,,ii #aae? ,,congress #a/ ,session ,s4 #bjce ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,octob] #ca1 #bjag ,mr4 ,he9ri* 7= himself & ,ms4 ,coll9s7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,rules & ,adm9i/ration ,a ,,bill ,to provide increas$ security = ! vot+ sy/ems ( ! ,unit$ ,/ates1 to protect aga9/ intrusion1 !ft1 manipulation1 & deletion ( vot] regi/ration data & ballots1 or votes ca/1 & to prev5t cyb]attacks f malici\s comput] hack]s1 & = o!r purposes4 #a4 ,%ort title2 table ( cont5ts 7a7 ,%ort title ,?is ,act may be cit$ z ! ,secur+ ,am]ica's ,vot+ ,equipm5t ,act ( #bjag or ! ,,save ,act4 7b7 ,table ( cont5ts ,! table ( cont5ts = ?is ,act is z foll[s3 ,sec4 #a4 ,%ort title2 table ( cont5ts4 ,sec4 #b4 ,def9itions4 ,,title ,i--,in=mation %>+ ) ,/ate election (ficials ,sec4 #aja4 ,in=mation %>+ ) ,/ate election (ficials4 ,,title ,,ii--,pres]v+ ! security & indep5d5ce ( ,/ate vot+ sy/ems ,sec4 #bja4 ,designation ( vot+ sy/ems z critical infra/ructure4 ,sec4 #bjb4 ,vot+ sy/em ?reat assessm5t4 ,sec4 #bjc4 ,grant program = upgrad+ vot+ sy/ems4 ,,title ,,iii--,coop]ative ,hack ! ,election program ,sec4 #cja4 ,e/abli%m5t ( program4 ,sec4 #cjb4 ,activities "u program4 ,sec4 #cjc4 ,safe h>bor4 ,sec4 #cjd4 ,bug b\nty programs4 ,,title ,,iv--,vot+ sy/em integrity audit ,sec4 #dja4 ,audit4 #b4 ,def9itions ,9 ?is ,act3 7#a7 ,*ief ,/ate election (ficial ,! t]m *ief ,/ate election (ficial means ! *ief ,/ate election (ficial ( a ,/ate designat$ "u section #aj ( ! ,national ,vot] ,regi/ration ,act ( #aiic 7#eb ,u4,s4,c4 #bjeji74 7#b7 ,critical infra/ructure ,! t]m critical infra/ructure has ! mean+ giv5 ! t]m 9 section #ajaf ( ! ,critical ,infra/ructure ,protection ,act ( #bjja 7#db ,u4,s4,c4 #eaie;c7e774 7#c7 ,dep>tm5t ,! t]m ,dep>tm5t means ! ,dep>tm5t ( ,homel& ,security4 7#d7 ,secret>y ,! t]m ,secret>y means ! ,secret>y ( ,homel& ,security4 7#e7 ,sector-,specific ag5cy ,! t]m sector-specific ag5cy has ! mean+ giv5 t t]m 9 ,presid5tial ,policy ,directive-#ba1 issu$ ,febru>y #ab1 #bjac 7relat+ to critical infra/ructure security & resili5ce71 or any successor !reto4 7#f7 ,/ate ,! t]m ,/ate means ea* ( ! #ej ,/ates1 ! ,di/rict ( ,columbia1 ! ,commonweal? ( ,pu]to ,rico1 & ! t]ritories & possessions ( ! ,unit$ ,/ates4 7#g7 ,vot+ sy/em ,! t]m vot+ sy/em has ! mean+ giv5 ! t]m 9 section #cja7;b7 ( ! ,help ,am]ica ,vote ,act ( #bjjb 7#eb ,u4,s4,c4 #bajha7;b774 ,i ,in=mation %>+ ) ,/ate election (ficials #aja4 ,in=mation %>+ ) ,/ate election (ficials 7a7 ,security cle>ances 7#a7 ,9 g5]al ,n lat] ?an #cj days aft] ! date ( enactm5t ( ?is ,act1 ! ,director ( ,national ,intellig5ce %all sponsor a security cle>ance up to ! top secret level = ea* eligible *ief ,/ate election (ficial ( a ,/ate1 & up to #a eligible designee ( su* an election (ficial1 at ! "t t ! *ief ,/ate election (ficial or designee assumes su* position4 7#b7 ,det]m9ation ( levels 7,a7 ,9 g5]al ,! ,director ( ,national ,intellig5ce %all det]m9e ! level ( cle>ances = ! positions describ$ 9 p>agraph 7#a74 7,b7 ,int]im cle>ances ,! ,director ( ,national ,intellig5ce1 or 8 designee1 may issue int]im cle>ances1 = a p]iod to be det]m9$ by ! ,director ( ,national ,intellig5ce1 to a *ief ,/ate election (ficial z describ$ 9 p>agraph 7#a7 & up to #a designee ( su* (ficial "u su* p>agraph4 7b7 ,in=mation %>+ 7#a7 ,9 g5]al ,! ,director ( ,national ,intellig5ce %all %>e appropriate classifi$ in=mation relat$ to ?reats to vot+ sy/ems & to ! integrity ( ! election process ) *ief ,/ate election (ficials & su* designees :o h receiv$ a security cle>ance "u subsection 7a74 7#b7 ,reports ,! ,director ( ,national ,intellig5ce %all transmit reports on su* in=mation %>+ to ! respective *ief ,/ate election (ficial ( any affect$ ,/ate4 ,,ii ,pres]v+ ! security & indep5d5ce ( ,/ate vot+ sy/ems #bja4 ,designation ( vot+ sy/ems z critical infra/ructure 7a7 ,9 g5]al ,! ,secret>y1 act+ ?r\gh ! ,assi/ant ,secret>y ( ! ,national ,protection & ,programs ,directorate1 %all-- 7#a7 designate vot+ sy/ems us$ 9 ! ,unit$ ,/ates z critical infra/ructure2 7#b7 include ?reats ( compromise1 disruption1 or de/ruction ( vot+ sy/ems 9 national plann+ sc5>ios2 & 7#c7 conduct a campaign to proactively educate local election (ficials ab\t ! designation ( vot+ sy/ems z critical infra/ructure & election (ficials at all levels ( gov]nm5t ( vot+ sy/em ?reats4 7b7 ,sector-,specific ag5cies ,! ,dep>tm5t & ! ,election ,assi/ance ,commission %all be ! sector-specific ag5cies responsible = coord9at+ ) ,secret>ies ( ,/ate & ! *ief ,/ate election (ficials to promote & ensure ! security & resili5ce ( ,/ate vot+ sy/ems4 #bjb4 ,vot+ sy/em ?reat assessm5t 7a7 ,?reat assessm5t ,! ,secret>y %all1 9 conjunction ) ,/ate election (ficials & ! sector specific ag5cies-- 7#a7 conduct a ?reat assessm5t ( ! physical & electronic risks to vot+ sy/ems 9 ! ,unit$ ,/ates2 & 7#b7 develop recomm5d$ be/ practices = address+ risks assess$ "u p>agraph 7#a7 9 consultation ) ! ,national ,association ( ,secret>ies ( ,/ate1 ,national ,association ( ,/ate ,election ,directors1 & ,national ,in/itute ( ,/&>ds & ,te*nology4 7b7 ,volunt>y p>ticipation ,p>ticipation by a ,/ate 9 ! ?reat assessm5t conduct$ "u subsection 7a7 %all be volunt>y & at ! discretion ( ! ,/ate4 7c7 ,report ,n lat] ?an #a ye> aft] ! date ( enactm5t ( ?is ,act1 ! ,secret>y %all submit a report to ,congress & ! ,director ( ,national ,intellig5ce on ! ?reat assessm5t conduct$ "u subsection 7a71 :i* %all include an e/imate ( ! total co/ ( implem5t+ ! recomm5d$ be/ practices develop$ "u subsection 7a77#b7 ?r\gh ! grant program e/abli%$ "u section #bjc4 #bjc4 ,grant program = upgrad+ vot+ sy/ems 7a7 ,9 g5]al ,! ,secret>y1 act+ 9 conjunction ) a sector specific ag5cy1 %all aw>d grants to ,/ates to assi/ 9 ! developm5t ( security solutions = ,/ate vot+ sy/ems4 7b7 ,use ( funds 7#a7 ,9 g5]al ,subject to p>agraph 7#b71 a grant aw>d$ "u ?is section %all be us$ by a ,/ate to upgrade ! vot+ sy/ems ( ! ,/ate to ensure ! security & integrity ( ! physical1 electronic1 & adm9i/rative compon5ts ( ! vot+ sy/em bas$ ^u ! ?reat assessm5t conduct$1 & recomm5d$ be/ practices develop$1 "u section #bjb4 7#b7 ,implem5tation ( be/ practices ,a ,/ate receiv+ a grant "u ?is section %all use ! grant funds solely to implem5t ! recomm5d$ be/ practices develop$ "u section #bjb1 or alt]native practices t are equival5t to or exce$ su* be/ practices subject to c]tification describ$ 9 subsection 7c77#c71 be=e us+ ! grant to c>ry out any o!r uses describ$ 9 p>agraph 7#a74 7c7 ,application 7#a7 ,9 g5]al ,a ,/ate seek+ a grant "u ?is section %all submit to ! ,secret>y an application at su* "t1 9 su* mann]1 & conta9+ su* in=mation z ! ,secret>y may require4 7#b7 ,requir$ cont5ts ,an application submitt$ "u p>agraph 7#a7 %all include1 at a m9imum-- 7,a7 an explanation ( h[ ! ,/ate w use ! grant funds to implem5t ! be/ practices develop$ by ! ,secret>y "u section #bjb2 7,b7 an explanation ( h[ ! ,/ate w update & secure ! election ma*9es1 vote tally sy/ems1 vot] regi/ration databases1 & vot+ adm9i/ration proc$ures ( ! ,/ate f electronic & physical ?reats2 & 7,c7 a description (-- 7i7 ! plans ( ! ,/ate = pre- & po/-election security & accuracy audits2 7ii7 ! me?ods to be implem5t$ by ! ,/ate = pres]v+ a durable record ( votes ca/2 & 7iii7 9 ! case ( a ,/ate t *ooses to implem5t an alt]native practice t meets or exce$s ! be/ practices1 & a c]tification pursuant to p>agraph 7#c71 ! reasons = n *oos+ ! recomm5d$ be/ practices develop$ "u section #bjb4 7#c7 ,c]tification ,a c]tification describ$ 9 ?is p>agraph is a c]tification t ! ,/ate-- 7,a7 has met ! recomm5d$ be/ practices develop$ "u section #bjb2 or 7,b7 has adopt$ alt]native practices = address+ risks1 & ! alt]native practices h be5 v]ifi$ by ! ,national ,association ( ,secret>ies ( ,/ate1 ,national ,association ( ,/ate ,election ,directors1 or ,national ,in/itute ( ,/&>ds & ,te*nology z be+ equival5t to or exce$+ ! recomm5d$ be/ practices develop$ "u section #bjb4 7d7 ,annual audit ,n lat] ?an #a ye> aft] ! fir/ fiscal ye> 9 :i* a grant is aw>d$ "u ?is section1 & ea* ye> !reaft]1 ! ,inspector ,g5]al ( ! ,dep>tm5t %all conduct an audit ( ea* ,/ate t has receiv$ a grant dur+ ! previ\s fiscal ye> to evaluate :e!r ! ,/ate has appropriately us$ ! grant funds to upgrade & secure ! vot+ sy/em ( ! ,/ate by implem5t+ ! be/ practices id5tifi$ 9 ! approv$ application ( ! ,/ate4 7e7 ,au?orization ( appropriations ,!re are au?oriz$ to be appropriat$ su* sums z are e/imat$ 9 ! report requir$ to be submitt$ by ! ,secret>y "u section #bjb7;c7 to be necess>y to c>ry out ?is section4 ,,iii ,coop]ative ,hack ! ,election program #cja4 ,e/abli%m5t ( program 7a7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is title1 ! ,secret>y %all develop a program to be kn[n z ! ,coop]ative ,hack ! ,election ,program4 7b7 ,purposes ( program ,! purpose ( ! ,coop]ative ,hack ! ,election ,program is to /r5g!n electoral sy/ems f outside int]f]5ce by enc\rag+ entrants to "w coop]atively ) election sy/em v5dors to p5etrate inactive vot+ & vot] regi/ration sy/ems to discov] vuln]abilities (1 & develop def5ses =1 su* sy/ems4 #cjb4 ,activities "u program ,9 c>ry+ out ! ,coop]ative ,hack ! ,election ,program1 ! ,secret>y %all-- 7#a7 create an annual competition = hack+ into ,/ate vot+ & vot] regi/ration sy/ems dur+ p]iods :5 su* sy/ems are n 9 use = elections2 7#b7 aw>d competitors = ! discov]y ( ! mo/ significant vuln]abilities ( su* sy/ems2 & 7#c7 %>e all discov]$ vuln]abilities ) ! relevant v5dors ( ! sy/ems4 #cjc4 ,safe h>bor 7a7 ,9 g5]al ,not)/&+ section #ajcj ( title #ah1 ,unit$ ,/ates ,code1 & except z provid$ 9 subsection 7b71 x %all n be unlawful = a p]son act+ 9 compliance ) ! ,coop]ative ,hack ! ,election ,program or a bug b\nty program implem5t$ "u section #cjd to take actions necess>y to discov] & report a cyb]security vuln]ability 9 a vot+ sy/em if ! p]son reports ! cyb]security vuln]ability to ! ,secret>y4 7b7 ,limitation ,subsection 7a7 %all n apply to any p]son t-- 7#a7 acts outside ! scope ( ! ,coop]ative ,hack ! ,election ,program or a bug b\nty program implem5t$ "u section #cjd1 z ! case may be2 7#b7 exploits a cyb]security vuln]ability describ$ 9 subsection 7a72 or 7#c7 publicly exposes a cyb]security vuln]ability describ$ 9 subsection 7a7 be=e report+ ! cyb]security vuln]ability to ! ,secret>y4 #cjd4 ,bug b\nty programs 7a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,"u ,secret>y = ,national ,protection & ,programs ,directorate ( ! ,dep>tm5t %all submit a /rategic plan to implem5t bug b\nty programs at appropriate ag5cies & dep>tm5ts ( ! ,unit$ ,/ates to-- 7#a7 ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate2 7#b7 ! ,select ,committee on ,intellig5ce ( ! ,s5ate2 7#c7 ! ,committee on ,homel& ,security ( ! ,h\se ( ,repres5tatives2 & 7#d7 ! ,p]man5t ,select ,committee on ,intellig5ce ( ! ,h\se ( ,repres5tatives4 7b7 ,assessm5t ,! plan "u subsection 7a7 %all include-- 7#a7 an assessm5t on-- 7,a7 ! effectiv5ess ( ! ,hack ! ,p5tagon pilot program c>ri$ out by ! ,dep>tm5t ( ,def5se 9 #bjaf & subsequ5t bug b\nty programs 9 id5tify+ & report+ vuln]abilities )9 ! in=mation sy/ems ( ! ,dep>tm5t ( ,def5se2 & 7,b7 private sector bug b\nty programs1 includ+ su* programs implem5t$ by lead+ te*nology companies 9 ! ,unit$ ,/ates2 & 7#b7 recomm5dations on ! feasibility ( initiat+ bug b\nty programs at appropriate ag5cies & dep>tm5ts ( ! ,unit$ ,/ates4 ,,iv ,vot+ sy/em integrity audit #dja4 ,audit 7a7 ,9 g5]al ,n lat] ?an ,decemb] #ca1 #bjai1 & once e #d ye>s !reaft]1 ! ,comptroll] ,g5]al ( ! ,unit$ ,/ates %all conduct a robu/ audit ( ,/ate vot+ sy/ems to ensure t elections held us+ equipm5t upgrad$ us+ grants aw>d$ "u section #bjc h be5 conduct$ 9 a mann] consi/5t ) ! goals ( ! grant program4 7b7 ,limitation ,ea* audit conduct$ "u subsection 7a7 %all include only ,/ates t receiv$ a grant "u section #bjc dur+ ! "t p]iod cov]$ by ! audit4 7c7 ,report ,! ,comptroll] ,g5]al ( ! ,unit$ ,/ates %all submit a report to ,congress on ea* audit conduct$ "u subsection 7a74