,,ii #aae? ,,congress #a/ ,session ,s4 #dab ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,febru>y #af1 #bjag,mr4 ,pet]s 7= himself & ,mr4 ,p]due7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ,a ,,bill ,to am5d ! ,homel& ,security ,act ( #bjjb to require ,/ate & local coord9ation on cyb]security ) ! national cyb]security & communications integration c5t]1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,/ate & ,local ,cyb] ,protection ,act ( #bjag4 #b4 ,/ate & local coord9ation on cyb]security ) ! national cyb]security & communications integration c5t] 7a7 ,9 g5]al ,section #bbg ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #adh7 is am5d$ by add+ at ! end ! foll[+3 7n7 ,/ate & local coord9ation on cyb]security 7#a7 ,9 g5]al ,! ,c5t] %all1 to ! ext5t practicable-- 7,a7 assi/ ,/ate & local gov]nm5ts1 ^u reque/1 9 id5tify+ in=mation sy/em vuln]abilities2 7,b7 assi/ ,/ate & local gov]nm5ts1 ^u reque/1 9 id5tify+ in=mation security protections comm5surate ) cyb]security risks & ! magnitude ( ! pot5tial h>m result+ f ! unau?oriz$ access1 use1 disclosure1 disruption1 modification1 or de/ruction (-- 7i7 in=mation collect$ or ma9ta9$ by or on behalf ( a ,/ate or local gov]nm5t2 or 7ii7 in=mation sy/ems us$ or op]at$ by an ag5cy or by a contractor ( a ,/ate or local gov]nm5t or o!r organization on behalf ( a ,/ate or local gov]nm5t2 7,c7 9 consultation ) ,/ate & local gov]nm5ts1 provide & p]iodically update via a web portal tools1 products1 res\rces1 policies1 guidel9es1 & proc$ures relat$ to in=mation security2 7,d7 "w ) s5ior ,/ate & local gov]nm5t (ficials1 includ+ ,/ate & local ,*ief ,in=mation ,(fic]s1 ?r\gh national associations to coord9ate a nationwide ef=t to ensure effective implem5tation ( tools1 products1 res\rces1 policies1 guidel9es1 & proc$ures relat$ to in=mation security to secure & ensure ! resili5cy ( ,/ate & local in=mation sy/ems2 7,e7 provide1 ^u reque/1 op]ational & te*nical cyb]security tra9+ to ,/ate & local gov]nm5t & fusion c5t] analy/s & op]ators to address cyb]security risks or incid5ts2 7,f7 provide1 9 coord9ation ) ! ,*ief ,privacy ,(fic] & ! ,*ief ,civil ,rights & ,civil ,lib]ties ,(fic] ( ! ,dep>tm5t1 privacy & civil lib]ties tra9+ to ,/ate & local gov]nm5ts relat$ to cyb]security2 7,g7 provide1 ^u reque/1 op]ational & te*nical assi/ance to ,/ate & local gov]nm5ts to implem5t tools1 products1 res\rces1 policies1 guidel9es1 & proc$ures on in=mation security by-- 7i7 deploy+ te*nology to assi/ su* ,/ate or local gov]nm5t to cont9u\sly diagnose & mitigate aga9/ cyb] ?reats & vuln]abilities1 ) or )\t reimbursem5t2 7ii7 compil+ & analyz+ data on ,/ate & local in=mation security2 & 7iii7 develop+ & conduct+ t>get$ op]ational evaluations1 includ+ ?reat & vuln]ability assessm5ts1 on ! in=mation sy/ems ( ,/ate & local gov]nm5ts2 7,h7 assi/ ,/ate & local gov]nm5ts to develop policies & proc$ures = coord9at+ vuln]ability disclosures1 to ! ext5t practicable1 consi/5t ) int]national & national /&>ds 9 ! in=mation te*nology indu/ry1 includ+ /&>ds develop$ by ! ,national ,in/itute ( ,/&>ds & ,te*nology2 & 7,i7 ensure t ,/ate & local gov]nm5ts1 z appropriate1 are made aw>e ( ! tools1 products1 res\rces1 policies1 guidel9es1 & proc$ures on in=mation security develop$ by ! ,dep>tm5t & o!r appropriate ,f$]al dep>tm5ts & ag5cies = ensur+ ! security & resili5cy ( ,f$]al civilian in=mation sy/ems4 7#b7 ,tra9+ ,privacy & civil lib]ties tra9+ provid$ pursuant to subp>agraph 7,f7 ( p>agraph 7#a7 %all include processes1 me?ods1 & in=mation t-- 7,a7 are consi/5t ) ! ,dep>tm5t's ,fair ,in=mation ,practice ,pr9ciples develop$ pursuant to section #eeb;a ( title #e1 ,unit$ ,/ates ,code 7commonly ref]r$ to z ! ,privacy ,act ( #aigd or ! ,privacy ,act72 7,b7 reasonably limit1 to ! greate/ ext5t practicable1 ! receipt1 ret5tion1 use1 & disclosure ( in=mation relat$ to cyb]security risks & incid5ts associat$ ) specific p]sons t is n necess>y1 = cyb]security purposes1 to protect an in=mation sy/em or network ( in=mation sy/ems f cyb]security risks or to mitigate cyb]security risks & incid5ts 9 a timely mann]2 7,c7 m9imize any impact on privacy & civil lib]ties2 7,d7 provide data integrity ?r\gh ! prompt removal & de/ruction ( obsolete or errone\s names & p]sonal in=mation t is unrelat$ to ! cyb]security risk or incid5t in=mation %>$ & reta9$ by ! ,c5t] 9 accordance ) ?is section2 7,e7 include requirem5ts to safegu>d cyb] ?reat indicators & def5sive measures reta9$ by ! ,c5t]1 includ+ in=mation t is propriet>y or bus9ess-s5sitive t may be us$ to id5tify specific p]sons f unau?oriz$ access or acquisition2 7,f7 protect ! confid5tiality ( cyb] ?reat indicators & def5sive measures associat$ ) specific p]sons to ! greate/ ext5t practicable2 & 7,g7 ensure all relevant con/itutional1 legal1 & privacy protections are obs]v$1 includ+ t in=mation obta9$ f ef=ts to address cyb]security risks & incid5ts is us$ only = su* purposes1 or z specifically au?oriz$ by law4 4 7b7 ,congressional ov]sight ,n lat] ?an #b ye>s aft] ! date ( enactm5t ( ?is ,act1 ! national cyb]security & communications integration c5t] ( ! ,dep>tm5t ( ,homel& ,security %all provide to ! ,committee on ,homel& ,security ( ! ,h\se ( ,repres5tatives & ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate in=mation on ! activities & effectiv5ess ( su* activities "u subsection 7n7 ( section #bbg ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #adh71 z add$ by subsection 7a7 ( ?is section1 on ,/ate & local in=mation security4 ,! c5t] %all seek fe$back f ,/ate & local gov]nm5ts reg>d+ ! effectiv5ess ( su* activities & include su* fe$back 9 ! in=mation requir$ to be provid$ "u ?is subsection4