,i #aae? ,,congress #a/ ,session ,h4 ,r4 #idj ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,febru>y #g1 #bjag,ms4 ,jackson ,lee introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,homel& ,security ,a ,,bill ,to secure communications ( utilities f t]rori/ ?reats1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,secur+ ,communications ( ,utilities f ,t]rori/ ,?reats or ! ,,sc\ts ,act 4 #b4 ,policy 7a7 ,security & resili5ce ,! ,secret>y ( ,homel& ,security1 9 coord9ation ) ! sector-specific ag5cies1 may "w ) critical infra/ructure own]s & op]ators & ,/ate1 local1 tribal1 & t]ritorial entities to seek volunt>y p>ticipation ( su* ag5cies to det]m9e h[ ! ,dep>tm5t ( ,homel& ,security c be/ s]ve ! sector-specific cyb]security ne$s to manage risk & /r5g!n ! security & resili5ce ( ! ,nation's critical infra/ructure aga9/ t]rori/ attacks t c\ld h a debilitat+ impact on national security1 economic /ability1 public heal? & safety1 or any comb9ation !re(4 7b7 ,objectives ,9 implem5t+ subsection 7a71 ! ,secret>y %all seek to r$uce vuln]abilities1 m9imize consequ5ces1 id5tify & disrupt t]rorism ?reats1 & ha/5 response & recov]y ef=ts relat$ to impact$ critical infra/ructures4 7c7 ,inve/igation ( be/ means ,to engage own]s & op]ators ,! ,secret>y1 9 coord9ation ) ! sector-specific ag5cies1 may inve/igate ! be/ means = engag+ sector-specific ag5cies 9 p>ticipation 9 a volunt>y cyb]security in=mation %>+1 em]g5cy support1 & em]g+ ?reat aw>5ess program4 7d7 ,li/5+ opportunity ,! ,secret>y %all e/abli% volunt>y opportunities = sector-specific ag5cies & critical infra/ructure own]s & op]ators to in=m ! ,dep>tm5t ( ,homel& ,security ( sector-specific *all5ges to cyb]security1 includ+ reg>d+-- 7#a7 :at ne$s !y may h or may n h reg>d+ critical infra/ructure protection2 & 7#b7 h[ ! ,dep>tm5t ( ,homel& ,security is or is n help+ to meet ^? ne$s t h be5 id5tifi$1 ?r\gh volunt>y p>ticipation4 7e7 ,,gao report ,! ,comptroll] ,g5]al ( ! ,unit$ ,/ates %all report to ! ,congress by n lat] ?an #f mon?s aft] ! date ( ! enactm5t ( ?is ,act on ! views1 exp]i5ces1 & pref]5ces ( critical infra/ructure own]s & op]ators reg>d+ ! b5efits ( engag+ 9 volunt>y cyb]security incid5t report+1 intellig5ce ga!r+1 & te*nical support res\rces provid$ by ! ,dep>tm5t ( ,homel& ,security4 7f7 ,int]national p>tn]s ,! ,secret>y %all1 9 consultation ) appropriate ,f$]al ag5cies1 e/abli% t]rorism prev5tion policy to engage ) int]national p>tn]s to /r5g!n ! security & resili5ce ( dome/ic critical infra/ructure & critical infra/ructure locat$ outside ( ! ,unit$ ,/ates1 or 9 its t]ritorial wat]s1 on :i* ! ,nation dep5ds4 #c4 ,/rategic imp]atives 7a7 ,rese>* & report on ! mo/ effici5t means = in=mation ex*ange by id5tify+ basel9e data & sy/ems requirem5ts = ! ,f$]al gov]nm5t ,! ,secret>y %all facilitate ! timely ex*ange ( t]rorism ?reat & vuln]ability in=mation z well z in=mation t all[s = ! developm5t ( a situational aw>5ess capability = ,f$]al civilian ag5cies dur+ t]rori/ incid5ts4 ,! goal ( su* facilitation is to enable effici5t in=mation ex*ange ?r\gh ! id5tification ( requirem5ts = data & in=mation =mats & accessibility1 sy/em int]op]ability1 & r$undant sy/ems & alt]nate capabilities %\ld !re be a disruption 9 ! prim>y sy/ems4 7b7 ,implem5tation ( an integration & analysis function ,to in=m plann+ & op]ational decisions reg>d+ ! protection ( critical infra/ructure f t]rorism ev5ts ,! ,secret>y ( ,homel& ,security %all implem5t an integration & analysis function = critical infra/ructure t includes op]ational & /rategic analysis on t]rorism incid5ts1 ?reats1 & em]g+ risks4 ,su* function %all include e/abli%m5t by ! ,secret>y ( integration ( data %>+ capabilities ) ,fusion ,c5t]s t accompli% ! foll[+3 7#a7 ,det]m9e ! appropriate role t ,fusion ,c5t]s may fill 9 report+ data relat$ to cyb]security ?reat or incid5t in=mation reg>d+ individuals or s]vice provid]s ) access to or ongo+ bus9ess relation%ips ) critical infra/ructure4 7#b7 ,det]m9e :e!r or h[ ! ,national ,protection & ,programs ,directorate & ! ,national ,cyb]security & ,communications ,integration ,c5t] may "w ) ,fusion ,c5t]s to report possible cyb]security incid5ts4 7#c7 ,det]m9e a means = ,fusion ,c5t]s to report availability ( critical infra/ructure to support local1 ,/ate1 ,f$]al1 tribal1 & t]ritorial law en=cem5t & ! provision ( basic public s]vices aft] disruption ev5ts su* z electric p[] br[n\ts & black\ts1 accid5ts t disrupt s]vice1 & v&alism to or ne> facilities4 7#d7 ,categorize & prioritize cyb]security intake risk in=mation bas$ on relevance to critical infra/ructure own]s or op]ators 9 ! area s]v$ by ! ,fusion ,c5t]4 7#e7 ,e/abli% an em]g+ ?reat hotl9e & secure onl9e sector-specific cyb]security incid5t report+ portal by :i* in=mation may be dissem9at$ ?r\gh ,fusion ,c5t]s4 7#f7 ,develop1 keep up to date1 & make available a ,f$]al ag5cy directory ( designat$ (fices or individuals task$ ) respond+ to1 mitigat+1 or assi/+ 9 recov]y f cyb]security incid5ts involv+ critical infra/ructure & make ! directory available on a volunt>y basis to critical infra/ructure own]s & op]ators4 7#g7 ,e/abli% a volunt>y incid5t access portal ) ! ability to all[ us]s to det]m9e ! means1 me?ods1 & level ( incid5t report+ t is sector-specific & relevant to ! recipi5t z def9$ & controll$ by ! recipi5t4 7#h7 ,ga!r volunt>y fe$back f critical infra/ructure own]s & op]ators on ! value1 relevance1 & timel9ess ( ! in=mation receiv$1 :i* %all include h[ !y believe in=mation & ! means us$ to dissem9ate t in=mation might be improv$4 7#i7 ,report to ,congress e #b ye>s on ! volunt>y p>ticipation ( critical infra/ructure own]s & op]ators 9 ! programs e/abli%$ "u ?is title4 7#aj7 ,implem5t a capability to collate1 assess1 & integrate vuln]ability & consequ5ce in=mation ) ?reat /reams & haz>d in=mation to-- 7,a7 evaluate ! impact ( cyb]security & cyb]physical impacts ( critical physical assets2 7,b7 aid 9 prioritiz+ assets & manag+ risks to critical infra/ructure 9 impact$ areas2 7,c7 det]m9e1 ?r\gh ! volunt>y coop]ation ( critical infra/ructure own]s & op]ators1 ! /aff+ & pr(essional ne$ = cyb]security critical infra/ructure protection ) ,fusion ,c5t]s2 7,d7 det]m9e1 ?r\gh coord9ation ) ! sector-specific ag5cies1 ! ag5cy /aff+ ne$$ to support cyb]security critical infra/ructure protection & report ! f9d+s to ,congress2 7,e7 rese>* & report f9d+s reg>d+ ! feasibility ( explor+ t]rori/ incid5t correlations betwe5 critical infra/ructure damage1 de/ruction1 & dim9i%$ capacity1 & :at occurs dur+ c]ta9 natural disa/]s2 7,f7 anticipate int]dep5d5cies & cascad+ impacts relat$ to cyb] telecommunications failures2 7,g7 recomm5d security & resili5ce measures = critical infra/ructure prior to1 dur+1 & aft] a t]rorism ev5t or incid5t2 7,h7 evaluate int]dep5d5cies & cascad+ impacts relat$ to electric grid failures2 7,i7 support po/-t]rorism incid5t managem5t & re/oration ef=ts relat$ to critical infra/ructure2 & 7,j7 make recomm5dations on prev5t+ ! collapse or s]i\s degrad+ ( ! telecommunication capability 9 an area impact$ by a t]rorism ev5t4 7#aa7 ,support ! ,dep>tm5t ( ,homel& ,security's ability to ma9ta9 & %>e1 z a common ,f$]al s]vice1 a ne> real-"t situational aw>5ess capability = critical infra/ructure t includes actionable in=mation ab\t imm95t t]rori/ ?reats1 significant tr5ds1 & aw>5ess ( incid5ts t may impact critical infra/ructure4 #d4 ,def9itions ,= purposes ( ?is ,act3 7#a7 ,critical infra/ructure ,! t]m critical infra/ructure means sy/ems & assets1 :e!r physical or virtual1 s vital to ! ,unit$ ,/ates t ! incapacity or de/ruction ( su* sy/ems & assets w\ld h a debilitat+ impact on security1 national economic security1 national public heal? or safety1 or any comb9ation ( ^? matt]s4 7#b7 ,resili5ce ,! t]m resili5ce means ! ability to prep>e = & adapt to *ang+ conditions & )/& & recov] rapidly f disruptions4 ,! t]m includes ! ability to )/& & recov] f delib]ate attacks1 accid5ts1 or naturally occurr+ ?reats or incid5ts4 7#c7 ,sector-specific ag5cy ,! t]m sector-specific ag5cy means a ,f$]al dep>tm5t or ag5cy designat$ z a ,sector-,specific ,ag5cy by ,presid5tial ,policy ,directive #ba1 relat+ to ,critical ,infra/ructure ,security & ,resili5ce4 7#d7 ,security ,! t]m security means r$uc+ ! risk to critical infra/ructure by physical means or def5se cyb] measures to intrusions1 attacks1 or ! effects ( t]rori/ intrusions or attacks4