,i #aafth ,,congress #ast ,session ,h4 ,r4 #aige ,,in ,,the ,,house ,,of ,,representatives ,march #bh1 #bjai,mr4 ,katko 7for himself1 ,mr4 ,newhouse1 ,mr4 ,fitzpatrick1 and ,mr4 ,lipinski7 introduced the following bill2 which was referred to the ,committee on ,homeland ,security1 and in addition to the ,committees on ,energy and ,commerce1 and ,oversight and ,reform1 for a period to be subsequently determined by the ,speaker1 in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned ,a ,,bill ,to establish in the ,cybersecurity and ,infrastructure ,security ,agency of the ,department of ,homeland ,security a ,chief ,information ,security ,officer ,advisory ,committee4 #a4 ,short title ,this ,act may be cited as the ,cybersecurity ,advisory ,committee ,authorization ,act of #bjai4 #b4 ,cybersecurity ,advisory ,committee 7a7 ,in general ,subtitle ,a of title ,,xxii of the ,homeland ,security ,act of #bjjb is amended by adding at the end the following new section3 #bbae4 ,cybersecurity ,advisory ,committee 7a7 ,establishment ,the ,secretary shall establish within the ,cybersecurity and ,infrastructure ,security ,agency a ,cybersecurity ,advisory ,committee4 7b7 ,duties 7#a7 ,in general ,the ,advisory ,committee may advise1 consult with1 report to1 and make recommendations to the ,director of ,cybersecurity and ,infrastructure ,security on the development1 refinement1 and implementation of policies1 programs1 rulemakings1 planning1 training1 and security directives pertaining to the mission of the ,cybersecurity and ,infrastructure ,security ,agency4 7#b7 ,recommendations 7,a7 ,in general ,the ,advisory ,committee shall develop1 at the request of the ,director1 recommendations for improvements to the cybersecurity mission of the ,cybersecurity and ,infrastructure ,security ,agency4 7,b7 ,recommendations of subcommittees ,recommendations agreed upon by the subcommittees established under subsection 7d7 for any year shall be approved by the ,advisory ,committee before the ,advisory ,committee submits to the ,director the annual report under paragraph 7#d7 for that year4 7#c7 ,periodic reports ,the ,advisory ,committee shall periodically submit to the ,director-- 7,a7 reports on matters identified by the ,director2 and 7,b7 reports on other matters identified by a majority of the members of the ,advisory ,committee4 7#d7 ,annual report ,the ,advisory ,committee shall submit to the ,director an annual report providing information on the activities1 findings1 and recommendations of the ,advisory ,committee1 including its subcommittees1 for the preceding year4 ,not later than six months after the date that the ,director receives an annual report for a year1 the ,director shall publish a public version of the report describing the activities of the ,advisory ,committee and such related matters as would be informative to the public during that year1 consistent with section #eeb7;b7 of title #e1 ,united ,states ,code4 7#e7 ,feedback ,not later than #ij days after receiving any recommendation submitted by the ,advisory ,committee under paragraph 7#b71 7#c71 or 7#d71 the ,director shall respond in writing to the ,advisory ,committee with feedback on the recommendation4 ,such a response shall include-- 7,a7 with respect to any recommendation with which the ,director concurs1 an action plan to implement the recommendation2 and 7,b7 with respect to any recommendation with which the ,director does not concur1 a justification for why the ,director does not plan to implement the recommendation4 7#f7 ,congressional notification ,for each fiscal quarter beginning after the date of the enactment of this section1 the ,director shall provide to the ,committee on ,homeland ,security and ,governmental ,affairs and the ,committee on ,appropriations of the ,senate and the ,committee on ,homeland ,security and the ,committee on ,appropriations of the ,house of ,representatives a briefing on feedback from the ,advisory ,committee4 7c7 ,membership 7#a7 ,appointment 7,a7 ,in general ,not later than #ahj days after the date of the enactment of this ,act1 the ,director shall appoint the members of the ,advisory ,committee4 7,b7 ,composition ,the membership of the ,advisory ,committee shall consist of not more than #ce individuals1 each of whom represent a category referred to in subparagraph 7,c77i74 7,c7 ,representation 7i7 ,in general ,the membership of the ,advisory ,committee shall include representatives of ,state and local governments and of a broad range of industries1 including the following3 7,i7 ,defense4 7,,ii7 ,education4 7,,iii7 ,financial services4 7,,iv7 ,healthcare4 7,v7 ,manufacturing4 7,,vi7 ,media and entertainment4 7,,vii7 ,chemicals4 7,,viii7 ,retail4 7,,ix7 ,transportation4 7,x7 ,energy4 7,,xi7 ,information ,technology4 7,,xii7 ,communications4 7,,xiii7 ,other relevant fields identified by the ,director4 7ii7 ,prohibition ,not more than three members may represent any one category under clause 7i74 7#b7 ,term of office 7,a7 ,terms ,the term of each member of the ,advisory ,committee shall be two years1 but a member may continue to serve until a successor is appointed4 7,b7 ,removal ,the ,director may review the participation of a member of the ,advisory ,committee and remove such member for cause at any time4 7,c7 ,reappointment ,a member of the ,advisory ,committee may be reappointed for an unlimited number of terms4 7#c7 ,delegation of responsibilities ,a member of the ,advisory ,committee may delegate that member's responsibilities under this section to another individual1 with the exception of access to protected information and classified information under paragraph 7#f74 7#d7 ,prohibition on compensation ,the members of the ,advisory ,committee may not receive pay or benefits from the ,united ,states ,government by reason of their service on the ,advisory ,committee4 7#e7 ,meetings 7,a7 ,in general ,the ,director shall require the ,advisory ,committee to meet at least quarterly1 and may convene additional meetings as necessary4 7,b7 ,public meetings ,at least one of the meetings referred to in subparagraph 7,a7 shall be open to the public4 7,c7 ,attendance ,the ,advisory ,committee shall maintain a record of the persons present at each meeting4 7#f7 ,member access to classified and protected information 7,a7 ,in general ,not later than #fj days after the date on which a member is first appointed to the ,advisory ,committee and before the member is granted access to any classified information or protected information1 the ,director shall determine if there is cause for such member to be restricted from reviewing1 discussing1 or possessing such information4 7,b7 ,access 7i7 ,protected information ,if the ,director does not restrict a member from reviewing1 discussing1 or possessing sensitive information under subparagraph 7,a7 and the member voluntarily signs a nondisclosure agreement with respect to protected information1 the member may be granted access to protected information that the ,director determines is relevant to such member's service on the ,advisory ,committee4 7ii7 ,classified information ,access to classified materials shall be managed in accordance with ,executive ,order ,no4 #acebf of ,december #bi1 #bjji 7#ge ,fed4 ,reg #gjg71 or any subsequent corresponding ,executive ,order4 7,c7 ,protections ,a member of the ,advisory ,committee shall agree1 as a condition of such membership1 to protect all classified information in accordance with the applicable requirements for the particular level of classification of such information and to protect all protected information appropriately4 7,d7 ,protected information defined ,in this section1 the term protected information means-- 7i7 information specifically exempted from disclosure by statute or regulation2 7ii7 trade secrets and commercial or financial information obtained from a person and privileged or confidential2 7iii7 deliberative process privileged information2 7iv7 personally identifiable information1 the disclosure of which would constitute an invasion of personal privacy2 7v7 records containing law enforcement sensitive information2 and 7vi7 other categories of information1 as determined by the ,director4 7#g7 ,chairperson ,the ,advisory ,committee shall select1 from among the members of the ,advisory ,committee-- 7,a7 a member to serve as chairperson of the ,advisory ,committee2 and 7,b7 a member to serve as chairperson of each subcommittee of the ,advisory ,committee established under subsection 7d74 7d7 ,subcommittees 7#a7 ,in general ,the ,director and the ,advisory ,committee shall establish subcommittees within the ,advisory ,committee to address cybersecurity issues1 including relating to the following3 7,a7 ,information exchange4 7,b7 ,critical infrastructure4 7,c7 ,risk management4 7,d7 ,public and private partnerships4 7#b7 ,additional subcommittees ,in addition to the subcommittees established pursuant to paragraph 7#a71 the ,advisory ,committee chairperson1 in coordination with the ,director1 may establish within the ,advisory ,committee additional subcommittees that the ,director and ,advisory ,committee determine to be necessary4 7#c7 ,meetings and reporting ,each subcommittee shall meet at least bimonthly1 and submit to the ,advisory ,committee for inclusion in the annual report required under subsection 7b77#d7 information1 including activities1 findings1 and recommendations1 regarding subject matter considered by the subcommittee4 7#d7 ,subject matter experts ,the chair of the ,advisory ,committee shall appoint members to subcommittees and shall ensure that each member appointed to a subcommittee has subject matter expertise relevant to the subject matter of the subcommittee4 7e7 ,nonapplicability of ,,faca ,the ,federal ,advisory ,committee ,act 7#e ,u4,s4,c4 ,app47 shall not apply to the ,advisory ,committee and its subcommittees4 4 7b7 ,clerical amendment ,the table of contents in section #a7;b7 of such ,act is amended by inserting after the item relating to section #bbad the following new item3 #bbae4 ,cybersecurity ,advisory ,committee4 4