,,ii #aaf? ,,congress #a/ ,session ,s4 #ajfe ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,april #h1 #bjai,mr4 ,w>n] 7= himself & ,mr4 ,g>dn]7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ,a ,,bill ,to provide grants to assi/ ,/ates 9 develop+ & implem5t+ plans to address cyb]security ?reats or vuln]abilities1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,/ate ,cyb] ,resili5cy ,act4 #b4 ,e/abli%m5t ( cyb] resili5cy grant program 7a7 ,e/abli%m5t ,!re is e/abli%$ ! ,/ate ,cyb] ,resili5cy ,grant ,program to assi/ ,/ate1 local1 & tribal gov]nm5ts 9 prev5t+1 prep>+ =1 protect+ aga9/1 & respond+ to cyb] ?reats1 :i* %all be adm9i/]$ by ! ,adm9i/rator4 7b7 ,eligibility ,ea* ,/ate %all be eligible to apply = grants "u ! ,program4 7c7 ,grants au?oriz$ = ea* ,/ate ,subject to ! funds available "u a fund+ allocation det]m9$ "u subsection 7f7 = a ,/ate1 ! ,secret>y ( ,homel& ,security may aw>d to ! ,/ate-- 7#a7 up to #b plann+ grants "u subsection 7e7 to develop or revise a cyb] resili5cy plan2 & 7#b7 up to #b implem5tation grants "u subsection 7f7 to implem5t an active cyb] resili5cy plan4 7d7 ,approval ( cyb] resili5cy plans 7#a7 ,9 g5]al ,! ,secret>y %all approve a cyb] resili5cy plan submitt$ by a ,/ate if ! ,secret>y det]m9es1 aft] consid]+ ! recomm5dations ( ! ,review ,committee e/abli%$ "u subsection 7i71 t ! plan meets all ( ! foll[+ crit]ia3 7,a7 ,! plan incorporates1 to ! ext5t practicable1 any exi/+ plans ( su* ,/ate to protect aga9/ cyb]security ?reats or vuln]abilities4 7,b7 ,! plan is design$ to a*ieve ea* ( ! foll[+ objectives1 ) respect to ! ess5tial functions ( su* ,/ate3 7i7 ,enhanc+ ! prep>ation1 response1 & resili5cy ( comput] networks1 indu/rial control sy/ems1 & communications sy/ems p]=m+ su* functions aga9/ cyb]security ?reats or vuln]abilities4 7ii7 ,implem5t+ a process ( cont9u\s cyb]security vuln]ability assessm5ts & ?reat mitigation practices to prev5t ! disruption ( su* functions by an incid5t )9 ! ,/ate4 7iii7 ,ensur+ t entities p]=m+ su* functions )9 ! ,/ate adopt g5]ally recogniz$ be/ practices & me?odologies ) respect to cyb]security1 su* z ! practices provid$ 9 ! cyb]security framework develop$ by ! ,national ,in/itute ( ,/&>ds & ,te*nology4 7iv7 ,mitigat+ tal5t gaps 9 ! ,/ate gov]nm5t cyb]security work=ce1 enhanc+ recruitm5t & ret5tion ef=ts = su* work=ce1 & bol/]+ ! k1 skills1 & abilities ( ,/ate gov]nm5t p]sonnel to protect aga9/ cyb]security ?reats & vuln]abilities4 7v7 ,protect+ public safety answ]+ po9ts & o!r em]g5cy communications & data networks f cyb]security ?reats or vuln]abilities4 7vi7 ,ensur+ cont9uity ( communications & data networks betwe5 entities p]=m+ su* functions )9 ! ,/ate1 9 ! ev5t ( a cata/rophic disruption ( su* communications or networks4 7vii7 ,acc\nt+ = & mitigat+1 to ! greate/ degree possible1 cyb]security ?reats or vuln]abilities relat$ to critical infra/ructure or key res\rces1 ! degradation ( :i* may impact ! p]=mance ( su* functions )9 ! ,/ate or ?reat5 public safety4 7viii7 ,provid+ appropriate communications capabilities to ensure cyb]security intellig5ce in=mation-%>+ & ! comm& & coord9ation capabilities among entities p]=m+ su* functions4 7ix7 ,develop+ & coord9at+ /rategies ) respect to cyb]security ?reats or vuln]abilities 9 consultation )-- 7,i7 neighbor+ ,/ates or memb]s ( an in=mation %>+ & analysis organization2 & 7,,ii7 z applicable1 neighbor+ c\ntries4 7#b7 ,duration ( approval 7,a7 ,initial duration ,an approval "u p>agraph 7#a7 %all be initially effective = ! #b-ye> p]iod beg9n+ on ! date ( ! det]m9ation describ$ 9 su* p>agraph4 7,b7 ,annual ext5sion ,! ,secret>y may annually ext5d su* approval = a #a-ye> p]iod1 if ! ,secret>y det]m9es1 aft] consid]+ ! recomm5dations ( ! ,review ,committee1 t ! plan cont9ues to meet ! crit]ia describ$ 9 p>agraph 7#a7 aft] ! ,/ate makes su* revisions z ! ,secret>y may det]m9e to be necess>y4 7#c7 ,ess5tial functions ,= purposes ( ?is subsection1 ! t]m ess5tial functions includes1 ) respect to a ,/ate1 ^? functions t enhance ! cyb]security po/ure ( ! ,/ate1 local & tribal gov]nm5ts ( ! ,/ate1 & ! public s]vices !y provide4 7e7 ,plann+ grants 7#a7 ,initial plann+ grant ,! ,secret>y %all require1 z a condition ( aw>d+ an initial plann+ grant1 t ! ,/ate seek+ ! grant-- 7,a7 agrees to use ! funds to develop a cyb] resili5cy plan design$ to meet ! crit]ia describ$ 9 subsection 7d77#a72 & 7,b7 submits an application includ+ su* in=mation z ! ,secret>y may det]m9e to be necess>y4 7#b7 ,eligibility = initial plann+ grant ,a ,/ate %all n be eligible to receive an initial plann+ grant aft] ! date on :i* ! ,/ate fir/ submits a cyb] resili5cy plan to ! ,secret>y = a det]m9ation "u subsection 7d77#a74 7#c7 ,additional plann+ grant ,! ,secret>y may aw>d an additional plann+ grant to a ,/ate if ! ,/ate agrees to use ! funds to revise a cyb] resili5cy plan 9 ord] to receive an ext5sion 9 accordance ) subsection 7d77#b77;,b71 & submits an application includ+ su* in=mation z ! ,secret>y may det]m9e to be necess>y4 7#d7 ,limitations on numb] & tim+ ( grants ,a ,/ate %all n be eligible to receive-- 7,a7 m ?an #b plann+ grants "u ?is subsection2 or 7,b7 an additional plann+ grant = ! fiscal ye> foll[+ ! fiscal ye> = :i* x receives an initial plann+ grant4 7f7 ,implem5tation grants 7#a7 ,application requirem5ts ,! ,secret>y %all require1 z a condition ( aw>d+ a bi5nial implem5tation grant1 t ! ,/ate seek+ ! grant submits an application includ+ ! foll[+3 7,a7 ,a proposal1 includ+ a description & timel9e1 ( ! activities to be fund$ by ! grant z describ$ by a cyb] resili5cy plan ( ! ,/ate approv$ "u subsection 7d74 7,b7 ,a description ( h[ ea* activity propos$ to be fund$ by ! grant w\ld a*ieve "o or m ( ! objectives describ$ 9 subsection 7d77#a77;,b74 7,c7 ,a description1 if applicable1 ( h[ any prior bi5nial implem5tation grant aw>d$ "u ?is section 0 sp5t1 & to :at ext5t ! crit]ia describ$ 9 subsection 7d77#a7 7 met4 7,d7 ,! %>e ( any am\nts aw>d$ z a bi5nial implem5tation grant propos$ to be di/ribut$ to local or tribal gov]nm5ts )9 su* ,/ate4 7,e7 ,su* o!r in=mation z ! ,secret>y may det]m9e to be necess>y 9 consultation ) ! *ief in=mation (fic]1 em]g5cy manag]s1 & s5ior public safety (ficials ( ! ,/ate4 7#b7 ,approval ( application ,! ,secret>y %all consid] ! recomm5dations ( ! ,review ,committee 9 approv+ or disapprov+ an application = a bi5nial implem5tation grant4 7#c7 ,di/ribution to local & tribal gov]nm5ts 7,a7 ,9 g5]al ,n lat] ?an #de days aft] ! date t a bi5nial implem5tation grant is aw>d$1 n less ?an #ej p]c5t ( any %>e propos$ "u p>agraph 7#a77;,d7 %all be di/ribut$ to local or tribal gov]nm5ts1 9 ! same mann] t am\nts aw>d$ "u section #bjjd ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fje7 are di/ribut$ to su* gov]nm5ts1 except t-- 7i7 no su* di/ribution may be made to a f$]ally recogniz$ ,indian tribe t is a ,/ate "u subsection 7k77#aa77;,b72 & 7ii7 9 apply+ section #bjjd7;c77#a7 ( su* ,act ) respect to di/ributions "u ?is subp>agraph1 #ajj p]c5t %all be sub/itut$ = #hj p]c5t ea* place t t]m appe>s4 7,b7 ,consultation ,9 det]m9+ h[ an implem5tation grant is di/ribut$ )9 a ,/ate1 ! ,/ate %all consult ) local & regional *ief in=mation (fic]1 em]g5cy manag]s1 & s5ior public safety (ficials ( ! ,/ate4 7#d7 ,competitive aw>d ,except z provid$ 9 subsection 7h71 bi5nial implem5tation grants %all be aw>d$-- 7,a7 exclusively on a competitive basis2 & 7,b7 bas$ on ! recomm5dations ( ! ,review ,committee4 7#e7 ,limitation on numb] ( grants ,! ,secret>y may aw>d to a ,/ate n m ?an #b bi5nial implem5tation grants "u ?is section4 7g7 ,use ( grant funds 7#a7 ,limitations ,any grant aw>d$ "u ?is section %all supplem5t & n supplant ,/ate or local funds or1 z applicable1 funds suppli$ by ! ,bureau ( ,indian ,affairs1 & may n be us$-- 7,a7 to provide any ,f$]al co/-%>+ contribution on behalf ( a ,/ate2 or 7,b7 = any recreational or social purpose4 7#b7 ,approv$ activities = implem5tation grants ,a ,/ate or a gov]nm5t entity t receives funds ?r\gh a bi5nial implem5tation grant may use su* funds = "o or m ( ! foll[+ activities1 to ! ext5t t su* activities are propos$ "u subsection 7f77#a77;,a73 7,a7 ,support+ or enhanc+ in=mation %>+ & analysis organizations4 7,b7 ,implem5t+ or coord9at+ sy/ems & s]vices t use cyb] ?reat indicators 7z su* t]m is def9$ 9 section #ajb ( ! ,cyb]security ,in=mation ,%>+ ,act ( #bjae 7#f ,u4,s4,c4 #aeja77 to address cyb]security ?reats or vuln]abilities4 7,c7 ,support+ d$icat$ cyb]security & communications coord9ation plann+1 includ+ ! coord9ation (-- 7i7 em]g5cy managem5t elem5ts ( su* ,/ate2 7ii7 ,national ,gu>d units1 z appropriate2 7iii7 entities associat$ ) critical infra/ructure or key res\rces2 7iv7 in=mation %>+ & analysis organizations2 7v7 public safety answ]+ po9ts2 or 7vi7 nongov]nm5tal organizations engag$ 9 cyb]security rese>* z a =mally designat$ in=mation analysis & %>+ organization4 7,d7 ,e/abli%+ programs1 su* z s*ol>%ips or appr5tice%ips1 to provide f9ancial assi/ance to ,/ate resid5ts :o-- 7i7 pursue =mal education1 tra9+1 & indu/ry-recogniz$ c]tifications = c>e]s 9 cyb]security z id5tifi$ by ! ,national ,initiative = ,cyb]security ,education2 & 7ii7 commit to work+ = ,/ate gov]nm5t = a specifi$ p]iod ( "t4 7h7 ,fund+ allocations 7#a7 ,9 g5]al ,f any am\nt appropriat$ = a fiscal ye> t is n res]v$ = use by ! ,secret>y 9 c>ry+ out ?is section1 ! ,secret>y %all allocate ! entire am\nt among ! ,/ates 7includ+ ! ,di/rict ( ,columbia7 eligible = grants "u ?is section tak+ into consid]ation ! factors specifi$ 9 p>agraph 7#b7 & consi/5t ) ! foll[+3 7,a7 ,allocations = ! sev]al ,/ates ,( ! am\nt subject to allocation1 a fund+ allocation = any ( su* ,/ates %all be-- 7i7 n less ?an #j4jja p]c5t1 ) respect to an initial plann+ grant1 & n m ?an #j4jja p]c5t1 ) respect to any additional plann+ grants2 & 7ii7 n less ?an #j4e p]c5t & n m ?an #c p]c5t1 ) respect to bi5nial implem5tation grants4 7,b7 ,allocations = ! t]ritories & possessions ,( ! am\nt subject to allocation1 a fund+ allocation = any ( ! t]ritories & possessions ( ! ,unit$ ,/ates eligible = grants "u ?is section %all be-- 7i7 n less ?an #j4jja p]c5t1 ) respect to an initial plann+ grant1 & n m ?an #j4jja p]c5t1 ) respect to any additional plann+ grant2 & 7ii7 n less ?an #j4a p]c5t & n m ?an #a p]c5t1 ) respect to bi5nial implem5tation grants4 7#b7 ,consid]ations = fund+ allocations ,9 det]m9+ a fund+ allocation "u p>agraph 7#a7 = a ,/ate1 ! ,secret>y %all consid] ea* ( ! foll[+ factors3 7,a7 ,! consid]ations describ$ 9 section #ahji7;h77#a7 ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #egi7;h77#a77 ) respect to ! ,/ate1 & ! degree ( exposure ( ! ,/ate & protect$ gov]nm5t entities )9 ! ,/ate to ?reats1 vuln]abilities1 or consequ5ces result+ f cyb]security risks or incid5ts4 7,b7 ,! degree ( exposure ( ! ,/ate & protect$ gov]nm5t entities )9 ! ,/ate to ?reats1 vuln]abilities1 or consequ5ces result+ f cyb]security risks or incid5ts4 7,c7 ,! effectiv5ess (1 relative to evolv+ cyb] ?reats aga9/1 cyb]security assets1 secure communications capabilities1 & data network protections1 ( ! ,/ate & its p>tn]s4 7,d7 ,! ext5t to :i* ! ,/ate is vuln]able to cyb] ?reats because x has n implem5t$ be/ practices su* z ! cyb]security framework develop$ by ! ,national ,in/itute ( ,/&>ds & ,te*nology4 7,e7 ,! ext5t to :i* a ,/ate gov]nm5t may face l[ cyb]security work=ce supply & high cyb]security work=ce dem&1 z id5tifi$ by ! ,national ,in/itute ( ,/&>ds & ,te*nology4 7i7 ,review ,committee = ,cyb] ,resili5cy ,grants 7#a7 ,e/abli%m5t ,!re is e/abli%$ a committee to be kn[n z ! ,review ,committee = ,cyb] ,resili5cy ,grants 79 ?is section ref]r$ to z ! ,review ,committee74 7#b7 ,consid]ation ( submissions ,! ,secret>y %all =w>d a copy ( ea* cyb] resili5cy plan submitt$ = approval "u subsection 7d77#a71 ea* application = an additional plann+ grant submitt$ "u subsection 7e77#c71 & ea* application = a bi5nial implem5tation grant submitt$ "u subsection 7d77#a7 to ! ,review ,committee = consid]ation "u ?is subsection4 7#c7 ,duties ,! ,review ,committee %all-- 7,a7 promulgate guidance = ! developm5t ( applications = grants "u ?is section2 7,b7 review any plan or application =w>d$ "u p>agraph 7#b72 7,c7 provide to ! ,/ate & to ! ,secret>y ! recomm5dations ( ! ,review ,committee reg>d+ ! approval or disapproval ( su* plan or application &1 if applicable1 possible improvem5ts to su* plan or application2 7,d7 provide to ! ,secret>y an evaluation ( any progress made by a ,/ate 9 implem5t+ an active cyb] resili5cy plan us+ a prior bi5nial implem5tation grant2 & 7,e7 submit to ,congress an annual report on ! progress made 9 implem5t+ active cyb] resili5cy plans4 7#d7 ,memb]%ip 7,a7 ,numb] & appo9tm5t ,! ,review ,committee %all be compos$ ( #ae memb]s appo9t$ by ! ,secret>y z foll[s3 7i7 ,at lea/ #b individuals recomm5d$ to ! ,secret>y by ! ,national ,gov]nors ,association4 7ii7 ,at lea/ #a individual recomm5d$ to ! ,secret>y by ! ,national ,association ( ,/ate ,*ief ,in=mation ,(fic]s4 7iii7 ,at lea/ #a individual recomm5d$ to ! ,secret>y by ! ,national ,gu>d ,bureau4 7iv7 ,at lea/ #a individual recomm5d$ to ! ,secret>y by ! ,national ,association ( ,c\nties4 7v7 ,at lea/ #a individual recomm5d$ to ! ,secret>y by ! ,national ,league ( ,cities4 7vi7 ,n m ?an #i o!r individuals :o h educational & pr(essional exp]i5ce relat$ to cyb]security analysis or policy4 7,b7 ,t]ms ,ea* memb] %all be appo9t$ = a t]m ( #a ye>4 ,any memb] appo9t$ to fill a vacancy occurr+ be=e ! expiration ( ! t]m = :i* ! memb]'s pr$ecessor 0 appo9t$ %all be appo9t$ only = ! rema9d] ( t t]m4 ,a memb] may s]ve aft] ! expiration ( t memb]'s t]m until a successor has tak5 (fice4 ,a vacancy 9 ! ,commission %all be fill$ 9 ! mann] 9 :i* ! orig9al appo9tm5t 0 made4 7,c7 ,pay ,memb]s %all s]ve )\t pay4 7,d7 ,*airp]son2 ,vice ,*airp]son ,! ,secret>y1 or a designee ( ! ,secret>y1 %all s]ve z ! ,*airp]son ( ! ,review ,committee4 ,! ,adm9i/rator ( ! ,f$]al ,em]g5cy ,managem5t ,ag5cy1 or a designee ( ! ,adm9i/rator1 %all s]ve z ! ,vice ,*airp]son ( ! ,review ,committee4 7#e7 ,/aff & exp]ts ,! ,review ,committee may-- 7,a7 appo9t additional p]sonnel z x consid]s appropriate1 )\t reg>d to ! provisions ( title #e1 ,unit$ ,/ates ,code1 gov]n+ appo9tm5ts 9 ! competitive s]vice2 7,b7 fix ! pay ( su* additional p]sonnel1 )\t reg>d to ! provisions ( *apt] #ea & sub*apt] ,,iii ( *apt] #ec ( su* title relat+ to classification & ,g5]al ,s*$ule pay rates2 & 7,c7 procure tempor>y & int]mitt5t s]vices "u section #caji7;b7 ( su* title4 7#f7 ,detailees ,^u reque/ ( ! ,review ,committee1 ! head ( any ,f$]al dep>tm5t or ag5cy may detail1 on a reimbursable basis1 any ( ! p]sonnel ( t dep>tm5t or ag5cy to ! ,commission to assi/ x 9 c>ry+ out ! duties "u ?is ,act4 7#g7 ,f$]al ,advisory ,committee ,act ,! ,f$]al ,advisory ,committee ,act 7#e ,u4,s4,c4 ,app47 %all n apply to ! ,review ,committee4 7#h7 ,t]m9ation ,! au?ority ( ! ,review ,committee %all t]m9ate on ! day aft] ! end ( ! #e-;fiscal-ye> p]iod describ$ 9 subsection 7j74 7j7 ,fund+ ,!re is au?oriz$ to be appropriat$ = grants "u ?is section su* sums z are necess>y = fiscal ye>s #bjbj ?r\gh #bjbe4 7k7 ,def9itions ,9 ?is section3 7#a7 ,active cyb] resili5cy plan ,! t]m active cyb] resili5cy plan means a cyb] resili5cy plan = :i* an approval is 9 effect 9 accordance ) subsection 7d77#b77;,a7 or = :i* ! ,secret>y ext5ds su* approval 9 accordance ) subsection 7d77#b77;,b74 7#b7 ,adm9i/rator ,! t]m ,adm9i/rator means ! ,adm9i/rator ( ! ,f$]al ,em]g5cy ,managem5t ,ag5cy4 7#c7 ,critical infra/ructure ,! t]m critical infra/ructure has ! mean+ giv5 t t]m 9 section #b ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #aja74 7#d7 ,cyb] resili5cy plan ,! t]m cyb] resili5cy plan means1 ) respect to a ,/ate1 a plan t addresses ! cyb]security ?reats or vuln]abilities fac$ by ! ,/ate ?r\gh a /atewide plan & decisionmak+ process to respond to cyb]security risks or incid5ts4 7#e7 ,cyb]security risk ,! t]m cyb]security risk has ! mean+ giv5 t t]m 9 section #bbji ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fei74 7#f7 ,incid5t ,! t]m incid5t has ! mean+ giv5 t t]m 9 section #bbji ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fei74 7#g7 ,in=mation %>+ & analysis organization ,! t]m in=mation %>+ & analysis organization has ! mean+ giv5 t t]m 9 section #bbbb ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fga74 7#h7 ,key res\rces ,! t]m key res\rces has ! mean+ giv5 t t]m 9 section #b ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #aja74 7#i7 ,program ,! t]m ,program means ! ,/ate ,cyb] ,resili5cy ,grant ,program e/abli%$ by ?is section4 7#aj7 ,public safety answ]+ po9ts ,! t]m public safety answ]+ po9ts has ! mean+ giv5 t t]m 9 section #bbb7;h7 ( ! ,communications ,act ( #aicd 7#dg ,u4,s4,c4 #bbb7;h774 7#aa7 ,/ate ,! t]m ,/ate-- 7,a7 means ea* ( ! sev]al ,/ates1 ! ,di/rict ( ,colombia1 & ! t]ritories & possessions ( ! ,unit$ ,/ates2 & 7,b7 includes any f$]ally recogniz$ ,indian tribe t notifies ! ,secret>y1 n lat] ?an #abj days aft] ! date ( ! enactm5t ( ?is ,act or n lat] ?an #abj days be=e ! />t ( any fiscal ye> dur+ ! #e-;fiscal-ye> p]iod describ$ 9 subsection 7j71 t ! tribe int5ds to develop a cyb] resili5cy plan & agrees to =feit any di/ribution "u subsection 7f77#c74