,,ii #aae? ,,congress #a/ ,session ,s4 #gi ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,janu>y #aj1 #bjag,mr4 ,k+ 7= himself1 ,mr4 ,ris*1 ,mr4 ,he9ri*1 ,ms4 ,coll9s1 & ,mr4 ,crapo7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,en]gy & ,natural ,res\rces ,a ,,bill ,to provide = ! e/abli%m5t ( a pilot program to id5tify security vuln]abilities ( c]ta9 entities 9 ! en]gy sector4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,secur+ ,en]gy ,infra/ructure ,act4 #b4 ,def9itions ,9 ?is ,act3 7#a7 ,cov]$ entity ,! t]m cov]$ entity means an entity id5tifi$ pursuant to section #i7;a7 ( ,executive ,ord] #acfcf ( ,febru>y #ab1 #bjac 7#gh ,f$4 ,reg4 #aagdb7 relat+ to id5tification ( critical infra/ructure :]e a cyb]security incid5t c\ld reasonably result 9 cata/rophic regional or national effects on public heal? or safety1 economic security1 or national security4 7#b7 ,exploit ,! t]m exploit means a s(tw>e tool design$ to take advantage ( a security vuln]ability4 7#c7 ,indu/rial control sy/em 7,a7 ,9 g5]al ,! t]m indu/rial control sy/em means an op]ational te*nology us$ to measure1 control1 or manage indu/rial functions4 7,b7 ,inclusions ,! t]m indu/rial control sy/em includes sup]visory control & data acquisition sy/ems1 di/ribut$ control sy/ems1 & programmable logic or emb$d$ controll]s4 7#d7 ,national ,laboratory ,! t]m ,national ,laboratory has ! mean+ giv5 ! t]m 9 section #b ( ! ,en]gy ,policy ,act ( #bjje 7#db ,u4,s4,c4 #aehja74 7#e7 ,program ,! t]m ,program means ! pilot program e/abli%$ "u section #c4 7#f7 ,secret>y ,! t]m ,secret>y means ! ,secret>y ( ,en]gy4 7#g7 ,security vuln]ability ,! t]m security vuln]ability means any attribute ( h>dw>e1 s(tw>e1 process1 or proc$ure t c\ld enable or facilitate ! defeat ( a security control4 #c4 ,pilot program = secur+ en]gy infra/ructure ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 ! ,secret>y %all e/abli% a #b-ye> control sy/ems implem5tation pilot program )9 ! ,national ,laboratories = ! purposes (-- 7#a7 p>tn]+ ) cov]$ entities 9 ! en]gy sector 7includ+ critical compon5t manufactur]s 9 ! supply *a97 t volunt>ily p>ticipate 9 ! ,program to id5tify new classes ( security vuln]abilities ( ! cov]$ entities2 & 7#b7 rese>*+1 develop+1 te/+1 & implem5t+ te*nology plat=ms & /&>ds1 9 p>tn]%ip ) cov]$ entities1 to isolate & def5d indu/rial control sy/ems ( cov]$ entities f security vuln]abilities & exploits 9 ! mo/ critical sy/ems ( ! cov]$ entities1 includ+-- 7,a7 analog & non-digital control sy/ems2 7,b7 purpose-built control sy/ems2 & 7,c7 physical controls4 #d4 ,work+ gr\p 7a7 ,e/abli%m5t ,! ,secret>y %all e/abli% a work+ gr\p-- 7#a7 to evaluate ! te*nology plat=ms & /&>ds us$ 9 ! ,program "u section #c7b72 & 7#b7 to develop a national cyb]-in=m$ eng9e]+ /rategy to isolate & def5d cov]$ entities f security vuln]abilities & exploits 9 ! mo/ critical sy/ems ( ! cov]$ entities4 7b7 ,memb]%ip ,! work+ gr\p e/abli%$ "u subsection 7a7 %all be compos$ ( n few] ?an #aj memb]s1 to be appo9t$ by ! ,secret>y1 at lea/ #a memb] ( :i* %all repres5t ea* ( ! foll[+3 7#a7 ,! ,dep>tm5t ( ,en]gy4 7#b7 ,! en]gy indu/ry1 includ+ electric utilities & manufactur]s recomm5d$ by ! ,en]gy ,sector coord9at+ c\ncils4 7#c7 7,a7 ,! ,dep>tm5t ( ,homel& ,security2 or 7,b7 ! ,indu/rial ,control ,sy/ems ,cyb] ,em]g5cy ,response ,team4 7#d7 ,! ,nor? ,am]ican ,electric ,reliability ,corporation4 7#e7 ,! ,nucle> ,regulatory ,commission4 7#f7 7,a7 ,! ,(fice ( ! ,director ( ,national ,intellig5ce2 or 7,b7 ! intellig5ce community 7z def9$ 9 section #c ( ! ,national ,security ,act ( #aidg 7#ej ,u4,s4,c4 #cjjc774 7#g7 7,a7 ,! ,dep>tm5t ( ,def5se2 or 7,b7 ! ,assi/ant ,secret>y ( ,def5se = ,homel& ,security & ,am]ica's ,security ,affairs4 7#h7 ,a ,/ate or regional en]gy ag5cy4 7#i7 ,a national rese>* body or academic in/itution4 7#aj7 ,! ,national ,laboratories4 #e4 ,report ,n lat] ?an #b ye>s aft] ! date on :i* funds are fir/ disburs$ "u ! ,program1 ! ,secret>y %all submit to ! appropriate committees ( ,congress a f9al report t-- 7#a7 describes ! results ( ! ,program2 7#b7 includes an analysis ( ! feasibility ( ea* me?od /udi$ "u ! ,program2 & 7#c7 describes ! results ( ! evaluations conduct$ by ! work+ gr\p e/abli%$ "u section #d7;a74 #f4 ,no new regulatory au?ority ,no?+ 9 ?is ,act au?orizes ! ,secret>y or ! head ( any o!r ,f$]al ag5cy to issue new regulations4 #g4 ,exemption f disclosure ,in=mation %>$ by or ) ! ,f$]al ,gov]nm5t or a ,/ate1 tribal1 or local gov]nm5t "u ?is ,act %all be-- 7#a7 deem$ to be volunt>ily %>$ in=mation2 & 7#b7 exempt f disclosure "u any provision ( ,f$]al1 ,/ate1 tribal1 or local fre$om ( in=mation law1 op5 gov]nm5t law1 op5 meet+s law1 op5 records law1 sun%9e law1 or simil> law requir+ ! disclosure ( in=mation or records4 #h4 ,protection f liability 7a7 ,9 g5]al ,a cause ( action aga9/ a cov]$ entity = engag+ 9 ! volunt>y activities au?oriz$ "u section #c-- 7#a7 %all n lie or be ma9ta9$ 9 any c\rt2 & 7#b7 %all be promptly dismiss$ by ! applicable c\rt4 7b7 ,volunt>y activities ,no?+ 9 ?is ,act subjects any cov]$ entity to liability = n engag+ 9 ! volunt>y activities au?oriz$ "u section #c4 #i4 ,au?orization ( appropriations 7a7 ,pilot ,program ,!re is au?oriz$ to be appropriat$ #aj1jjj1jjj to c>ry out section #c4 7b7 ,work+ ,gr\p & ,report ,!re is au?oriz$ to be appropriat$ #a1ejj1jjj to c>ry out sections #d & #e4 7c7 ,availability ,am\nts made available "u subsections 7a7 & 7b7 %all rema9 available until exp5d$4