,i  #aafth ,,congress  #ast ,session    
,h4 ,r4 #ecid  ,,in ,,the ,,house ,,of  
,,representatives  ,december #aa1       
#bjai,mr4 ,taylor 7for himself1 ,mr4    
,rogers of ,alabama1 ,mr4 ,hurd of      
,texas1 ,mr4 ,panetta1 ,mr4 ,green of   
,texas1 ,mr4 ,guest1 and ,ms4 ,slotkin7 
introduced the following bill2 which was
 referred to the ,committee on ,homeland
 ,security1 and in addition to the      
,committee on ,oversight and ,reform1   
for a period to be subsequently         
determined by the ,speaker1 in each case
 for consideration of such provisions as
 fall within the jurisdiction of the    
committee concerned  ,a ,,bill  ,to     
amend the ,homeland ,security ,act of   
#bjjb to require certain coordination   
between the ,department of ,homeland    
,security and ,federal and non-,federal 
entities relating to cybersecurity risks
 and incidents1 and for other purposes4 
#a4 ,short title ,this ,act may be cited
 as the ,strengthening ,state and ,local
 ,cybersecurity ,defenses ,act4  #b4    

,cooperation relating to cybersecurity  
risks and incidents ,subtitle ,a of     
title ,,xxii of the ,homeland ,security 
,act of #bjjb 7#f ,u4,s4,c4 #feb et     
seq47 is amended--  7#a7 in section     
#bbja 7#f ,u4,s4,c4 #fea7-- 7,a7 by     
redesignating paragraphs 7#d71 7#e71 and
 7#f7 as paragraphs 7#e71 7#f71 and     
7#g71 respectively2 and  7,b7 by        
inserting after paragraph 7#c7 the      
following new paragraph3  7#d7 ,entity  
,the term entity includes--  7,a7 an    
association1 corporation1 whether       
for-profit or nonprofit1 partnership1   
proprietorship1 organization1           
institution1 establishment1 or          
individual1 whether domestic or foreign2
  7,b7 a government agency or other     
governmental entity1 whether domestic or
 foreign1 including ,state1 local1      
,tribal1 and territorial government     
entities2 and  7,c7 the general public4 
2  7#b7 in section #bbji of the         
,homeland ,security ,act of #bjjb 7#f   
,u4,s4,c4 #fei71 by adding at the end   

the following new subsection3  7n7      
,coordination ,the ,director shall1 to  
the extent practicable1 and in          
coordination as appropriate with        
,federal and non-,federal entities1 such
 as the ,multi-,state ,information      
,sharing and ,analysis ,center--  7#a7  
conduct exercises with ,federal and     
non-,federal entities2  7#b7 provide    
operational and technical cybersecurity 
training related to cyber threat        
indicators1 defensive measures1         
cybersecurity risks1 and incidents to   
,federal and non-,federal entities to   
address cybersecurity risks or          
incidents1 with or without              
reimbursement2  7#c7 assist ,federal and
 non-,federal entities1 upon request1 in
 sharing cyber threat indicators1       
defensive measures1 cybersecurity risks1
 and incidents from and to the ,federal 
,government as well as among ,federal   
and non-,federal entities1 in order to  
increase situational awareness and help 
prevent incidents2  7#d7 provide        

,federal and non-,federal entities      
timely notifications containing specific
 incident and malware information that  
may affect such entities or individuals 
with respect to whom such entities have 
a relationship2  7#e7 provide and       
periodically update via a web portal and
 other means tools1 products1 resources1
 policies1 guidelines1 controls1        
procedures1 and other cybersecurity     
standards and best practices and        
procedures related to information       
security2  7#f7 work with senior        
,federal and non-,federal officials1    
including ,state and local ,chief       
,information ,officers1 senior election 
officials1 and through national         
associations1 to coordinate a nationwide
 effort to ensure effective             
implementation of tools1 products1      
resources1 policies1 guidelines1        
controls1 procedures1 and other         
cybersecurity standards and best        
practices and procedures related to     
information security to secure and      

ensure the resiliency of ,federal and   
non-,federal information systems1       
including election systems2  7#g7       
provide1 upon request1 operational and  
technical assistance to ,federal and    
non-,federal entities to implement      
tools1 products1 resources1 policies1   
guidelines1 controls1 procedures1 and   
other cybersecurity standards and best  
practices and procedures related to     
information security1 including by1 as  
appropriate1 deploying and sustaining   
cybersecurity technologies1 such as an  
intrusion detection capability1 to      
assist such ,federal and non-,federal   
entities in detecting cybersecurity     
risks and incidents2  7#h7 assist       
,federal and non-,federal entities in   
developing policies and procedures for  
coordinating vulnerability disclosures1 
to the extent practicable1 consistent   
with international and national         
standards in the information technology 
industry2  7#i7 ensure that ,federal and
 non-,federal entities1 as appropriate1 

are made aware of the tools1 products1  
resources1 policies1 guidelines1        
controls1 procedures1 and other         
cybersecurity standards and best        
practices and procedures related to     
information security developed by the   
,department and other appropriate       
,federal entities for ensuring the      
security and resiliency of civilian     
information systems2 and  7#aj7 promote 
cybersecurity education and awareness   
through engagements with ,federal and   
non-,federal entities4  4