,,ii  #aafth ,,congress  #ast ,session  
,s4 #cae  ,,in ,,the ,,senate ,,of ,,the
 ,,united ,,states  ,january #ca1 #bjai 
,ms4 ,hassan 7for herself and ,mr4      
,portman7 introduced the following bill2
 which was read twice and referred to   
the ,committee on ,homeland ,security   
and ,governmental ,affairs  ,a ,,bill   
,to authorize cyber hunt and incident   
response teams at the ,department of    
,homeland ,security1 and for other      
purposes4  #a4 ,short title  ,this ,act 
may be cited as the ,,dhs ,cyber ,hunt  
and ,incident ,response ,teams ,act of  
#bjai4  #b4 ,department of ,homeland    
,security cyber hunt and incident       
response teams  7a7 ,in general ,section
 #bbji of the ,homeland ,security ,act  
of #bjjb 7#f ,u4,s4,c4 #fei7 is         
amended-- 7#a7 in subsection            
7d77#a77;,b77iv71 by inserting 1        
including cybersecurity specialists     
after entities2  7#b7 by redesignating  
subsections 7f7 through 7m7 as          
subsections 7g7 through 7n71            

respectively2  7#c7 by inserting after  
subsection 7e7 the following3  7f7      
,cyber hunt and incident response teams 
7#a7 ,in general ,the ,center shall     
maintain cyber hunt and incident        
response teams for the purpose of       
leading ,federal asset response         
activities and providing timely         
technical assistance to ,federal and    
non-,federal entities1 including across 
all critical infrastructure sectors1    
regarding actual or potential security  
incidents1 as appropriate and upon      
request1 including--  7,a7 assistance to
 asset owners and operators in restoring
 services following a cyber incident2   
7,b7 identification and analysis of     
cybersecurity risk and unauthorized     
cyber activity2  7,c7 mitigation        
strategies to prevent1 deter1 and       
protect against cybersecurity risks2    
7,d7 recommendations to asset owners and
 operators for improving overall network
 and control systems security to lower  
cybersecurity risks1 and other          

recommendations1 as appropriate2 and    
7,e7 such other capabilities as the     
,secretary determines appropriate4  7#b7
 ,associated metrics ,the ,center shall 
continually assess and evaluate the     
cyber hunt and incident response teams  
and the operations of those cyber hunt  
and incident response teams using robust
 metrics4  7#c7 ,report ,at the         
conclusion of each of the first #d      
fiscal years after the date of enactment
 of the ,,dhs ,cyber ,hunt and ,incident
 ,response ,teams ,act of #bjai1 the    
,center shall submit to the ,committee  
on ,homeland ,security and ,governmental
 ,affairs of the ,senate and the        
,committee on ,homeland ,security of the
 ,house of ,representatives a report    
that includes--  7,a7 information       
relating to the metrics used for        
evaluation and assessment of the cyber  
hunt and incident response teams and    
operations under paragraph 7#b71        
including the resources and staffing of 
those cyber hunt and incident response  

teams2 and  7,b7 for the period covered 
by the report-- 7i7 the total number of 
incident response requests received2    
7ii7 the number of incident response    
tickets opened2 and  7iii7 a statement  
of--  7,i7 all interagency staffing of  
cyber hunt and incident response teams2 
and  7,,ii7 the interagency             
collaborations established to support   
cyber hunt and incident response teams4 
7#d7 ,cybersecurity specialists ,after  
notice to1 and with the approval of1 the
 entity requesting action by or         
technical assistance from the ,center1  
the ,secretary may include cybersecurity
 specialists from the private sector on 
a cyber hunt and incident response team4
  2 and  7#d7 in subsection 7g71 as so  
redesignated-- 7,a7 in paragraph 7#a71  
by inserting 1 or any team or activity  
of the ,center1 after ,center2 and  7,b7
 in paragraph 7#b71 by inserting 1 or   
any team or activity of the ,center1    
after ,center4  7b7 ,no additional funds
 authorized ,no additional funds are    

authorized to be appropriated to carry  
out the requirements of this ,act and   
the amendments made by this ,act4 ,such 
requirements shall be carried out using 
amounts otherwise authorized to be      
appropriated4