,,ii  #aaeth ,,congress  #ast ,session  
,s4 #bjhc  ,,in ,,the ,,senate ,,of     
,,the ,,united ,,states  ,november #g1  
#bjag ,ms4 ,harris 7for herself and ,mr4
 ,sullivan7 introduced the following    
bill2 which was read twice and referred 
to the ,committee on ,commerce1         
,science1 and ,transportation  ,a ,,bill
  ,to enhance cybersecurity information 
sharing and coordination at ports in the
 ,united ,states1 and for other         
purposes4  #a4 ,short title ,this ,act  
may be cited as the ,strengthening      
,cybersecurity ,information ,sharing and
 ,coordination in ,our ,ports ,act of   
#bjag4  #b4 ,improving cybersecurity    
risk assessments1 information sharing1  
and coordination ,the ,secretary of     
,homeland ,security shall--  7#a7       
develop and implement a maritime        
cybersecurity risk assessment model     
within #abj days after the date of the  
enactment of this ,act1 consistent with 
the ,national ,institute of ,standards  
and ,technology ,framework for          

,improving ,critical ,infrastructure    
,cybersecurity and any update to that   
document pursuant to ,public ,law       
#aac-bgd1 to evaluate current and future
 cybersecurity risks 7as such term is   
defined in section #bbg of the ,homeland
 ,security ,act of #bjjb 7#f ,u4,s4,c4  
#adh772  7#b7 evaluate1 on a periodic   
basis but not less often than once every
 #b years1 the effectiveness of the     
maritime cybersecurity risk assessment  
model under paragraph 7#a72  7#c7 seek  
to ensure participation of at least one 
information sharing and analysis        
organization 7as such term is defined in
 section #bab of the ,homeland ,security
 ,act of #bjjb 7#f ,u4,s4,c4 #aca77     
representing the maritime community in  
the ,national ,cybersecurity and        
,communications ,integration ,center1   
pursuant to subsection 7d77#a77;,b7 of  
section #bbg of such ,act2  7#d7        
establish guidelines for voluntary      
reporting of maritime-related           
cybersecurity risks and incidents 7as   

such terms are defined in section #bbg  
of such ,act7 to the ,center 7as such   
term is defined subsection 7b7 of such  
section #bbg71 and other appropriate    
,federal agencies2 and  7#e7 request the
 ,national ,maritime ,security ,advisory
 ,committee established under section   
#gjaab of title #df1 ,united ,states    
,code1 to report and make               
recommendations to the ,secretary on    
enhancing the sharing of information    
related to cybersecurity risks and      
incidents1 consistent with the          
responsibilities of the ,center1 between
 relevant ,federal agencies and--  7,a7 
,state1 local1 and tribal governments2  
7,b7 relevant public safety and         
emergency response agencies2  7,c7      
relevant law enforcement and security   
organizations2  7,d7 maritime industry2 
7,e7 port owners and operators2 and     
7,f7 terminal owners and operators4  #c4
 ,cybersecurity enhancements to maritime
 security activities ,the ,secretary of 
,homeland ,security1 acting through the 

,commandant of the ,coast ,guard1 shall 
direct-- 7#a7 each ,area ,maritime      
,security ,advisory ,committee          
established under section #gjaab of     
title #df1 ,united ,states ,code1 to    
facilitate the sharing of cybersecurity 
risks and incidents to address          
port-specific cybersecurity risks1 which
 may include the establishment of a     
working group of members of ,area       
,maritime ,security ,advisory           
,committees to address port-specific    
cybersecurity vulnerabilities2 and  7#b7
 that any area maritime transportation  
security plan and any vessel or facility
 security plan required under section   
#gjajc of title #df1 ,united ,states    
,code1 approved after the development of
 the cybersecurity risk assessment model
 required by paragraph 7#a7 of section  
#b include a mitigation plan to prevent1
 manage1 and respond to cybersecurity   
risks 7as such term is defined in       
section #bbg of the ,homeland ,security 
,act of #bjjb 7#f ,u4,s4,c4 #adh774  #d4

 ,vulnerability assessments and security
 plans ,title #df1 ,united ,states      
,code1 is amended-- 7#a7 in section     
#gjajb7;b77#a77;,c71 by inserting       
cybersecurity1 after physical security12
 and  7#b7 in section                   
#gjajc7;c77#c77;,c71 by striking and    
after the semicolon at the end of clause
 7iv71 by redesignating clause 7v7 as   
clause 7vi71 and by inserting after     
clause 7iv7 the following3  7v7         
prevention1 management1 and response to 
cybersecurity risks2 and  4