,i #aad? ,,congress #a/ ,session ,h4 ,r4 #he ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,janu>y #f1 #bjae ,ms4 ,jackson ,lee introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,homel& ,security ,a ,,bill ,to codify ! objective ( ,presid5tial ,policy ,directive #ba to improve critical infra/ructure security & resili5ce1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,t]rorism ,prev5tion & ,critical ,infra/ructure ,protection ,act ( #bjae4 #b4 ,f9d+s ,! ,congress f9ds ! foll[+3 7#a7 ,! ,nation's critical infra/ructure provides ! ess5tial s]vices t und]p9 ,am]ican society4 ,proactive & coord9at$ ef=ts are necess>y to /r5g!n & ma9ta9 secure1 function+1 & resili5t critical infra/ructure1 includ+ assets1 networks1 & sy/ems1 t are vital to public confid5ce & ! ,nation's safety1 prosp]ity1 & well-be+4 7#b7 ,! ,nation's critical infra/ructure is div]se & complex4 ,x includes di/ribut$ networks1 v>i$ organizational /ructures & op]at+ models 7includ+ mult9ational own]%ip71 int]dep5d5t functions & sy/ems 9 bo? ! physical space & cyb] space1 & gov]nance con/ructs t involve multilevel au?orities1 responsibilities1 & regulations4 ,critical infra/ructure own]s & op]ators are uniquely position$ to manage risks to _! individual op]ations & assets1 & to det]m9e effective /rategies to make !m m secure & resili5t4 7#c7 ,critical infra/ructure mu/ be secur$ aga9/ t]rori/ attacks1 & mu/ be design$ & ma9ta9$ 9 su* a way z to )/& & recov] quickly 9 ! ev5t ( an attack4 ,a*iev+ ?is w require integration ) ! national prep>$ness sy/em across prev5tion1 protection1 mitigation1 response1 & recov]y ef=ts4 #c4 ,policy 7a7 ,security & resili5ce ,! ,secret>y ( ,homel& ,security %all "w ) critical infra/ructure own]s & op]ators & ,s,l,t,ts to take proactive /eps to manage risk & /r5g!n ! security & resili5ce ( ! ,nation's critical infra/ructure aga9/ t]rori/ attacks t c\ld h a debilitat+ impact on national security1 economic /ability1 public heal? & safety1 or any comb9ation !re(4 ,su* ef=ts %all seek to r$uce vuln]abilities1 m9imize consequ5ces1 id5tify & disrupt t]rorism ?reats1 & ha/5 response & recov]y ef=ts relat$ to critical infra/ructure4 7b7 ,int]national p>tn]s ,! ,secret>y %all1 9 consultation ) appropriate ,f$]al ag5cies1 e/abli% t]rorism prev5tion policy to engage ) int]national p>tn]s to /r5g!n ! security & resili5ce ( dome/ic critical infra/ructure & critical infra/ructure locat$ outside ( ! ,unit$ ,/ates on :i* ! ,nation dep5ds4 7c7 ,integrat$1 holi/ic approa* 7#a7 ,rese>* task =ce ,! ,secret>y %all e/abli% a rese>* task =ce to conduct rese>* into ! be/ means & me?ods to address ! security & resili5ce ( critical infra/ructure 9 an integrat$1 holi/ic mann] to reflect critical infra/ructure's int]connect$ness & int]dep5d5cy4 7#b7 ,duties ( ! rese>* task =ce ,! rese>* task =ce %all provide ! ,secret>y )-- 7,a7 a li/ ( critical infra/ructure2 7,b7 ! degree ! critical infra/ructure is reliant ^u o!r infra/ructure2 7,c7 ! cyb] prep>$ness ( suppli]s1 contractors1 or s]vice provid]s ( critical infra/ructure2 7,d7 programs1 projects1 or pr(essional developm5t = p]sons responsible = ! security & op]ation ( critical infra/ructure2 & 7,e7 vuln]abilities & ?reats t are f\nd 9 s(tw>e sy/ems1 firewalls1 applications1 & me?ods ( access+ sy/ems4 7#c7 ,memb]%ip ,! rese>* task =ce %all consi/ ( #ai memb]s appo9t$ by ! ,secret>y4 ,! ,secret>y %all appo9t "o memb] to repres5t ea* (-- 7,a7 ! ,national ,in/itutes ( ,/&>ds & ,te*nology2 7,b7 ! ,association ( ,comput+ ,ma*9]y2 7,c7 ,,ieee 7=m]ly ! ,in/itute ( ,electrical & ,electronic ,eng9e]s72 7,d7 ,c>negie ,mellon ,cylabs2 7,e7 ! ,edison ,electric ,in/itute2 7,f7 ! ,national ,telecommunication & ,in=mation ,adm9i/ration2 7,g7 ! ,utilities ,telecom ,c\ncil2 7,h7 ! ,,u ,oil & ,gas ,association2 7,i7 ! ,am]ican ,*emi/ry ,c\ncil2 7,j7 ! ,am]ican ,fuel & ,petro*emical ,manufactur]s2 7,k7 ! ,ph>maceutical ,rese>* ,manufactur]s ( ,am]ica2 & 7,l7 ! ,national ,oceanic & ,atmosph]ic ,adm9i/ration4 7#d7 ,report ,! rese>* task =ce %all provide a rese>* report to ! ,secret>y on its f9d+s & recomm5dations #ahj days aft] its e/abli%m5t4 7#e7 ,critical infra/ructure def9$ ,9 ?is subsection1 ! t]m critical infra/ructure means infra/ructure (-- 7,a7 en]gy capture1 ref9+1 manufactur+1 & deliv]y sy/ems2 7,b7 transportation & transportation sy/ems2 7,c7 wat] & sew] capture1 process+1 & deliv]y sy/ems2 7,d7 heal?c>e sy/ems1 ) respect to prev5t+ ?reats to ! quality & safety ( m$ic9es1 m$ical devices1 & deliv]y ( life-sav+ heal? c>e s]vices2 7,e7 food production1 process+1 & deliv]y sy/ems2 7,f7 virtual & physical communication sy/ems2 7,g7 f9ancial sy/ems2 & 7,h7 ! electricity grid4 7d7 ,/rategic imp]atives 7#a7 ,9 g5]al ,! ,secret>y %all e/abli% ! ,/rategic ,rese>* ,imp]atives ,program1 :i* %all h ! responsibility ( lead+ ! ,dep>tm5t ( ,homel& ,security's ,f$]al civilian ag5cy approa* to /r5g!n critical infra/ructure security & resili5ce4 7#b7 ,duties ,! duties ( ! program are ! foll[+3 7,a7 ,collect data1 ref9e & cl>ify functional relation%ips across ! ,f$]al ,gov]nm5t to advance ! national unity ( ef=t to /r5g!n critical infra/ructure1 t]rorism prev5tion1 security1 & resili5ce4 7,b7 ,inve/igate effective measures t support in=mation ex*ange by id5tify+ basel9e data & sy/ems requirem5ts = ! ,f$]al ,gov]nm5t4 7,c7 ,recomm5d me?ods to implem5t an integration & analysis function to in=m plann+ & op]ations decisions reg>d+ ! protection ( critical infra/ructure f t]rori/ ?reats4 7e7 ,guidance ,! ,secret>y ( ,homel& ,security %all make available rese>* f9d+s & guidance to ,f$]al civilian dep>tm5t & ag5cy heads 7or _! designees7 = ! id5tification1 prioritization1 assessm5t1 rem$iation1 & security ( _! respective int]nal critical infra/ructure to assi/ 9 ! prev5tion1 m$iation1 & recov]y f t]rorism ev5ts4 #d4 ,roles & responsibilities 7a7 ,unity ( ef=t 7#a7 ,9 g5]al ,! ,secret>y %all e/abli% & appo9t a rese>* work+ gr\p t %all-- 7,a7 /udy & make recomm5dations on h[ be/ to a*ieve & implem5t national unity ( ef=t to protect aga9/ t]rorism ?reats1 ?r\gh inve/igation ( /rategic guidance f exi/+ laws1 ,presid5tial policy directives1 & ,executive ord]s2 & 7,b7 inve/igate ! security & resili5ce ( ! ,nation's in=mation assurance compon5ts t provide protection aga9/ t]rorism ?reats4 7#b7 ,9-dep? approa* ,! rese>* work+ gr\p %all also consid] rese>* by subject-matt] exp]ts on cyb] security 9-dep? approa*es t /udy ! foll[+1 & make recomm5dations !reon to ! ,secret>y3 7,a7 ,! program ( ! ,dep>tm5t ( ,homel& ,security to secure ,f$]al ag5cies & critical infra/ructure to create resili5t secure comput] sy/ems & networks4 7,b7 ,cyb] security prep>$ness ( v5dors1 contractors1 or nongov]nm5t ag5cy entities t provide comput]-relat$ support or s]vices to critical infra/ructure own]s & op]ators z well z gov]nm5t ag5cies *>g$ ) secur+ !m4 7,c7 ,inve/igation ( ! feasibility ( develop+ indu/ry- or sector-specific comput] em]g5cy rapid response teams4 7,d7 ,! feasibility ( ! ag5cy develop+ a gue/ visit+ security rese>*]s program to provide in/ruction to private sector & civilian ag5cy p]sonnel responsible = cyb] security4 7#c7 ,memb]%ip ,! rese>* work+ gr\p %all be compris$ ( individuals ) exp]tise & day-to-day engagem5t f ! sector-specific ag5cy t]rorism prev5tion1 rem$iation1 & response exp]ts1 z well z ! specializ$ or support t]rorism prev5tion capabilities ( o!r ,f$]al dep>tm5ts & ag5cies1 z well z exp]ts :o engage 9 /rong collaboration ) critical infra/ructure own]s & op]ators & ,s,l,t,ts1 & academic rese>*]s ) 9-dep? k 9 comput+ security4 7b7 ,secret>y ( homel& security 7#a7 ,9 g5]al ,! ,secret>y ( ,homel& ,security %all e/abli% a rese>* program to provide /rategic guidance1 promote a national unity ( ef=t1 & coord9ate ! ov]all ,f$]al ef=t to promote ! security & resili5ce ( ! ,nation's critical infra/ructure f t]rori/ ?reats4 7#b7 ,additional roles & responsibilities ,additional roles & responsibilities = ! ,secret>y ( ,homel& ,security include ! foll[+3 7,a7 ,id5tify & prioritize critical infra/ructure1 consid]+ physical & cyb] ?reats1 vuln]abilities1 & consequ5ces ( t]rori/ attacks1 9 coord9ation ) ,s,s,as & o!r ,f$]al dep>tm5ts & ag5cies4 7,b7 ,ma9ta9 national t]rorism critical infra/ructure c5t]s t %all provide a situational aw>5ess capability t includes integrat$1 actionable in=mation ab\t pot5tial t]rori/ tr5ds1 imm95t t]rori/ ?reats1 & ! /atus ( t]rori/ incid5ts t may impact critical infra/ructure4 7,c7 ,9 coord9ation ) ,s,s,as & o!r ,f$]al dep>tm5ts & ag5cies1 provide analysis1 exp]tise1 & o!r te*nical assi/ance to critical infra/ructure own]s & op]ators on t]rorism prev5tion security protocols & facilitate access to & ex*ange ( in=mation & intellig5ce necess>y to /r5g!n ! security & resili5ce ( critical infra/ructure4 7,d7 ,conduct compreh5sive assessm5ts ( ! vuln]abilities ( ! ,nation's critical infra/ructure 9 coord9ation ) ! ,s,s,as & 9 collaboration ) ,s,l,t,ts & critical infra/ructure own]s & op]ators4 7,e7 ,coord9ate ,f$]al ,gov]nm5t responses to cyb] or physical t]rorism incid5ts affect+ critical infra/ructure consi/5t ) /atutory au?orities4 7,f7 ,support ! ,attorney ,g5]al & law en=cem5t ag5cies ) _! responsibilities to inve/igate & prosecute ?reats to & t]rori/ attacks aga9/ critical infra/ructure4 7,g7 ,coord9ate ) & utilize ! exp]tise ( ,s,s,as & o!r appropriate ,f$]al dep>tm5ts & ag5cies to map geospatially1 image1 analyze1 & sort critical infra/ructure by employ+ comm]cial satellite & airborne sy/ems1 z well z exi/+ capabilities )9 o!r dep>tm5ts & ag5cies4 7,h7 ,report annually to ,congress on ! /atus ( national critical infra/ructure ef=ts to meet ! objectives ( ?is section4 7c7 ,sector-,specific ag5cies ,recogniz+ exi/+ /atutory or regulatory au?orities ( specific ,f$]al dep>tm5ts & ag5cies1 & lev]ag+ exi/+ sector famili>ity & relation%ips1 ! head ( ea* ,,ssa %all c>ry out ! foll[+ roles & responsibilities = _! respective sectors3 7#a7 ,s]ve z a day-to-day ,f$]al int]face = ! dynamic prioritization & coord9ation ( sector-specific activities relat$ to cyb] security critical infra/ructure protection f t]rorism4 7#b7 ,c>ry out t]rorism incid5t managem5t responsibilities consi/5t ) /atutory au?ority & o!r appropriate policies1 directives1 or regulations4 7#c7 ,provide1 support1 or facilitate te*nical assi/ance & consultations = su* sectors to id5tify vuln]abilities & help mitigate t]rorism incid5ts1 z appropriate4 7d7 ,rese>* & report on be/ practices = coord9at+ ,! ,secret>y %all conduct rese>* & submit a report to ,congress n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act on ! be/ practices = coord9at+ ) civilian ag5cies1 private sector critical infra/ructure own]s1 local1 ,/ate1 tribal1 & t]ritorial ag5cies1 o!r relevant ,f$]al dep>tm5ts & ag5cies1 :]e appropriate ) indep5d5t regulatory ag5cies1 & ,s,l,t,ts1 z appropriate1 to implem5t ?is ,act4 #e4 ,/rategic imp]atives 7a7 ,rese>* & report on ! mo/ effici5t means = in=mation ex*ange by id5tify+ basel9e data & sy/ems requirem5ts = ! f$]al gov]nm5t ,! ,secret>y %all facilitate ! timely ex*ange ( t]rorism ?reat & vuln]ability in=mation z well z in=mation t all[s = ! developm5t ( a situational aw>5ess capability = ,f$]al civilian ag5cies dur+ t]rori/ incid5ts4 ,! goal ( su* facilitation is to enable effici5t in=mation ex*ange ?r\gh ! id5tification ( requirem5ts = data & in=mation =mats & accessibility1 sy/em int]op]ability1 & r$undant sy/ems & alt]nate capabilities %\ld !re be a disruption 9 ! prim>y sy/ems4 7b7 ,implem5tation ( an integration & analysis function ,to in=m plann+ & op]ational decisions reg>d+ ! protection ( critical infra/ructure f t]rorism ev5ts ,! ,secret>y ( ,homel& ,security %all implem5t an integration & analysis function = critical infra/ructure t includes op]ational & /rategic analysis on t]rorism incid5ts1 ?reats1 & em]g+ risks4 ,su* function %all include e/abli%m5t by ! ,secret>y ( #b national c5t]s to accompli% ! foll[+3 7#a7 ,implem5t a capability to collate1 assess1 & integrate vuln]ability & consequ5ce in=mation ) ?reat /reams & haz>d in=mation to-- 7,a7 aid 9 prioritiz+ assets & manag+ risks to critical infra/ructure2 7,b7 det]m9e ! /aff+ & pr(essional ne$ = cyb] security critical infra/ructure protection2 7,c7 det]m9e ! ag5cy /aff+ ne$$ & to support cyb] security critical infra/ructure protection & report ! f9d+s to ,congress2 7,d7 rese>* & report f9d+s reg>d+ ! feasibility ( explor+ t]rori/ incid5t correlations betwe5 critical infra/ructure damage1 de/ruction1 & dim9i%$ capacity1 & :at occurs dur+ c]ta9 natural disa/]s2 7,e7 anticipate int]dep5d5cies & cascad+ impacts relat$ to cyb] telecommunications failures2 7,f7 recomm5d security & resili5ce measures = critical infra/ructure prior to1 dur+1 & aft] a t]rorism ev5t or incid5t2 7,g7 support po/-t]rorism incid5t managem5t & re/oration ef=ts relat$ to critical infra/ructure2 & 7,h7 make recomm5dations on prev5t+ ! collapse or s]i\s degrad+ ( ! telecommunication capability 9 an area impact$ by a t]rorism ev5t4 7#b7 ,support ! ,dep>tm5t ( ,homel& ,security's ability to ma9ta9 & %>e1 z a common ,f$]al s]vice1 a ne> real-"t situational aw>5ess capability = critical infra/ructure t includes actionable in=mation ab\t imm95t t]rori/ ?reats1 significant tr5ds1 & aw>5ess ( incid5ts t may affect critical infra/ructure4 #f4 ,protection ( privacy & civil lib]ties 7a7 ,9 ,g5]al ,! ,secret>y ( ,homel& ,security %all support great] t]rorism cyb] security in=mation %>+ by civilian ,f$]al ag5cies ) ! private sector t protects con/itutional privacy & civil lib]ties rights4 ,! heads ( ,f$]al dep>tm5ts & ag5cies %all ensure t all exi/+ privacy pr9ciples1 policies1 & proc$ures are implem5t$ consi/5t ) applicable law & policy & %all include s5ior ag5cy (ficials = privacy 9 _! ef=ts to gov]n & ov]see t]rorism program in=mation %>+ prop]ly4 7b7 ,ensur+ indep5d5ce ( privacy (fic] 7#a7 ,9 g5]al ,section #bbb ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #adb7 is am5d$-- 7,a7 9 subsection 7a71 by /rik+ s mu* z prec$es p>agraph 7#a7 & ins]t+ ! foll[+3 7a7 ,9 g5]al ,!re %all be 9 ! ,dep>tm5t a ,privacy ,(fic] :o %all be appo9t$ by ! ,presid5t1 by & ) ! advice & cons5t ( ! ,s5ate4 ,! ,privacy ,(fic] %all report directly to ! ,secret>y1 & %all h prim>y responsibility 9 ! ,dep>tm5t = privacy policy1 includ+-- 2 7,b7 by /rik+ s5ior (ficial appo9t$ "u subsection 7a7 ea* place x appe>s & ins]t+ ,privacy ,(fic]2 7,c7 9 subsection 7b77#a77;,a71 by /rik+ s5ior (ficial & ins]t+ ,privacy ,(fic]2 7,d7 9 subsection 7b77#a77;,b71 by /rik+ s5ior (ficial's & ins]t+ ,privacy ,(fic]'s2 7,e7 9 subsection 7b77#a77;,c71 by /rik+ s5ior (ficial & ins]t+ ,privacy ,(fic]2 7,f7 9 subsection 7b77#a77;,d71 by /rik+ s5ior (ficial & ins]t+ ,privacy ,(fic]2 7,g7 9 subsection 7c77#b77;,b71 by /rik+ s5ior (ficial ea* place x appe>s & ins]t+ ,privacy ,(fic]2 7,h7 9 ! head+ = subsection 7c77#b77;,b77iii71 by /rik+ by s5ior (ficial2 7,i7 9 subsection 7d71 by /rik+ ! s5ior (ficial appo9t$ "u subsection 7a7 or transf]s t s5ior (ficial to ano!r position or location )9 ! ,dep>tm5t & ins]t+ individual appo9t$ z ,privacy ,(fic]2 7,j7 9 ! head+ = subsection 7e71 by /rik+ 8by ,s5ior ,(ficial02 & 7,k7 9 subsection 7e7-- 7i7 by /rik+ s5ior (ficial & ins]t+ ,privacy ,(fic]2 & 7ii7 by /rik+ s5ior (ficial's ea* place x appe>s & ins]t+ ,privacy ,(fic]4 7#b7 ,cont9u$ s]vice ,! s5ior (ficial s]v+ z ! ,privacy ,(fic] ( ! ,dep>tm5t ( ,homel& ,security imm$iately be=e ! enactm5t ( ?is ,act may cont9ue to act z ! ,privacy ,(fic] until a successor is appo9t$ 9 accordance ) ! am5dm5ts made by ?is subsection4 #g4 ,innovation & rese>* & developm5t ,! ,secret>y ( ,homel& ,security may consult ) o!r ,f$]al dep>tm5ts & ag5cies to produce & submit to congressional ov]sight committees a report on h[ be/ to align f$]ally fund$ rese>* & developm5t activities t seek to /r5g!n ! security & resili5ce ( ! ,nation's critical infra/ructure1 includ+-- 7#a7 promot+ rese>* & developm5t to enable ! secure & resili5t design & con/ruction ( critical infra/ructure & m secure accompany+ cyb] te*nology2 7#b7 enhanc+ model+ capabilities to det]m9e pot5tial impacts on critical infra/ructure ( an incid5t or ?reat sc5>io1 & cascad+ effects on o!r sectors2 7#c7 facilitat+ initiatives to inc5tivize cyb] security inve/m5ts & ! adoption ( critical infra/ructure design features t /r5g!n all-haz>ds security & resili5ce2 & 7#d7 prioritiz+ ef=ts to support ! /rategic guidance issu$ by ! ,secret>y ( ,homel& ,security4 #h4 ,implem5tation by ,dep>tm5t ( ,homel& ,security 7a7 ,critical infra/ructure t]rorism prev5tion security & comput] network resili5ce functional relation%ips 7#a7 ,9 g5]al ,)9 #abj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,homel& ,security %all conduct rese>* & develop a description ( ! functional relation%ips )9 ! ,dep>tm5t ( ,homel& ,security & across ! ,f$]al ,gov]nm5t relat$ to critical infra/ructure security & resili5ce4 ,! description %all-- 7,a7 include ! roles & functions ( ! #b national critical infra/ructure c5t]s & a discussion ( ! analysis & integration function2 7,b7 s]ve z a roadmap = critical infra/ructure own]s & op]ators & ,s,l,t,ts to navigate ! ,f$]al ,gov]nm5t's functions & prim>y po9ts ( contact assign$ to ^? functions = critical infra/ructure security & resili5ce aga9/ bo? physical & cyb] ?reats2 & 7,c7 include id5tification ( e contact )9 ! ,f$]al ,gov]nm5t = critical infra/ructure protection security & resili5ce1 by company & indu/ry4 7#b7 ,coord9ation ,! ,secret>y %all prep>e a report on ef=ts to coord9ate ?is ef=t ) ! ,s,s,as & o!r relevant ,f$]al dep>tm5ts & ag5cies4 7#c7 ,provision to presid5t ,! ,secret>y %all provide ! description1 support$ by ag5cy-conduct$ rese>*1 to ! ,presid5t ?r\gh ! ,assi/ant to ! ,presid5t = ,homel& ,security & ,c\nt]t]rorism1 & to ! relevant congressional homel& security ov]sight committees4 7b7 ,evaluation ( ! exi/+ public-,private p>tn]%ip model 7#a7 ,9 g5]al ,)9 #aej days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,homel& ,security1 9 coord9ation ) ! ,s,s,as1 o!r relevant ,f$]al dep>tm5ts & ag5cies1 ,s,l,t,ts1 & critical infra/ructure own]s & op]ators1 %all conduct an analysis ( ! exi/+ public-private p>tn]%ip model1 evaluate its effectiv5ess1 & recomm5d options = improv+ ! effectiv5ess ( ! p>tn]%ip 9 bo? ! physical & cyb] space4 7#b7 ,cont5ts ,! rese>* & recomm5dations %all-- 7,a7 consid] options to /reaml9e or automate 7or bo?7 processes = collaboration & ex*ange ( t]rorism-relat$ in=mation & to m9imize duplication ( ef=t2 7,b7 consid] h[ ! model = t]rorism in=mation ex*ange c be flexible & adaptable to meet ! unique ne$s ( individual critical infra/ructure sectors :ile provid+ a focus$1 discipl9$1 & effective approa* = ! ,f$]al ,gov]nm5t to coord9ate ) ! critical infra/ructure own]s & op]ators & ) ,s,l,t,ts gov]nm5ts2 & 7,c7 result 9 recomm5dations to enhance p>tn]%ips to be approv$ = implem5tation by ! ,presid5t4 7c7 ,id5tification ( basel9e data & sy/ems requirem5ts = ! f$]al gov]nm5t ,to enable effici5t in=mation ex*ange 7#a7 ,9 g5]al ,)9 #ah mon?s aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,homel& ,security1 9 coord9ation ) ! ,s,s,as & o!r ,f$]al dep>tm5ts & ag5cies1 %all conv5e a team ( rese>*]s to id5tify basel9e data & sy/ems requirem5ts-- 7,a7 to enable ! effici5t ex*ange ( t]rorism in=mation & intellig5ce relevant to /r5g!n+ ! security & resili5ce ( critical infra/ructure2 & 7,b7 = %>+ ( data & int]op]ability ( sy/ems to enable ! timely ex*ange ( t]rorism or t]rori/ ?reat data & in=mation to secure critical infra/ructure & make x m resili5t4 7#b7 ,exp]ts includ$ ,! exp]ts %all include repres5tatives f-- 7,a7 ^? entities t r\t9ely possess in=mation important to critical infra/ructure security & resili5ce2 7,b7 ^? entities t det]m9e & manage in=mation te*nology sy/ems us$ to ex*ange in=mation2 & 7,c7 ^? entities responsible = ! security ( in=mation be+ ex*ang$4 7#c7 ,analysis ,analysis by su* team ( exp]ts %all include-- 7,a7 int]op]ability ) critical infra/ructure p>tn]s2 7,b7 id5tification ( key data & ! in=mation requirem5ts ( key ,f$]al1 ,,sltt1 & private sector entities2 7,c7 availability1 accessibility1 & =mats ( data2 7,d7 ! ability to ex*ange v>i\s classifications ( in=mation2 7,e7 ! security ( ^? sy/ems to be us$2 & 7,f7 appropriate protections = individual privacy & civil lib]ties4 7#d7 ,provision to presid5t ,! ,secret>y %all provide su* analysis to ! ,presid5t ?r\gh ! ,assi/ant to ! ,presid5t = ,homel& ,security & ,c\nt]t]rorism1 & to congressional homel& security ov]sight committees4 7d7 ,develop a rese>* program ,to in=m ! ag5cy ( a situational aw>5ess capability = critical infra/ructure ,)9 #b ye>s aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,homel& ,security %all demon/rate a ne> real-"t situational aw>5ess1 rese>*-bas$ pilot project = critical infra/ructure t-- 7#a7 includes ?reat /reams & all-haz>ds in=mation z well z vuln]abilities2 7#b7 provides ! /atus ( critical infra/ructure & pot5tial cascad+ effects2 7#c7 supports decisionmak+2 7#d7 dissem9ates critical in=mation t may be ne$$ to save or su/a9 lives1 mitigate damage1 or r$uce fur!r degradation ( a critical infra/ructure capability ?r\gh\t an incid5t2 & 7#e7 is available = & cov]s physical & cyb] elem5ts ( critical infra/ructure1 & enables an integration ( in=mation z necessitat$ by an incid5t4 7e7 ,update to national infra/ructure protection plan 7#a7 ,9 g5]al ,)9 #ah mon?s aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,homel& ,security %all provide to ! ,presid5t1 ?r\gh ! ,assi/ant to ! ,presid5t = ,homel& ,security & ,c\nt]t]rorism & ! congressional homel& security ov]sight committees1 a rese>* report t outl9es ! ,national ,infra/ructure ,protection ,plan to address ! implem5tation ( ?is ,act1 ! requirem5ts ( title ,,ii ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #aba et seq471 & alignm5t ) ! ,national ,prep>$ness ,goal & ,sy/em requir$ by ,presid5tial ,policy ,directive #h4 7#b7 ,cont5ts ,! plan %all include-- 7,a7 id5tification ( a risk managem5t framework to be us$ to /r5g!n ! security & resili5ce ( critical infra/ructure aga9/ t]rori/ ?reats2 7,b7 ! me?ods to be us$ to prioritize critical infra/ructure 9 ! ev5t ( a t]rorism ev5t t impacts multiple infra/ructure sy/ems2 7,c7 ! protocols to be us$ to syn*ronize communication & actions )9 ! ,f$]al ,gov]nm5t to effectively respond to critical infra/ructure t]rori/ ?reats or ev5ts2 & 7,d7 a metrics & analysis process to be us$ to measure ! ,nation's ability to manage & r$uce t]rorism risks to critical infra/ructure4 7#c7 ,relation%ip to o!r provisions ,! plan %all reflect ! t]rorism ?reat id5tification1 prev5tion1 m$iation1 & recov]y relation%ips )9 ! ,dep>tm5t ( ,homel& ,security & across ! ,f$]al ,gov]nm5t id5tifi$ "u ?is ,act & ! updates to ! public-private p>tn]%ip model "u ?is ,act4 7#d7 ,en]gy & communication sy/ems ,! plan %all consid] sector dep5d5cies on en]gy & communications sy/ems dur+ a t]rorism ev5t1 & id5tify pre-ev5t & mitigation measures or alt]nate capabilities dur+ disruptions to ^? sy/ems4 7#e7 ,coord9ation ,! ,secret>y %all coord9ate activities "u ?is subsection ) ! ,s,s,as1 o!r relevant ,f$]al dep>tm5ts & ag5cies1 ,s,l,t,ts1 & critical infra/ructure own]s & op]ators4 7#f7 ,response plans ,! plan %all include an analysis ( ! feasibility ( develop+ t]rorism response plans1 bas$ on rese>* conduct$ on ! resili5ce ( critical infra/ructure :5 fac$ ) t]rorism ?reats1 t focus on action plans to a*ieve a level ( function & ev5tual recov]y ( full op]ability ( critical infra/ructure po/-cyb] attack4 7f7 ,national critical infra/ructure security & resili5ce ,r,d plan ,)9 #b ye>s aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,homel& ,security1 9 coord9ation ) ! ,(fice ( ,sci5ce & ,te*nology ,policy1 ! ,s,s,as1 ! ,dep>tm5t ( ,comm]ce1 & o!r ,f$]al dep>tm5ts & ag5cies1 %all provide to ! ,presid5t1 ?r\gh ! ,assi/ant to ! ,presid5t = ,homel& ,security & ,c\nt]t]rorism1 a ,national ,critical ,infra/ructure ,security & ,resili5ce ,rese>* & ,developm5t ,plan t takes into acc\nt ! evolv+ ?reat l&scape1 annual metrics1 & o!r relevant in=mation to id5tify priorities & guide rese>* & developm5t requirem5ts & inve/m5ts4 ,! ,secret>y %all reissue ! plan e #d ye>s aft] its initial issuance1 & make int]im updates z ne$$4 7g7 ,consi/5cy 9 ,,ppd-#a ,policy coord9ation1 dispute resolution1 & p]iodic 9-progress reviews = ! implem5tation ( ?is ,act %all be c>ri$ out consi/5t ) ,presid5tial ,policy ,directive #a1 includ+ ! use ( int]ag5cy policy committees coord9at$ by ! national security /aff4 7h7 ,relation%ip to o!r au?orities ,no?+ 9 ?is ,act alt]s1 sup]s$es1 or imp$es ! au?orities ( ,f$]al dep>tm5ts & ag5cies1 includ+ indep5d5t regulatory ag5cies1 to c>ry out _! functions & duties consi/5t ) applicable legal au?orities & o!r ,presid5tial guidance & directives1 includ+ ! designation ( critical infra/ructure "u su* au?orities4 #i4 ,designation ( critical infra/ructure sectors & sector-specific ag5cies 7a7 ,designation 7#a7 ,9 g5]al ,= purposes ( ?is ,act1 ! ,secret>y ( ,homel& ,security %all det]m9e :i* critical infra/ructure sectors & sector specific ag5cies = su* sectors %\ld be engag$ 9 ef=ts to detect1 det]1 mitigate1 & lead recov]y ef=ts relat$ to t]rori/ incid5ts4 7#b7 ,cultivation ( relation%ips ,! ,secret>y %all evaluate ! appropriate relation%ips among ,f$]al ag5cies1 ,s,s,as1 ,s,l,t,ts1 & critical infra/ructure own]s & op]ators to e/abli% ! mo/ effective def5se aga9/ t]rori/ attacks4 7b7 ,function ,! ,secret>y %all provide in/itutional k & specializ$ exp]tise to lead1 facilitate1 or support security & resili5ce programs & associat$ t]rorism prev5tion activities ) respect to sectors designat$ "u subsection 7a77#a74 7c7 ,*anges ,! ,secret>y ( ,homel& ,security %all p]iodically evaluate ! ne$ = & make *anges to plans & evaluations made "u ?is section4 ,! ,secret>y %all consult ) ! ,assi/ant to ! ,presid5t = ,homel& ,security & ,c\nt]t]rorism & congressional homel& security ov]sight committees be=e *ang+ ! designation ( a critical infra/ructure sector or ,,ssa = a sector4 7d7 ,reports ,! ,secret>y ( ,homel& ,security %all seek p]iodic rese>* reports on critical infra/ructure protection f ,f$]al ag5cies z consid]$ necess>y by ! ,secret>y4 #aj4 ,evaluation ( a*ievem5t ( objectives 7a7 ,9 g5]al ,! ,national ,rese>* ,c\ncil1 beg9n+ #ab mon?s aft] ! date ( enactm5t ( ?is ,act1 %all evaluate h[ well ! ,dep>tm5t ( ,homel& ,security is meet+ ! objectives ( ?is ,act4 7b7 ,includ$ subjects ,! review %all include evaluation (-- 7#a7 cyb] security ?reats to critical infra/ructure2 7#b7 ! success ( ,dep>tm5t programs 9 implem5t+ section #h2 & 7#c7 ! long-t]m vuln]abilities fac$ by ! ,dep>tm5t1 o!r ,f$]al ag5cies1 & critical infra/ructure manag]s & own]s4 7c7 ,completion ,! ,c\ncil %all complete ! review by n lat] ?an ! end ( ! #ah-mon? p]iod beg9n+ on ! date ( enactm5t ( ?is ,act1 except t ! ,secret>y ( ,homel& ,security may ext5d su* p]iod4 7d7 ,report ,^u ! completion ( ! review1 ! ,c\ncil %all submit to ! ,secret>y a report on ! f9d+s ( ! review1 includ+ recomm5dations bas$ on su* f9d+s4 #aa4 ,def9itions ,= purposes ( ?is ,act3 7#a7 ,all haz>ds ,! t]m all haz>ds means a ?reat or an incid5t1 natural or manmade1 t w>rants action to protect life1 prop]ty1 ! environm5t1 & public heal? or safety1 & to m9imize disruptions ( gov]nm5t1 social1 or economic activities4 ,! t]m includes natural disa/]s1 cyb] incid5ts1 indu/rial accid5ts1 p&emics1 acts ( t]rorism1 sabotage1 & de/ructive crim9al activity t>get+ critical infra/ructure4 7#b7 ,collaboration ,! t]m collaboration means ! process ( work+ toge!r to a*ieve %>$ goals4 7#c7 ,critical infra/ructure ,! t]m critical infra/ructure means sy/ems & assets1 :e!r physical or virtual1 s vital to ! ,unit$ ,/ates t ! incapacity or de/ruction ( su* sy/ems & assets w\ld h a debilitat+ impact on security1 national economic security1 national public heal? or safety1 or any comb9ation ( ^? matt]s4 7#d7 ,f$]al dep>tm5ts & ag5cies ,! t]m ,f$]al dep>tm5ts & ag5cies means any au?ority ( ! ,unit$ ,/ates t is an ag5cy "u section #cejb7a7 ( title #dd1 ,unit$ ,/ates ,code1 o!r ?an ^? consid]$ to be indep5d5t regulatory ag5cies z def9$ 9 section #cejb7e7 ( su* title4 7#e7 ,national ess5tial functions ,! t]m national ess5tial functions means t subset ( ,gov]nm5t functions t are necess>y to lead & su/a9 ! ,nation dur+ a cata/rophic em]g5cy4 7#f7 ,prim>y mission ess5tial functions ,! t]m prim>y mission ess5tial functions means ^? ,gov]nm5t functions t mu/ be p]=m$ 9 ord] to support or implem5t ! p]=mance ( ! national ess5tial functions be=e1 dur+1 & 9 ! aft]ma? ( an em]g5cy4 7#g7 ,resili5ce ,! t]m resili5ce means ! ability to prep>e = & adapt to *ang+ conditions & )/& & recov] rapidly f disruptions4 ,! t]m includes ! ability to )/& & recov] f delib]ate attacks1 accid5ts1 or naturally occurr+ ?reats or incid5ts4 7#h7 ,sector-specific ag5cy2 ,,ssa ,! t]ms sector-specific ag5cy & ,,ssa mean ! ,f$]al dep>tm5t or ag5cy designat$ "u ?is ,act = a critical infra/ructure sector4 7#i7 ,secure2 security ,! t]ms secure & security mean r$uc+ ! risk to critical infra/ructure by physical means or def5se cyb] measures to intrusions1 attacks1 or ! effects ( natural or manmade disa/]s4 7#aj7 ,,sltt ,! t]m ,,sltt means ,/ate1 local1 tribal1 & t]ritorial entities4