,,ii #aaf? ,,congress #a/ ,session ,s4 #bccc ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,july #cj1 #bjai,ms4 ,cantwell 7= h]self & ,mr4 ,he9ri*7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,en]gy & ,natural ,res\rces ,a ,,bill ,to provide = enhanc$ en]gy grid security4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,en]gy ,cyb]security ,act ( #bjai4 #b4 ,def9itions ,9 ?is ,act3 7#a7 ,dep>tm5t ,! t]m ,dep>tm5t means ! ,dep>tm5t ( ,en]gy4 7#b7 ,electric utility ,! t]m electric utility has ! mean+ giv5 ! t]m 9 section #c ( ! ,f$]al ,p[] ,act 7#af ,u4,s4,c4 #gif74 7#c7 ,,es-,,isac ,! t]m ,,es-,,isac means ! ,electricity ,sector ,in=mation ,%>+ & ,analysis ,c5t]4 7#d7 ,national ,laboratory ,! t]m ,national ,laboratory has ! mean+ giv5 ! t]m 9 section #b ( ! ,en]gy ,policy ,act ( #bjje 7#db ,u4,s4,c4 #aehja74 7#e7 ,secret>y ,! t]m ,secret>y means ! ,secret>y ( ,en]gy4 #c4 ,enhanc$ grid security 7a7 ,cyb]security = ! en]gy sector rese>*1 developm5t1 & demon/ration program 7#a7 ,9 g5]al ,! ,secret>y1 9 consultation ) appropriate ,f$]al ag5cies1 ! en]gy sector1 ! ,/ates1 & o!r /akehold]s1 %all c>ry out a program-- 7,a7 to develop advanc$ cyb]security applications & te*nologies = ! en]gy sector-- 7i7 to id5tify & mitigate vuln]abilities1 includ+-- 7,i7 dep5d5cies on o!r critical infra/ructure2 & 7,,ii7 impacts f wea!r & fuel supply2 & 7ii7 to advance ! security ( field devices & ?ird-p>ty control sy/ems1 includ+-- 7,i7 sy/ems = g5]ation1 transmission1 di/ribution1 end use1 & m>ket functions2 7,,ii7 specific electric grid elem5ts includ+ advanc$ met]+1 dem& response1 di/ribut$ g5]ation1 & electricity /orage2 7,,iii7 =5sic analysis ( infect$ sy/ems2 & 7,,iv7 secure communications2 7,b7 to lev]age electric grid ar*itecture z a means to assess risks to ! en]gy sector1 includ+ by implem5t+ an all-haz>ds approa* to communications infra/ructure1 control sy/ems ar*itecture1 & p[] sy/ems ar*itecture2 7,c7 to p]=m pilot demon/ration projects ) ! en]gy sector to ga9 exp]i5ce ) new te*nologies2 & 7,d7 to develop work=ce developm5t curricula = en]gy sector-relat$ cyb]security4 7#b7 ,au?orization ( appropriations ,!re is au?oriz$ to be appropriat$ to c>ry out ?is subsection #fe1jjj1jjj = ea* ( fiscal ye>s #bjbj ?r\gh #bjbh4 7b7 ,en]gy sector compon5t te/+ = cyb]resili5ce program 7#a7 ,9 g5]al ,! ,secret>y %all c>ry out a program-- 7,a7 to e/abli% a cyb]te/+ & mitigation program to id5tify vuln]abilities ( en]gy sector supply *a9 products to kn[n ?reats2 7,b7 to ov]see ?ird-p>ty cyb]te/+2 & 7,c7 to develop procurem5t guidel9es = en]gy sector supply *a9 compon5ts4 7#b7 ,au?orization ( appropriations ,!re is au?oriz$ to be appropriat$ to c>ry out ?is subsection #ae1jjj1jjj = ea* ( fiscal ye>s #bjbj ?r\gh #bjbh4 7c7 ,en]gy sector op]ational support = cyb]resili5ce program 7#a7 ,9 g5]al ,! ,secret>y may c>ry out a program-- 7,a7 to enhance & p]iodically te/-- 7i7 ! em]g5cy response capabilities ( ! ,dep>tm5t2 & 7ii7 ! coord9ation ( ! ,dep>tm5t ) o!r ag5cies1 ! ,national ,laboratories1 & private indu/ry2 7,b7 to exp& coop]ation ( ! ,dep>tm5t ) ! intellig5ce communities = en]gy sector-relat$ ?reat collection & analysis2 7,c7 to enhance ! tools ( ! ,dep>tm5t & ,,es-,,isac = monitor+ ! /atus ( ! en]gy sector2 7,d7 to exp& indu/ry p>ticipation 9 ,,es-,,isac2 & 7,e7 to provide te*nical assi/ance to small electric utilities = purposes ( assess+ cyb]maturity level4 7#b7 ,au?orization ( appropriations ,!re is au?oriz$ to be appropriat$ to c>ry out ?is subsection #aj1jjj1jjj = ea* ( fiscal ye>s #bjbj ?r\gh #bjbh4 7d7 ,model+ & assess+ en]gy infra/ructure risk 7#a7 ,9 g5]al ,! ,secret>y %all develop an advanc$ en]gy security program to secure en]gy networks1 includ+ electric1 natural gas1 & oil exploration1 transmission1 & deliv]y4 7#b7 ,security & resili5cy objective ,! objective ( ! program develop$ "u p>agraph 7#a7 is to increase ! functional pres]vation ( ! electric grid op]ations or natural gas & oil op]ations 9 ! face ( natural & human-made ?reats & haz>ds1 includ+ electric magnetic pulse & geomagnetic di/urbances4 7#c7 ,eligible activities ,9 c>ry+ out ! program develop$ "u p>agraph 7#a71 ! ,secret>y may-- 7,a7 develop capabilities to id5tify vuln]abilities & critical compon5ts t pose major risks to grid security if de/roy$ or impair$2 7,b7 provide model+ at ! national level to pr$ict impacts f natural or human-made ev5ts2 7,c7 develop a maturity model = physical security & cyb]security2 7,d7 conduct ex]cises & assessm5ts to id5tify & mitigate vuln]abilities to ! electric grid1 includ+ provid+ mitigation recomm5dations2 7,e7 conduct rese>* h>d5+ solutions = critical compon5ts ( ! electric grid2 7,f7 conduct rese>* mitigation & recov]y solutions = critical compon5ts ( ! electric grid2 & 7,g7 provide te*nical assi/ance to ,/ates & o!r entities = /&>ds & risk analysis4 7#d7 ,au?orization ( appropriations ,!re is au?oriz$ to be appropriat$ to c>ry out ?is subsection #aj1jjj1jjj = ea* ( fiscal ye>s #bjbj ?r\gh #bjbh4 7e7 ,lev]ag+ exi/+ programs ,! programs e/abli%$ "u ?is section %all be c>ri$ out consi/5t )-- 7#a7 ! report ( ! ,dep>tm5t entitl$ ,roadmap to ,a*ieve ,en]gy ,deliv]y ,sy/ems ,cyb]security & dat$ #bjaa2 7#b7 exi/+ programs ( ! ,dep>tm5t2 & 7#c7 any associat$ /rategic framework t l9ks toge!r academic & ,national ,laboratory rese>*]s1 electric utilities1 manufactur]s1 & any o!r relevant private indu/ry organizations1 includ+ ! ,electricity ,sub-sector ,coord9at+ ,c\ncil4 7f7 ,/udy 7#a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 ! ,secret>y1 9 consultation ) ! ,f$]al ,en]gy ,regulatory ,commission & ! ,nor? ,am]ican ,electric ,reliability ,corporation1 %all conduct a /udy to explore alt]native managem5t /ructures & fund+ me*anisms to exp& indu/ry memb]%ip & p>ticipation 9 ,,es-,,isac4 7#b7 ,report ,! ,secret>y %all submit to ! appropriate committees ( ,congress a report describ+ ! results ( ! /udy conduct$ "u p>agraph 7#a74