,,ii ,calendar ,no4 #bfd #aafth ,,congress #ast ,session ,s4 #bccc ,report ,no4 #aaf-add ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,july #cj1 #bjai,ms4 ,cantwell 7for herself and ,mr4 ,heinrich7 introduced the following bill2 which was read twice and referred to the ,committee on ,energy and ,natural ,resources ,october #bc1 #bjai,reported by ,ms4 ,murkowski1 without amendment ,a ,,bill ,to provide for enhanced energy grid security4 #a4 ,short title ,this ,act may be cited as the ,energy ,cybersecurity ,act of #bjai4 #b4 ,definitions ,in this ,act3 7#a7 ,department ,the term ,department means the ,department of ,energy4 7#b7 ,electric utility ,the term electric utility has the meaning given the term in section #c of the ,federal ,power ,act 7#af ,u4,s4,c4 #gif74 7#c7 ,,es-,,isac ,the term ,,es-,,isac means the ,electricity ,sector ,information ,sharing and ,analysis ,center4 7#d7 ,national ,laboratory ,the term ,national ,laboratory has the meaning given the term in section #b of the ,energy ,policy ,act of #bjje 7#db ,u4,s4,c4 #aehja74 7#e7 ,secretary ,the term ,secretary means the ,secretary of ,energy4 #c4 ,enhanced grid security 7a7 ,cybersecurity for the energy sector research1 development1 and demonstration program 7#a7 ,in general ,the ,secretary1 in consultation with appropriate ,federal agencies1 the energy sector1 the ,states1 and other stakeholders1 shall carry out a program-- 7,a7 to develop advanced cybersecurity applications and technologies for the energy sector-- 7i7 to identify and mitigate vulnerabilities1 including-- 7,i7 dependencies on other critical infrastructure2 and 7,,ii7 impacts from weather and fuel supply2 and 7ii7 to advance the security of field devices and third-party control systems1 including-- 7,i7 systems for generation1 transmission1 distribution1 end use1 and market functions2 7,,ii7 specific electric grid elements including advanced metering1 demand response1 distributed generation1 and electricity storage2 7,,iii7 forensic analysis of infected systems2 and 7,,iv7 secure communications2 7,b7 to leverage electric grid architecture as a means to assess risks to the energy sector1 including by implementing an all-hazards approach to communications infrastructure1 control systems architecture1 and power systems architecture2 7,c7 to perform pilot demonstration projects with the energy sector to gain experience with new technologies2 and 7,d7 to develop workforce development curricula for energy sector-related cybersecurity4 7#b7 ,authorization of appropriations ,there is authorized to be appropriated to carry out this subsection #fe1jjj1jjj for each of fiscal years #bjbj through #bjbh4 7b7 ,energy sector component testing for cyberresilience program 7#a7 ,in general ,the ,secretary shall carry out a program-- 7,a7 to establish a cybertesting and mitigation program to identify vulnerabilities of energy sector supply chain products to known threats2 7,b7 to oversee third-party cybertesting2 and 7,c7 to develop procurement guidelines for energy sector supply chain components4 7#b7 ,authorization of appropriations ,there is authorized to be appropriated to carry out this subsection #ae1jjj1jjj for each of fiscal years #bjbj through #bjbh4 7c7 ,energy sector operational support for cyberresilience program 7#a7 ,in general ,the ,secretary may carry out a program-- 7,a7 to enhance and periodically test-- 7i7 the emergency response capabilities of the ,department2 and 7ii7 the coordination of the ,department with other agencies1 the ,national ,laboratories1 and private industry2 7,b7 to expand cooperation of the ,department with the intelligence communities for energy sector-related threat collection and analysis2 7,c7 to enhance the tools of the ,department and ,,es-,,isac for monitoring the status of the energy sector2 7,d7 to expand industry participation in ,,es-,,isac2 and 7,e7 to provide technical assistance to small electric utilities for purposes of assessing cybermaturity level4 7#b7 ,authorization of appropriations ,there is authorized to be appropriated to carry out this subsection #aj1jjj1jjj for each of fiscal years #bjbj through #bjbh4 7d7 ,modeling and assessing energy infrastructure risk 7#a7 ,in general ,the ,secretary shall develop an advanced energy security program to secure energy networks1 including electric1 natural gas1 and oil exploration1 transmission1 and delivery4 7#b7 ,security and resiliency objective ,the objective of the program developed under paragraph 7#a7 is to increase the functional preservation of the electric grid operations or natural gas and oil operations in the face of natural and human-made threats and hazards1 including electric magnetic pulse and geomagnetic disturbances4 7#c7 ,eligible activities ,in carrying out the program developed under paragraph 7#a71 the ,secretary may-- 7,a7 develop capabilities to identify vulnerabilities and critical components that pose major risks to grid security if destroyed or impaired2 7,b7 provide modeling at the national level to predict impacts from natural or human-made events2 7,c7 develop a maturity model for physical security and cybersecurity2 7,d7 conduct exercises and assessments to identify and mitigate vulnerabilities to the electric grid1 including providing mitigation recommendations2 7,e7 conduct research hardening solutions for critical components of the electric grid2 7,f7 conduct research mitigation and recovery solutions for critical components of the electric grid2 and 7,g7 provide technical assistance to ,states and other entities for standards and risk analysis4 7#d7 ,authorization of appropriations ,there is authorized to be appropriated to carry out this subsection #aj1jjj1jjj for each of fiscal years #bjbj through #bjbh4 7e7 ,leveraging existing programs ,the programs established under this section shall be carried out consistent with-- 7#a7 the report of the ,department entitled ,roadmap to ,achieve ,energy ,delivery ,systems ,cybersecurity and dated #bjaa2 7#b7 existing programs of the ,department2 and 7#c7 any associated strategic framework that links together academic and ,national ,laboratory researchers1 electric utilities1 manufacturers1 and any other relevant private industry organizations1 including the ,electricity ,sub-sector ,coordinating ,council4 7f7 ,study 7#a7 ,in general ,not later than #ahj days after the date of enactment of this ,act1 the ,secretary1 in consultation with the ,federal ,energy ,regulatory ,commission and the ,north ,american ,electric ,reliability ,corporation1 shall conduct a study to explore alternative management structures and funding mechanisms to expand industry membership and participation in ,,es-,,isac4 7#b7 ,report ,the ,secretary shall submit to the appropriate committees of ,congress a report describing the results of the study conducted under paragraph 7#a74 ,october #bc1 #bjai,reported without amendment