for terrorism information exchange can be flexible and adaptable to meet the unique needs of individual critical infrastructure sectors while providing a focused1 disciplined1 and effective approach for the ,federal ,government to coordinate with the critical infrastructure owners and operators and with ,s,l,t,ts governments2 and 7,c7 result in recommendations to enhance partnerships to be approved for implementation by the ,president4 7c7 ,identification of baseline data and systems requirements for the federal government ,to enable efficient information exchange 7#a7 ,in general ,within #ah months after the date of the enactment of this ,act1 the ,secretary of ,homeland ,security1 in coordination with the ,s,s,as and other ,federal departments and agencies1 shall convene a team of researchers to identify baseline data and systems requirements-- 7,a7 to enable the efficient exchange of terrorism information and intelligence relevant to strengthening the security and resilience of critical infrastructure2 and 7,b7 for sharing of data and interoperability of systems to enable the timely exchange of terrorism or terrorist threat data and information to secure critical infrastructure and make it more resilient4 7#b7 ,experts included ,the experts shall include representatives from-- 7,a7 those entities that routinely possess information important to critical infrastructure security and resilience2 7,b7 those entities that determine and manage information technology systems used to exchange information2 and 7,c7 those entities responsible for the security of information being exchanged4 7#c7 ,analysis ,analysis by such team of experts shall include-- 7,a7 interoperability with critical infrastructure partners2 7,b7 identification of key data and the information requirements of key ,federal1 ,,sltt1 and private sector entities2 7,c7 availability1 accessibility1 and formats of data2 7,d7 the ability to exchange various classifications of information2 7,e7 the security of those systems to be used2 and 7,f7 appropriate protections for individual privacy and civil liberties4 7#d7 ,provision to president ,the ,secretary shall provide such analysis to the ,president through the ,assistant to the ,president for ,homeland ,security and ,counterterrorism1 and to congressional homeland security oversight committees4 7d7 ,develop a research program ,to inform the agency of a situational awareness capability for critical infrastructure ,within #b years after the date of the enactment of this ,act1 the ,secretary of ,homeland ,security shall demonstrate a near real-time situational awareness1 research-based pilot project for critical infrastructure that-- 7#a7 includes threat streams and all-hazards information as well as vulnerabilities2 7#b7 provides the status of critical infrastructure and potential cascading effects2 7#c7 supports decisionmaking2 7#d7 disseminates critical information that may be needed to save or sustain lives1 mitigate damage1 or reduce further degradation of a critical infrastructure capability throughout an incident2 and 7#e7 is available for and covers physical and cyber elements of critical infrastructure1 and enables an integration of information as necessitated by an incident4 7e7 ,update to national infrastructure protection plan 7#a7 ,in general ,within #ah months after the date of the enactment of this ,act1 the ,secretary of ,homeland ,security shall provide to the ,president1 through the ,assistant to the ,president for ,homeland ,security and ,counterterrorism and the congressional homeland security oversight committees1 a research report that outlines the ,national ,infrastructure ,protection ,plan to address the implementation of this ,act1 the requirements of title ,,ii of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #aba et seq471 and alignment with the ,national ,preparedness ,goal and ,system required by ,presidential ,policy ,directive #h4 7#b7 ,contents ,the plan shall include-- 7,a7 identification of a risk management framework to be used to strengthen the security and resilience of critical infrastructure against terrorist threats2 7,b7 the methods to be used to prioritize critical infrastructure in the event of a terrorism event that impacts multiple infrastructure systems2 7,c7 the protocols to be used to synchronize communication and actions within the ,federal ,government to effectively respond to critical infrastructure terrorist threats or events2 and 7,d7 a metrics and analysis process to be used to measure the ,nation's ability to manage and reduce terrorism risks to critical infrastructure4 7#c7 ,relationship to other provisions ,the plan shall reflect the terrorism threat identification1 prevention1 mediation1 and recovery relationships within the ,department of ,homeland ,security and across the ,federal ,government identified under this ,act and the updates to the public-private partnership model under this ,act4 7#d7 ,energy and communication systems ,the plan shall consider sector dependencies on energy and communications systems during a terrorism event1 and identify pre-event and mitigation measures or alternate capabilities during disruptions to those systems4 7#e7 ,coordination ,the ,secretary shall coordinate activities under this subsection with the ,s,s,as1 other relevant ,federal departments and agencies1 ,s,l,t,ts1 and critical infrastructure owners and operators4 7#f7 ,response plans ,the plan shall include an analysis of the feasibility of developing terrorism response plans1 based on research conducted on the resilience of critical infrastructure when faced with terrorism threats1 that focus on action plans to achieve a level of function and eventual recovery of full operability of critical infrastructure post-cyber attack4 7f7 ,national critical infrastructure security and resilience ,r,d plan ,within #b years after the date of the enactment of this ,act1 the ,secretary of ,homeland ,security1 in coordination with the ,office of ,science and ,technology ,policy1 the ,s,s,as1 the ,department of ,commerce1 and other ,federal departments and agencies1 shall provide to the ,president1 through the ,assistant to the ,president for ,homeland ,security and ,counterterrorism1 a ,national ,critical ,infrastructure ,security and ,resilience ,research and ,development ,plan that takes into account the evolving threat landscape1 annual metrics1 and other relevant information to identify priorities and guide research and development requirements and investments4 ,the ,secretary shall reissue the plan every #d years after its initial issuance1 and make interim updates as needed4 7g7 ,consistency in ,,ppd-#a ,policy coordination1 dispute resolution1 and periodic in-progress reviews for the implementation of this ,act shall be carried out consistent with ,presidential ,policy ,directive #a1 including the use of interagency policy committees coordinated by the national security staff4 7h7 ,relationship to other authorities ,nothing in this ,act alters1 supersedes1 or impedes the authorities of ,federal departments and agencies1 including independent regulatory agencies1 to carry out their functions and duties consistent with applicable legal authorities and other ,presidential guidance and directives1 including the designation of critical infrastructure under such authorities4 #i4 ,designation of critical infrastructure sectors and sector-specific agencies 7a7 ,designation 7#a7 ,in general ,for purposes of this ,act1 the ,secretary of ,homeland ,security shall determine which critical infrastructure sectors and sector specific agencies for such sectors should be engaged in efforts to detect1 deter1 mitigate1 and lead recovery efforts related to terrorist incidents4 7#b7 ,cultivation of relationships ,the ,secretary shall evaluate the appropriate relationships among ,federal agencies1 ,s,s,as1 ,s,l,t,ts1 and critical infrastructure owners and operators to establish the most effective defense against terrorist attacks4 7b7 ,function ,the ,secretary shall provide institutional knowledge and specialized expertise to lead1 facilitate1 or support security and resilience programs and associated terrorism prevention activities with respect to sectors designated under subsection 7a77#a74 7c7 ,changes ,the ,secretary of ,homeland ,security shall periodically evaluate the need for and make changes to plans and evaluations made under this section4 ,the ,secretary shall consult with the ,assistant to the ,president for ,homeland ,security and ,counterterrorism and congressional homeland security oversight committees before changing the designation of a critical infrastructure sector or ,,ssa for a sector4 7d7 ,reports ,the ,secretary of ,homeland ,security shall seek periodic research reports on critical infrastructure protection from ,federal agencies as considered necessary by the ,secretary4 #aj4 ,evaluation of achievement of objectives 7a7 ,in general ,the ,national ,research ,council1 beginning #ab months after the date of enactment of this ,act1 shall evaluate how well the ,department of ,homeland ,security is meeting the objectives of this ,act4 7b7 ,included subjects ,the review shall include evaluation of-- 7#a7 cyber security threats to critical infrastructure2 7#b7 the success of ,department programs in implementing section #h2 and 7#c7 the long-term vulnerabilities faced by the ,department1 other ,federal agencies1 and critical infrastructure managers and owners4 7c7 ,completion ,the ,council shall complete the review by not later than the end of the #ah-month period beginning on the date of enactment of this ,act1 except that the ,secretary of ,homeland ,security may extend such period4 7d7 ,report ,upon the completion of the review1 the ,council shall submit to the ,secretary a report on the findings of the review1 including recommendations based on such findings4 #aa4 ,definitions ,for purposes of this ,act3 7#a7 ,all hazards ,the term all hazards means a threat or an incident1 natural or manmade1 that warrants action to protect life1 property1 the environment1 and public health or safety1 and to minimize disruptions of government1 social1 or economic activities4 ,the term includes natural disasters1 cyber incidents1 industrial accidents1 pandemics1 acts of terrorism1 sabotage1 and destructive criminal activity targeting critical infrastructure4 7#b7 ,collaboration ,the term collaboration means the process of working together to achieve shared goals4 7#c7 ,critical infrastructure ,the term critical infrastructure means systems and assets1 whether physical or virtual1 so vital to the ,united ,states that the incapacity or destruction of such systems and assets would have a debilitating impact on security1 national economic security1 national public health or safety1 or any combination of those matters4 7#d7 ,federal departments and agencies ,the term ,federal departments and agencies means any authority of the ,united ,states that is an agency under section #cejb7a7 of title #dd1 ,united ,states ,code1 other than those considered to be independent regulatory agencies as defined in section #cejb7e7 of such title4 7#e7 ,national essential functions ,the term national essential functions means that subset of ,government functions that are necessary to lead and sustain the ,nation during a catastrophic emergency4 7#f7 ,primary mission essential functions ,the term primary mission essential functions means those ,government functions that must be performed in order to support or implement the performance of the national essential functions before1 during1 and in the aftermath of an emergency4 7#g7 ,resilience ,the term resilience means the ability to prepare for and adapt to changing conditions and withstand and recover rapidly from disruptions4 ,the term includes the ability to withstand and recover from deliberate attacks1 accidents1 or naturally occurring threats or incidents4 7#h7 ,sector-specific agency2 ,,ssa ,the terms sector-specific agency and ,,ssa mean the ,federal department or agency designated under this ,act for a critical infrastructure sector4 7#i7 ,secure2 security ,the terms secure and security mean reducing the risk to critical infrastructure by physical means or defense cyber measures to intrusions1 attacks1 or the effects of natural or manmade disasters4 7#aj7 ,,sltt ,the term ,,sltt means ,state1 local1 tribal1 and territorial entities4