,,ib ,union ,calendar ,no4 #ccf #aaeth ,,congress #ast ,session ,h4 ,r4 #ccei ,report ,no4 #aae-ded1 ,part ,i ,,in ,,the ,,house ,,of ,,representatives ,july #bd1 #bjag ,mr4 ,mc,caul 7for himself1 ,mr4 ,thompson of ,mississippi1 ,mr4 ,ratcliffe1 ,mr4 ,richmond1 ,mr4 ,katko1 ,mr4 ,hurd1 ,mr4 ,donovan1 ,mr4 ,gallagher1 ,mr4 ,higgins of ,louisiana1 ,mr4 ,garrett1 and ,mr4 ,fitzpatrick7 introduced the following bill2 which was referred to the ,committee on ,homeland ,security1 and in addition to the ,committees on ,energy and ,commerce1 ,oversight and ,government ,reform1 and ,transportation and ,infrastructure1 for a period to be subsequently determined by the ,speaker1 in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned ,december #aa1 #bjag;,additional sponsor3 ,mr4 ,king of ,new ,york ,december #aa1 #bjag ,reported from the ,committee on ,homeland ,security ,december #aa1 #bjag,the ,committees on ,energy and ,commerce1 ,oversight and ,government ,reform1 and ,transportation and ,infrastructure discharged2 committed to the ,committee of the ,whole ,house on the ,state of the ,union and ordered to be printed ,a ,,bill ,to amend the ,homeland ,security ,act of #bjjb to authorize the ,cybersecurity and ,infrastructure ,security ,agency of the ,department of ,homeland ,security1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,cybersecurity and ,infrastructure ,security ,agency ,act of #bjag4 #b4 ,cybersecurity and ,infrastructure ,security ,agency 7a7 ,in general ,the ,homeland ,security ,act of #bjjb is amended by adding at the end the following new title3 ,,xxii ,cybersecurity and ,infrastructure ,security ,agency ,a ,cybersecurity and ,infrastructure ,security #bbja4 ,definitions ,in this subtitle3 7#a7 ,critical infrastructure information ,the term critical infrastructure information has the meaning given such term in section #bbae4 7#b7 ,critical infrastructure risk ,the term critical infrastructure risk means threats to and vulnerabilities of critical infrastructure and any related consequences1 including consequences caused by or resulting from an act of terrorism4 7#c7 ,cybersecurity risk ,the term cybersecurity risk has the meaning given such term in section #bbji4 7#d7 ,cybersecurity threat ,the term cybersecurity threat has the meaning given such term in paragraph 7#e7 of section #ajb of the ,cybersecurity ,act of #bjae 7contained in division ,n of the ,consolidated ,appropriations ,act1 #bjaf 7,public ,law #aad-aac2 #f ,u4,s4,c4 #aeja774 7#e7 ,federal entity ,the term ,federal entity has the meaning given such term in paragraph 7#h7 of section #ajb of the ,cybersecurity ,act of #bjae 7contained in division ,n of the ,consolidated ,appropriations ,act1 #bjaf 7,public ,law #aad-aac2 #f ,u4,s4,c4 #aeja774 7#f7 ,non-,federal entity ,the term non-,federal entity has the meaning given such term in paragraph 7#ad7 of section #ajb of the ,cybersecurity ,act of #bjae 7contained in division ,n of the ,consolidated ,appropriations ,act1 #bjaf 7,public ,law #aad-aac2 #f ,u4,s4,c4 #aeja774 7#g7 ,sharing ,the term sharing has the meaning given such term in section #bbji4 7#h7 ,national cybersecurity asset response activities ,the term national cybersecurity asset response activities means-- 7,a7 furnishing technical assistance to entities affected by cybersecurity risks to protect assets1 mitigate vulnerabilities1 and reduce impacts of cyber incidents2 7,b7 identifying other entities that may be at risk of an incident and assessing risk to the same or similar vulnerabilities2 7,c7 assessing potential cybersecurity risks to a sector or region1 including potential cascading effects1 and developing courses of action to mitigate such risks2 7,d7 facilitating information sharing and operational coordination with threat response2 and 7,e7 providing guidance on how best to utilize ,federal resources and capabilities in a timely1 effective manner to speed recovery from cybersecurity risks4 #bbjb4 ,cybersecurity and ,infrastructure ,security ,agency 7a7 ,redesignation 7#a7 ,in general ,the ,national ,protection and ,programs ,directorate of the ,department shall1 on and after the date of the enactment of this subtitle1 be known as the ,cybersecurity and ,infrastructure ,security ,agency 7in this subtitle referred to as the ,agency74 7#b7 ,references ,any reference to the ,national ,protection and ,programs ,directorate of the ,department in any law1 regulation1 map1 document1 record1 or other paper of the ,united ,states shall be deemed to be a reference to the ,cybersecurity and ,infrastructure ,security ,agency of the ,department4 7b7 ,director 7#a7 ,in general ,the ,agency shall be headed by a ,director of ,cybersecurity and ,infrastructure ,security 7in this subtitle referred to as the ,director71 who shall report to the ,secretary4 7#b7 ,reference ,any reference to an ,under ,secretary responsible for overseeing critical infrastructure protection1 cybersecurity1 and any other related program of the ,department as described in section #ajc7;a77#a77;,h7 as in effect on the day before the date of the enactment of this subtitle in any law1 regulation1 map1 document1 record1 or other paper of the ,united ,states shall be deemed to be a reference to the ,director of ,cybersecurity and ,infrastructure ,security of the ,department4 7c7 ,responsibilities ,the ,director shall-- 7#a7 lead cybersecurity and critical infrastructure security programs1 operations1 and associated policy for the ,agency1 including national cybersecurity asset response activities2 7#b7 coordinate with ,federal entities and non-,federal entities1 including international entities1 to carry out the cybersecurity and critical infrastructure activities of the ,agency1 as appropriate2 7#c7 carry out the ,secretary's responsibilities to secure ,federal information and information systems consistent with law1 including subchapter ,,ii of chapter #ce of title #dd1 ,united ,states ,code1 and the ,cybersecurity ,act of #bjae 7contained in division ,n of the ,consolidated ,appropriations ,act1 #bjaf 7,public ,law #aad-aac772 7#d7 coordinate a national effort to secure and protect against critical infrastructure risks2 7#e7 upon request provide analyses1 expertise1 and other technical assistance to critical infrastructure owners and operators and1 where appropriate1 provide such analyses1 expertise1 and other technical assistance in coordination with critical infrastructure sector specific agencies and other ,federal departments and agencies2 7#f7 to the extent required by law1 exercise duties in coordination with sector-specific agencies2 7#g7 maintain and utilize mechanisms for the regular and ongoing consultation and collaboration among the ,agency's ,divisions to further operational coordination1 integrated situational awareness1 and improved integration across the ,agency in accordance with this ,act2 7#h7 develop1 coordinate1 and implement-- 7,a7 comprehensive strategic plans for the activities of the ,agency2 and 7,b7 risk assessments2 7#i7 carry out emergency communications responsibilities1 in accordance with title ,,xviii2 7#aj7 carry out cybersecurity1 infrastructure security1 and emergency communications stakeholder outreach and engagement2 and 7#aa7 carry out such other duties and powers prescribed by law or delegated by the ,secretary4 7d7 ,deputy director ,there shall be in the ,agency a ,deputy ,director of ,cybersecurity and ,infrastructure ,security who shall-- 7#a7 assist the ,director in the management of the ,agency2 and 7#b7 report to the ,director4 7e7 ,cybersecurity and infrastructure security authorities of the ,secretary 7#a7 ,in general ,the responsibilities of the ,secretary relating to cybersecurity and infrastructure security shall include the following3 7,a7 ,to access1 receive1 and analyze law enforcement information1 intelligence information1 and other information from ,federal ,government agencies1 ,state1 local1 tribal1 and territorial government agencies 7including law enforcement agencies71 and private sector entities1 and to integrate such information1 in support of the mission responsibilities of the ,department1 in order to-- 7i7 identify and assess the nature and scope of terrorist threats to the homeland2 7ii7 detect and identify threats of terrorism against the ,united ,states2 and 7iii7 understand such threats in light of actual and potential vulnerabilities of the homeland4 7,b7 ,to carry out comprehensive assessments of the vulnerabilities of the key resources and critical infrastructure of the ,united ,states1 including the performance of risk assessments to determine the risks posed by particular types of terrorist attacks within the ,united ,states 7including an assessment of the probability of success of such attacks and the feasibility and potential efficacy of various countermeasures to such attacks74 7,c7 ,to integrate relevant information1 analysis1 and vulnerability assessments 7regardless of whether such information1 analysis1 or assessments are provided or produced by the ,department7 in order to identify priorities for protective and support measures by the ,department1 other ,federal ,government agencies1 ,state1 local1 tribal1 and territorial government agencies and authorities1 the private sector1 and other entities regarding terrorist and other threats to homeland security4 7,d7 ,to ensure1 pursuant to section #bjb1 the timely and efficient access by the ,department to all information necessary to discharge the responsibilities under this title1 including obtaining such information from other ,federal ,government agencies4 7,e7 ,to develop a comprehensive national plan for securing the key resources and critical infrastructure of the ,united ,states1 including power production1 generation1 and distribution systems1 information technology and telecommunications systems 7including satellites71 electronic financial and property record storage and transmission systems1 emergency preparedness communications systems1 and the physical and technological assets that support such systems4 7,f7 ,to recommend measures necessary to protect the key resources and critical infrastructure of the ,united ,states in coordination with other ,federal ,government agencies and in cooperation with ,state1 local1 tribal1 and territorial government agencies and authorities1 the private sector1 and other entities4 7,g7 ,to review1 analyze1 and make recommendations for improvements to the policies and procedures governing the sharing of law enforcement information1 and other information relating to homeland security within the ,federal ,government and between ,federal ,government agencies and ,state1 local1 tribal1 and territorial government agencies and authorities4 7,h7 ,to disseminate1 as appropriate1 information analyzed by the ,department within the ,department1 to other ,federal ,government agencies with responsibilities relating to homeland security1 and to ,state1 local1 tribal1 and territorial government agencies and private sector entities with such responsibilities in order to assist in the deterrence1 prevention1 preemption of1 or response to1 terrorist attacks against the ,united ,states4 7,i7 ,to consult with ,state1 local1 tribal1 and territorial government agencies and private sector entities to ensure appropriate exchanges of information1 including law enforcement-related information1 relating to threats of terrorism against the ,united ,states4 7,j7 ,to ensure that any material received pursuant to this ,act is protected from unauthorized disclosure and handled and used only for the performance of official duties4 7,k7 ,to request additional information from other ,federal ,government agencies1 ,state1 local1 tribal1 and territorial government agencies1 and the private sector relating to threats of terrorism in the ,united ,states1 or relating to other areas of responsibility assigned by the ,secretary1 including the entry into cooperative agreements through the ,secretary to obtain such information4 7,l7 ,to establish and utilize1 in conjunction with the chief information officer of the ,department1 a secure communications and information technology infrastructure1 including data-mining and other advanced analytical tools1 in order to access1 receive1 and analyze data and information in furtherance of the responsibilities under this section1 and to disseminate information acquired and analyzed by the ,department1 as appropriate4 7,m7 ,to ensure1 in conjunction with the chief information officer of the ,department1 that any information databases and analytical tools developed or utilized by the ,department-- 7i7 are compatible with one another and with relevant information databases of other ,federal ,government agencies2 and 7ii7 treat information in such databases in a manner that complies with applicable ,federal law on privacy4 7,n7 ,to coordinate training and other support to the elements and personnel of the ,department1 other ,federal ,government agencies1 and ,state1 local1 tribal1 and territorial government agencies that provide information to the ,department1 or are consumers of information provided by the ,department1 in order to facilitate the identification and sharing of information revealed in their ordinary duties and the optimal utilization of information received from the ,department4 7,o7 ,to coordinate with ,federal1 ,state1 local1 tribal1 and territorial law enforcement agencies1 and the private sector1 as appropriate4 7,p7 ,to exercise the authorities and oversight of the functions1 personnel1 assets1 and liabilities of those components transferred to the ,department pursuant to section #bja7;g74 7,q7 ,to carry out the functions of the national cybersecurity and communications integration center under section #bbji4 7,r7 ,to carry out requirements of the ,chemical ,facilities ,anti-,terrorism ,standards ,program established under title ,,xxi and the secure handling of ammonium nitrate established under subtitle ,j of title ,,viii4 7#b7 ,modification ,the ,secretary may modify the functions specified in sections #bbjc7;b7 and #bbjd7;b7 upon certifying to the ,committee on ,homeland ,security of the ,house of ,representatives and the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate #fj days prior to any such modification that such modification is necessary for carrying out the activities of the ,agency4 7#c7 ,staff 7,a7 ,in general ,the ,secretary shall provide the ,agency with a staff of analysts having appropriate expertise and experience to assist the ,agency in discharging its responsibilities under this section4 7,b7 ,private sector analysts ,analysts under this subsection may include analysts from the private sector4 7,c7 ,security clearances ,analysts under this subsection shall possess security clearances appropriate for their work under this section4 7#d7 ,detail of personnel 7,a7 ,in general ,in order to assist the ,agency in discharging its responsibilities under this section1 personnel of the ,federal agencies referred to in subparagraph 7,b7 may be detailed to the ,agency for the performance of analytic functions and related duties4 7,b7 ,agencies specified ,the ,federal agencies referred to in subparagraph 7,a7 are the following3 7i7 ,the ,department of ,state4 7ii7 ,the ,central ,intelligence ,agency4 7iii7 ,the ,federal ,bureau of ,investigation4 7iv7 ,the ,national ,security ,agency4 7v7 ,the ,national ,geospatial-,intelligence ,agency4 7vi7 ,the ,defense ,intelligence ,agency4 7vii7 ,any other agency of the ,federal ,government that the ,president considers appropriate4 7,c7 ,interagency agreements ,the ,secretary and the head of an agency specified in subparagraph 7,b7 may enter into agreements for the purpose of detailing personnel under this paragraph4 7,d7 ,basis ,the detail of personnel under this paragraph may be on a reimbursable or non-reimbursable basis4 7f7 ,composition ,the ,agency shall be composed of the following divisions3 7#a7 ,the ,cybersecurity ,division1 headed by an ,assistant ,director4 7#b7 ,the ,infrastructure ,security ,division1 headed by an ,assistant ,director4 7#c7 ,the ,emergency ,communications ,division under title ,,xviii1 headed by an ,assistant ,director4 7g7 ,co-,location ,to the maximum extent practicable1 the ,director shall examine the establishment of central locations in geographical regions with a significant ,agency presence4 ,when establishing such locations1 the ,director shall coordinate with component heads and the ,under ,secretary for ,management to co-locate or partner on any new real property leases1 renewing any existing leases1 or agreeing to extend or newly occupy any ,federal space or new construction4 7h7 ,privacy 7#a7 ,in general ,there shall be a ,privacy ,officer of the ,agency with primary responsibility for privacy policy and compliance for the ,agency4 7#b7 ,responsibilities ,the responsibilities of the ,privacy ,officer of the ,agency shall include-- 7,a7 assuring that the use of technologies by the ,agency sustain1 and do not erode1 privacy protections relating to the use1 collection1 and disclosure of personal information2 7,b7 assuring that personal information contained in ,privacy ,act systems of records of the ,agency is handled in full compliance with fair information practices as specified in the ,privacy ,act of #aigd2 7,c7 evaluating legislative and regulatory proposals involving collection1 use1 and disclosure of personal information by the ,agency2 and 7,d7 conducting a privacy impact assessment of proposed rules of the ,agency on the privacy of personal information1 including the type of personal information collected and the number of people affected4 7i7 ,savings ,nothing in this title may be construed as affecting in any manner the authority1 existing on the day before the date of the enactment of this title1 of any other component of the ,department or any other ,federal department or agency4 #bbjc4 ,cybersecurity ,division 7a7 ,establishment 7#a7 ,in general ,there is established in the ,agency a ,cybersecurity ,division4 7#b7 ,assistant ,director ,the ,cybersecurity ,division shall be headed by an ,assistant ,director for ,cybersecurity 7in this subtitle referred to as the ,assistant ,director71 who shall-- 7,a7 be at the level of ,assistant ,secretary within the ,department2 and 7,b7 report to the ,director4 7#c7 ,reference ,any reference to the ,assistant ,secretary for ,cybersecurity and ,communications in any law1 regulation1 map1 document1 record1 or other paper of the ,united ,states shall be deemed to be a reference to the ,assistant ,director for ,cybersecurity4 7b7 ,functions ,the ,assistant ,director shall-- 7#a7 direct the cybersecurity efforts of the ,agency2 7#b7 carry out activities1 at the direction of the ,director1 related to the security of information and information systems for ,federal entities consistent with law1 including subchapter ,,ii of chapter #ce of title #dd1 ,united ,states ,code1 and the ,cybersecurity ,act of #bjae 7contained in division ,n of the ,consolidated ,appropriations ,act1 #bjaf 7,public ,law #aad-aac772 7#c7 fully participate in the mechanisms required under subsection 7c77#g7 of section #bbjb2 and 7#d7 carry out such other duties and powers as prescribed by the ,director4 #bbjd4 ,infrastructure ,security ,division 7a7 ,establishment 7#a7 ,in general ,there is established in the ,agency an ,infrastructure ,security ,division4 7#b7 ,assistant ,director ,the ,infrastructure ,security ,division shall be headed by an ,assistant ,director of ,infrastructure ,security 7in this section referred to as the ,assistant ,director71 who shall-- 7,a7 be at the level of ,assistant ,secretary within the ,department2 and 7,b7 report to the ,director4 7#c7 ,reference ,any reference to the ,assistant ,secretary for ,infrastructure ,protection in any law1 regulation1 map1 document1 record1 or other paper of the ,united ,states shall be deemed to be a reference to the ,assistant ,director for ,infrastructure ,security4 7b7 ,functions ,the ,assistant ,director shall-- 7#a7 direct the critical infrastructure security efforts of the ,agency2 7#b7 carry out efforts1 at the direction of the ,director1 to secure the ,united ,states high-risk chemicals and chemical facilities consistent with law1 including the ,chemical ,facilities ,anti-,terrorism ,standards ,program established under title ,,xxi and the secure handling of ammonium nitrate established under subtitle ,j of title ,,viii2 7#c7 fully participate in the mechanisms required under subsection 7c77#g7 of section #bbjb2 and 7#d7 carry out such other duties and powers as prescribed by the ,director4 4 7b7 ,treatment of certain positions 7#a7 ,under ,secretary ,the individual serving as the ,under ,secretary appointed pursuant to section #ajc7;a77#a77;,h7 of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #aac7;a77#a77 of the ,department of ,homeland ,security on the day before the date of the enactment of this ,act may continue to serve as the ,director of the ,cybersecurity and ,infrastructure ,security ,agency of the ,department on and after such date4 7#b7 ,director for ,emergency ,communications ,the individual serving as the ,director for ,emergency ,communications of the ,department of ,homeland ,security on the day before the date of the enactment of this ,act may continue to serve as the ,assistant ,director for ,emergency ,communications of the ,department on and after such date4 7#c7 ,assistant ,secretary for ,cybersecurity and ,communications ,the individual serving as the ,assistant ,secretary for ,cybersecurity and ,communications on the day before the date of the enactment of this ,act may continue to serve as the ,assistant ,director for ,cybersecurity on and after such date4 7#d7 ,assistant ,secretary for ,infrastructure ,security ,the individual serving as the ,assistant ,secretary for ,infrastructure ,protection on the day before the date of the enactment of this ,act may continue to serve as the ,assistant ,director for ,infrastructure ,security on and after such date4 7c7 ,reference ,any reference to-- 7#a7 the ,office of ,emergency ,communications in any law1 regulation1 map1 document1 record1 or other paper of the ,united ,states shall be deemed to be a reference to the ,emergency ,communications ,division2 and 7#b7 the ,director for ,emergency ,communications in any law1 regulation1 map1 document1 record1 or other paper of the ,united ,states shall be deemed to be a reference to the ,assistant ,director for ,emergency ,communications4 7d7 ,oversight ,the ,director of the ,cybersecurity and ,infrastructure ,security ,agency of the ,department of ,homeland ,security shall provide to ,congress1 in accordance with the deadlines specified in paragraphs 7#a7 and 7#b71 information on the following3 7#a7 ,not later than #ij days after the date of the enactment of this ,act1 information on the ,agency's mechanisms for regular and ongoing consultation and collaboration1 as required pursuant to section #bbjb7;c77#g7 of the ,homeland ,security ,act of #bjjb 7as added by this ,act74 7#b7 ,not later than one year after the date of the enactment of this ,act1 the activities of the ,agency's consultation and collaboration mechanisms and how such mechanisms have impacted operational coordination1 situational awareness1 and integration across the ,agency4 7e7 ,cyber workforce ,not later than #ij days after the date of the enactment of this subtitle1 the ,director of the ,cybersecurity and ,infrastructure ,security ,agency of the ,department of ,homeland ,security shall submit to ,congress a report detailing how the ,agency is meeting legislative requirements under the ,cybersecurity ,workforce ,assessment ,act 7,public ,law #aac-bdf7 and the ,homeland ,security ,cybersecurity ,workforce ,assessment ,act 7enacted as section #d of the ,border ,patrol ,agent ,pay ,reform ,act of #bjad2 ,public ,law #aac-bgg7 to address cyber workforce needs4 7f7 ,facility ,not later than #ahj days after the date of the enactment of this ,act1 the ,director of the ,cybersecurity and ,infrastructure ,security ,agency of the ,department of ,homeland ,security shall report to ,congress on the most efficient and effective methods of consolidating ,agency facilities1 personnel1 and programs to most effectively carry out the ,agency's mission4 7g7 ,conforming amendments to the ,homeland ,security ,act of #bjjb ,the ,homeland ,security ,act of #bjjb is amended-- 7#a7 in title ,i1 by amending subparagraph 7,h7 of section #ajc7;a77#a7 7#f ,u4,s4,c4 #aac7;a77#a77 to read as follows3 7,h7 ,a ,director of the ,cybersecurity and ,infrastructure ,security ,agency4 2 7#b7 in title ,,ii 7#f ,u4,s4,c4 #aba et seq47-- 7,a7 in the title heading1 by striking and infrastructure protection2 7,b7 in the subtitle ,a heading1 by striking and infrastructure protection2 7,c7 in section #bja 7#f ,u4,s4,c4 #aba7-- 7i7 in the section heading1 by striking and infrastructure protection2 7ii7 in subsection 7a7-- 7,i7 in the heading1 by striking and infrastructure protection2 and 7,,ii7 by striking and an ,office of ,infrastructure ,protection2 7iii7 in subsection 7b7-- 7,i7 in the heading1 by striking and ,assistant ,secretary for ,infrastructure ,protection2 and 7,,ii7 by striking paragraph 7#c72 7iv7 in subsection 7c7-- 7,i7 by striking and infrastructure protection2 and 7,,ii7 by striking or the ,assistant ,secretary for ,infrastructure ,protection1 as appropriate2 7v7 in subsection 7d7-- 7,i7 in the heading1 by striking and infrastructure protection2 7,,ii7 in the matter preceding paragraph 7#a71 by striking and infrastructure protection2 7,,iii7 by striking paragraphs 7#e7 and 7#f7 and redesignating paragraphs 7#g7 through 7#bf7 as paragraphs 7#e7 through 7#bd71 respectively2 7,,iv7 by striking paragraph 7#bc71 as so redesignated2 and 7,v7 by redesignating paragraph 7#bd71 as so redesignated1 as paragraph 7#bc72 7vi7 in subsection 7e77#a71 by striking and the ,office of ,infrastructure ,protection2 and 7vii7 in subsection 7f77#a71 by striking and the ,office of ,infrastructure ,protection2 7,d7 in section #bjd 7#f ,u4,s4,c4 #abd;a7-- 7i7 in subsection 7c77#a71 in the matter preceding subparagraph 7,a71 by striking ,assistant ,secretary for ,infrastructure ,protection and inserting ,director of the ,cybersecurity and ,infrastructure ,security ,agency2 and 7ii7 in subsection 7d77#a71 in the matter preceding subparagraph 7,a71 by striking ,assistant ,secretary for ,infrastructure ,protection and inserting ,director of the ,cybersecurity and ,infrastructure ,security ,agency2 7,e7 in subparagraph 7,b7 of section #baj;,a7c77#b7 7#f ,u4,s4,c4 #abd;h7c77#b771 by striking ,office of ,infrastructure ,protection and inserting ,cybersecurity and ,infrastructure ,security ,agency2 7,f7 by transferring section #baj;,e 7#f ,u4,s4,c4 #abd7 to appear after section #bbab 7as redesignated by subparagraph 7,g7 of this paragraph7 and redesignating such section #baj;,e as section #bbad2 7,g7 in subtitle ,b1 by redesignating sections #baa through #bae 7#f ,u4,s4,c4 #aja note through #acd7 as sections #bbba through #bbbe1 respectively1 and inserting such redesignated sections1 including the enumerator and heading of subtitle ,b 7containing such redesignated sections71 after section #bbac1 as redesignated by subparagraph 7,e7 of this paragraph2 and 7,h7 by redesignating sections #bbc through #bcj 7#f ,u4,s4,c4 #adc through #aea7 as sections #bbje through #bbac1 respectively1 and inserting such redesignated sections after section #bbjd1 as added by this ,act2 7#c7 in title ,,iii1 in paragraph 7#c7 of section #cjb 7#f ,u4,s4,c4 #ahb71 by striking ,assistant ,secretary for ,infrastructure ,protection and inserting ,director of the ,cybersecurity and ,infrastructure ,security ,agency2 7#d7 in title ,v-- 7,a7 in section #ead 7#f ,u4,s4,c4 #cba7;c771 by-- 7i7 striking subsection 7b72 and 7ii7 redesignating subsection 7c7 as subsection 7b72 7,b7 in section #ebc 7#f ,u4,s4,c4 #cba;,i7-- 7i7 in subsection 7a71 in the matter preceding paragraph 7#a71 by striking ,assistant ,secretary for ,infrastructure ,protection and inserting ,director of the ,cybersecurity and ,infrastructure ,security ,agency2 and 7ii7 in subsection 7c71 by striking ,assistant ,secretary for ,infrastructure ,protection and inserting ,director of the ,cybersecurity and ,infrastructure ,security ,agency2 and 7,c7 in section #ebd7;a77#b77;,b7 7#f ,u4,s4,c4 #cbam7a77#b77;,b771 in the matter preceding clause 7i7-- 7i7 by striking ,assistant ,secretary for ,infrastructure ,protection and inserting ,director of the ,cybersecurity and ,infrastructure ,security ,agency2 and 7ii7 by striking of the ,assistant ,secretary and inserting of the ,director2 7#e7 in title ,,viii1 in section #hii;,b7a7 7#f ,u4,s4,c4 #dhh;a7a771 by inserting at the end the following new sentence3 ,such regulations shall be carried out by the ,cybersecurity and ,infrastructure ,security ,agency42 7#f7 in title ,,xviii 7#f ,u4,s4,c4 #ega et seq47-- 7,a7 in section #ahja 7#f ,u4,s4,c4 #ega7-- 7i7 in the section heading1 by striking ,office of ,emergency ,communications and inserting ,emergency ,communications ,division2 7ii7 in subsection 7a7-- 7,i7 by striking ,office of ,emergency ,communications and inserting ,emergency ,communications ,division2 and 7,,ii7 by adding at the end the following new sentence3 ,the ,division shall be located in the ,cybersecurity and ,infrastructure ,security ,agency42 7iii7 in subsection 7b7-- 7,i7 in the first sentence1 by inserting ,assistant before ,director2 and 7,,ii7 in the second sentence1 by striking ,assistant ,secretary for ,cybersecurity and ,communications and inserting ,director of the ,cybersecurity and ,infrastructure ,security ,agency2 7iv7 in subsection 7c7-- 7,i7 in the matter preceding paragraph 7#a71 by inserting ,assistant before ,director2 7,,ii7 in paragraph 7#ad71 by striking and at the end2 7,,iii7 by redesignating paragraph 7#ae7 as paragraph 7#af72 and 7,,iv7 by inserting after paragraph 7#ad7 the following new paragraph3 7#ae7 fully participate in the mechanisms required under subsection 7c77#g7 of section #bbjb2 and 2 7v7 in subsection 7d71 by inserting ,assistant before ,director2 and 7vi7 in subsection 7e71 in the matter preceding paragraph 7#a71 by inserting ,assistant before ,director2 7,b7 in sections #ahjb through #ahje 7#f ,u4,s4,c4 #ege71 by striking ,director for ,emergency ,communications each place it appears and inserting ,assistant ,director for ,emergency ,communications2 7,c7 in section #ahji 7#f ,u4,s4,c4 #egi7-- 7i7 by striking ,director for ,emergency ,communications and inserting ,assistant ,director for ,emergency ,communications2 and 7ii7 by striking ,office of ,emergency ,communications each place it appears and inserting ,emergency ,communications ,division2 and 7,d7 in section #ahaj 7#f ,u4,s4,c4 #ehj7-- 7i7 in subsection 7a77#a71 by striking ,director of the ,office of ,emergency ,communications 7referred to in this section as the ,director7 and inserting ,assistant ,director for the ,emergency ,communications ,division 7referred to in this section as the ,assistant ,director72 7ii7 in subsection 7c71 by striking ,office of ,emergency ,communications and inserting ,emergency ,communications ,division2 and 7iii7 by striking ,director each place it appears and inserting ,assistant ,director2 7#g7 in title ,,xxi 7#f ,u4,s4,c4 #fba et seq47-- 7,a7 in section #baja 7#f ,u4,s4,c4 #fba7-- 7i7 by redesignating paragraphs 7#d7 through 7#ad7 as paragraphs 7#e7 through 7#ae71 respectively2 and 7ii7 by inserting after paragraph 7#c7 the following new paragraph3 7#d7 the term ,director means the ,director of the ,cybersecurity and ,infrastructure ,security ,agency2 2 7,b7 in paragraph 7#a7 of section #bajb7;a7 7#f ,u4,s4,c4 #fbb7;a771 by inserting at the end the following new sentence3 ,such ,program shall be located in the ,cybersecurity and ,infrastructure ,security ,agency42 and 7,c7 in paragraph 7#b7 of section #bajd7;c7 7#f ,u4,s4,c4 #fbd7;c771 by striking ,under ,secretary responsible for overseeing critical infrastructure protection1 cybersecurity1 and other related programs of the ,department appointed under section #ajc7;a77#a77;,h7 and inserting ,director of the ,cybersecurity and ,infrastructure ,security ,agency 2 and 7#h7 in title ,,xxii1 as added by this ,act-- 7,a7 in section #bbje1 as so redesignated1 in the matter preceding paragraph 7#a71 by striking ,under ,secretary appointed under section #ajc7;a77#a77;,h7 and inserting ,director of the ,cybersecurity and ,infrastructure ,security ,agency2 7,b7 in section #bbjf1 as so redesignated1 by striking ,assistant ,secretary for ,infrastructure ,protection and inserting ,director of the ,cybersecurity and ,infrastructure ,security ,agency2 7,c7 in section #bbji1 as so redesignated-- 7i7 by striking ,under ,secretary appointed under section #ajc7;a77#a77;,h7 each place it appears and inserting ,director of the ,cybersecurity and ,infrastructure ,security ,agency2 7ii7 in subsection 7b71 by adding at the end the following new sentences3 ,the ,center shall be located in the ,cybersecurity and ,infrastructure ,security ,agency4 ,the head of the ,center shall report to the ,assistant ,director for ,cybersecurity42 and 7iii7 in subsection 7c77#aa71 by striking ,office of ,emergency ,communications and inserting ,emergency ,communications ,division2 7,d7 in section #bbaj1 as so redesignated-- 7i7 by striking section #bbg each place it appears and inserting section #bbji2 and 7ii7 in subsection 7c71 by striking ,under ,secretary appointed under section #ajc7;a77#a77;,h7 and inserting ,director of the ,cybersecurity and ,infrastructure ,security ,agency2 7,e7 in section #bbaa1 as so redesignated1 by striking section #bab7e7 and inserting section #bbae7e72 and 7,f7 in section #bbab1 as so redesignated1 in subsection 7a7-- 7i7 in paragraph 7#c71 by striking section #bbh and inserting section #bbaj2 and 7ii7 in paragraph 7#d71 by striking section #bbg and inserting section #bbji4 7h7 ,conforming amendment to title #e1 ,united ,states ,code ,section #ecad of title #e1 ,united ,states ,code1 is amended by inserting after ,under ,secretaries1 ,department of ,homeland ,security4 the following new item3 ,director1 ,cybersecurity and ,infrastructure ,security ,agency4 4 7i7 ,clerical amendments ,the table of contents in section #a7;b7 of the ,homeland ,security ,act of #bjjb is amended-- 7#a7 in title ,,ii-- 7,a7 in the item relating to the title heading1 by striking ,,and ,,infrastructure ,,protection2 7,b7 in the item relating to the heading of subtitle ,a1 by striking and ,infrastructure ,protection2 7,c7 in the item relating to section #bja1 by striking and ,infrastructure ,protection2 7,d7 by striking the item relating to section #baj;,e2 7,e7 by striking the items relating to subtitle ,b of title ,,ii2 and 7,f7 by striking the items relating to section #bbc through section #bcj2 and 7#b7 by adding at the end the following new items3 ,,title ,,xxii--,,cybersecurity ,,and ,,infrastructure ,,security ,,agency ,subtitle ,a--,cybersecurity and ,infrastructure ,security ,sec4 #bbja4 ,definitions4 ,sec4 #bbjb4 ,cybersecurity and ,infrastructure ,security ,agency4 ,sec4 #bbjc4 ,cybersecurity ,division4 ,sec4 #bbjd4 ,infrastructure ,security ,division4 ,sec4 #bbje4 ,enhancement of ,federal and non-,federal cybersecurity4 ,sec4 #bbjf4 ,net guard4 ,sec4 #bbjg4 ,cybersecurity ,enhancement ,act of #bjjb4 ,sec4 #bbjh4 ,cybersecurity recruitment and retention4 ,sec4 #bbji4 ,national cybersecurity and communications integration center4 ,sec4 #bbaj4 ,cybersecurity plans4 ,sec4 #bbaa4 ,cybersecurity strategy4 ,sec4 #bbab4 ,clearances4 ,sec4 #bbac4 ,federal intrusion detection and prevention system4 ,sec4 #bbad4 ,national ,asset ,database4 ,subtitle ,b--,critical ,infrastructure ,information ,sec4 #bbba4 ,short title4 ,sec4 #bbbb4 ,definitions4 ,sec4 #bbbc4 ,designation of critical infrastructure protection program4 ,sec4 #bbbd4 ,protection of voluntarily shared critical infrastructure information4 ,sec4 #bbbe4 ,no private right of action4 4 #c4 ,transfer of other entities 7a7 ,office of ,biometric ,identity ,management ,the ,office of ,biometric ,identity ,management of the ,department of ,homeland ,security located in the ,national ,protection and ,programs ,directorate of the ,department of ,homeland ,security on the day before the date of the enactment of this ,act is hereby transferred to the ,management ,directorate of the ,department4 7b7 ,federal ,protective ,service ,the ,secretary of ,homeland ,security is authorized to transfer the ,federal ,protective ,service1 as authorized under section #acae of title #dj1 ,united ,states ,code1 to any component1 directorate1 or other office of the ,department of ,homeland ,security that the ,secretary determines appropriate4 #d4 ,rule of construction ,nothing in this ,act may be construed as-- 7#a7 conferring new authorities to the ,secretary of ,homeland ,security1 including programmatic1 regulatory1 or enforcement authorities1 outside of the authorities in existence on the day before the date of the enactment of this ,act2 7#b7 reducing or limiting the programmatic1 regulatory1 or enforcement authority vested in any other ,federal agency by statute2 or 7#c7 affecting in any manner the authority1 existing on the day before the date of the enactment of this ,act1 of any other ,federal agency or component of the ,department of ,homeland ,security4 #e4 ,prohibition on additional funding ,no additional funds are authorized to be appropriated to carry out this ,act or the amendments made by this ,act4 ,this ,act and such amendments shall be carried out using amounts otherwise authorized4 ,december #aa1 #bjag ,reported from the ,committee on ,homeland ,security,december #aa1 #bjag,the ,committees on ,energy and ,commerce1 ,oversight and ,government ,reform1 and ,transportation and ,infrastructure discharged2 committed to the ,committee of the ,whole ,house on the ,state of the ,union and ordered to be printed