#aafth ,,congress #ast ,session ,s4 #ahdf ,,an ,,act ,to amend the ,homeland ,security ,act of #bjjb to provide for engagements with ,state1 local1 ,tribal1 and territorial governments1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,state and ,local ,government ,cybersecurity ,act of #bjai4 #b4 ,amendments to the ,homeland ,security ,act of #bjjb ,subtitle ,a of title ,,xxii of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fea et seq47 is amended-- 7#a7 in section #bbja 7#f ,u4,s4,c4 #fea7-- 7,a7 by redesignating paragraphs 7#d71 7#e71 and 7#f7 as paragraphs 7#e71 7#f71 and 7#g71 respectively2 and 7,b7 by inserting after paragraph 7#c7 the following3 7#d7 ,entity ,the term entity shall include-- 7,a7 an association1 corporation1 whether for-profit or nonprofit1 partnership1 proprietorship1 organization1 institution1 establishment1 or individual1 whether domestic or foreign2 7,b7 a governmental agency or other governmental entity1 whether domestic or foreign1 including ,state1 local1 ,tribal1 and territorial government entities2 and 7,c7 the general public4 2 and 7#b7 in section #bbjb 7#f ,u4,s4,c4 #feb7-- 7,a7 in subsection 7c7-- 7i7 in paragraph 7#aj71 by striking and at the end2 7ii7 by redesignating paragraph 7#aa7 as paragraph 7#ab72 and 7iii7 by inserting after paragraph 7#aj7 the following3 7#aa7 carry out the authority of the ,secretary under subsection 7e77#a77,r72 and 2 and 7,b7 in subsection 7e77#a71 by adding at the end the following3 7,r7 ,to make grants to and enter into cooperative agreements or contracts with ,states1 local1 ,tribal1 and territorial governments1 and other non-,federal entities as the ,secretary determines necessary to carry out the responsibilities of the ,secretary related to cybersecurity and infrastructure security under this ,act and any other provision of law1 including grants1 cooperative agreements1 and contracts that provide assistance and education related to cyber threat indicators1 defensive measures and cybersecurity technologies1 cybersecurity risks1 incidents1 analysis1 and warnings4 2 and 7#c7 in section #bbji 7#f ,u4,s4,c4 #fei7-- 7,a7 in subsection 7c77#f71 by inserting operational and after timely2 7,b7 in subsection 7d77#a77;,e71 by inserting 1 including an entity that collaborates with election officials1 after governments2 and 7,c7 by adding at the end the following3 7n7 ,coordination on cybersecurity for ,federal and non-,federal entities 7#a7 ,coordination ,the ,center shall1 to the extent practicable1 and in coordination as appropriate with ,federal and non-,federal entities1 such as the ,multi-,state ,information ,sharing and ,analysis ,center-- 7,a7 conduct exercises with ,federal and non-,federal entities2 7,b7 provide operational and technical cybersecurity training related to cyber threat indicators1 defensive measures1 cybersecurity risks1 and incidents to ,federal and non-,federal entities to address cybersecurity risks or incidents1 with or without reimbursement2 7,c7 assist ,federal and non-,federal entities1 upon request1 in sharing cyber threat indicators1 defensive measures1 cybersecurity risks1 and incidents from and to the ,federal ,government as well as among ,federal and non-,federal entities1 in order to increase situational awareness and help prevent incidents2 7,d7 provide notifications containing specific incident and malware information that may affect them or their customers and residents2 7,e7 provide and periodically update via a web portal and other means tools1 products1 resources1 policies1 guidelines1 controls1 and other cybersecurity standards and best practices and procedures related to information security2 7,f7 work with senior ,federal and non-,federal officials1 including ,state and local ,chief ,information ,officers1 senior election officials1 and through national associations1 to coordinate a nationwide effort to ensure effective implementation of tools1 products1 resources1 policies1 guidelines1 controls1 and procedures related to information security to secure and ensure the resiliency of ,federal and non-,federal information systems and including election systems2 7,g7 provide1 upon request1 operational and technical assistance to ,federal and non-,federal entities to implement tools1 products1 resources1 policies1 guidelines1 controls1 and procedures on information security1 including by1 as appropriate1 deploying and sustaining cybersecurity technologies1 such as an intrusion detection capability1 to assist those ,federal and non-,federal entities in detecting cybersecurity risks and incidents2 7,h7 assist ,federal and non-,federal entities in developing policies and procedures for coordinating vulnerability disclosures1 to the extent practicable1 consistent with international and national standards in the information technology industry2 7,i7 ensure that ,federal and non-,federal entities1 as appropriate1 are made aware of the tools1 products1 resources1 policies1 guidelines1 controls1 and procedures on information security developed by the ,department and other appropriate ,federal departments and agencies for ensuring the security and resiliency of civilian information systems2 and 7,j7 promote cybersecurity education and awareness through engagements with ,federal and non-,federal entities4 7o7 ,report ,not later than #a year after the date of enactment of this subsection1 and every #b years thereafter1 the ,secretary shall submit to the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate and the ,committee on ,homeland ,security of the ,house of ,representatives a report on the status of cybersecurity measures that are in place1 and any gaps that exist1 in each ,state and in the largest urban areas of the ,united ,states4 4 ,passed the ,senate ,november #ba1 #bjai4,secretary