,,ii ,calendar ,no4 #ebh #aafth ,,congress #b;d ,session ,s4 #djbd ,report ,no4 #aaf-bfe ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,june #bb1 #bjbj,mr4 ,perdue 7for himself and ,ms4 ,sinema7 introduced the following bill2 which was read twice and referred to the ,committee on ,homeland ,security and ,governmental ,affairs ,september #i1 #bjbj,reported by ,mr4 ,johnson1 with an amendment,strike out all after the enacting clause and insert the part printed in italic ,a ,,bill ,to establish in the ,cybersecurity and ,infrastructure ,security ,agency of the ,department of ,homeland ,security a ,cybersecurity ,advisory ,committee4 #a4 ,short title ,this ,act may be cited as the ,cybersecurity ,advisory ,committee ,authorization ,act of #bjbj4 #b4 ,cybersecurity ,advisory ,committee 7a7 ,in general ,subtitle ,a of title ,,xxii of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fea et seq47 is amended by adding at the end the following3 #bbae4 ,cybersecurity ,advisory ,committee 7a7 ,establishment ,the ,secretary shall establish within the ,agency a ,cybersecurity ,advisory ,committee 7referred to in this section as the ,advisory ,committee74 7b7 ,duties 7#a7 ,in general ,the ,advisory ,committee may advise1 consult with1 report to1 and make recommendations to the ,director1 as appropriate1 on the development1 refinement1 and implementation of policies1 programs1 planning1 and training pertaining to the cybersecurity mission of the ,agency4 7#b7 ,recommendations 7,a7 ,in general ,the ,advisory ,committee shall develop1 at the request of the ,director1 recommendations for improvements to advance the cybersecurity mission of the ,agency and strengthen the cybersecurity of the ,united ,states4 7,b7 ,recommendations of subcommittees ,recommendations agreed upon by subcommittees established under subsection 7d7 for any year shall be approved by the ,advisory ,committee before the ,advisory ,committee submits to the ,director the annual report under paragraph 7#d7 for that year4 7#c7 ,periodic reports ,the ,advisory ,committee shall periodically submit to the ,director-- 7,a7 reports on matters identified by the ,director2 and 7,b7 reports on other matters identified by a majority of the members of the ,advisory ,committee4 7#d7 ,annual report 7,a7 ,in general ,the ,advisory ,committee shall submit to the ,director an annual report providing information on the activities1 findings1 and recommendations of the ,advisory ,committee1 including its subcommittees1 for the preceding year4 7,b7 ,publication ,not later than #ahj days after the date on which the ,director receives an annual report for a year under subparagraph 7,a71 the ,director shall publish a public version of the report describing the activities of the ,advisory ,committee and such related matters as would be informative to the public during that year1 consistent with section #eeb7;b7 of title #e1 ,united ,states ,code4 7#e7 ,feedback ,not later than #ij days after receiving any recommendation submitted by the ,advisory ,committee under paragraph 7#b71 7#c71 or 7#d71 the ,director shall respond in writing to the ,advisory ,committee with feedback on the recommendation4 ,such a response shall include-- 7,a7 with respect to any recommendation with which the ,director concurs1 an action plan to implement the recommendation2 and 7,b7 with respect to any recommendation with which the ,director does not concur1 a justification for why the ,director does not plan to implement the recommendation4 7#f7 ,congressional notification ,not less frequently than once per year after the date of enactment of this section1 the ,director shall provide to the ,committee on ,homeland ,security and ,governmental ,affairs and the ,committee on ,appropriations of the ,senate and the ,committee on ,homeland ,security and the ,committee on ,appropriations of the ,house of ,representatives a briefing on feedback from the ,advisory ,committee4 7c7 ,membership 7#a7 ,appointment 7,a7 ,in general ,not later than #ahj days after the date of enactment of the ,cybersecurity ,advisory ,committee ,authorization ,act of #bjbj1 the ,director shall appoint the members of the ,advisory ,committee4 7,b7 ,composition ,the membership of the ,advisory ,committee shall consist of not more than #ce individuals4 7,c7 ,representation 7i7 ,in general ,the membership of the ,advisory ,committee shall be geographically balanced and shall include representatives of ,state and local governments and of a broad range of industries1 which may include the following3 7,i7 ,defense4 7,,ii7 ,education4 7,,iii7 ,financial services and insurance4 7,,iv7 ,healthcare4 7,v7 ,manufacturing4 7,,vi7 ,media and entertainment4 7,,vii7 ,chemicals4 7,,viii7 ,retail4 7,,ix7 ,transportation4 7,x7 ,energy4 7,,xi7 ,information ,technology4 7,,xii7 ,communications4 7,,xiii7 ,other relevant fields identified by the ,director4 7ii7 ,prohibition ,not more than #c members may represent any #a category under clause 7i74 7#b7 ,term of office 7,a7 ,terms ,the term of each member of the ,advisory ,committee shall be #b years1 except that a member may continue to serve until a successor is appointed4 7,b7 ,removal ,the ,director may review the participation of a member of the ,advisory ,committee and remove such member any time at the discretion of the ,director4 7,c7 ,reappointment ,a member of the ,advisory ,committee may be reappointed for an unlimited number of terms4 7#c7 ,prohibition on compensation ,the members of the ,advisory ,committee may not receive pay or benefits from the ,united ,states ,government by reason of their service on the ,advisory ,committee4 7#d7 ,meetings 7,a7 ,in general ,the ,director shall require the ,advisory ,committee to meet not less frequently than semiannually1 and may convene additional meetings as necessary4 7,b7 ,public meetings ,at least one of the meetings referred to in subparagraph 7,a7 shall be open to the public4 7,c7 ,attendance ,the ,advisory ,committee shall maintain a record of the persons present at each meeting4 7#e7 ,member access to classified information 7,a7 ,in general ,not later than #fj days after the date on which a member is first appointed to the ,advisory ,committee and before the member is granted access to any classified information1 the ,director shall determine if the member should be restricted from reviewing1 discussing1 or possessing classified information4 7,b7 ,access ,access to classified materials shall be managed in accordance with ,executive ,order ,no4 #acebf of ,december #bi1 #bjji 7#ge ,fed4 ,reg #gjg71 or any subsequent corresponding ,executive ,order4 7,c7 ,protections ,a member of the ,advisory ,committee shall protect all classified information in accordance with the applicable requirements for the particular level of classification of such information4 7#f7 ,chairperson ,the ,advisory ,committee shall select1 from among the members of the ,advisory ,committee-- 7,a7 a member to serve as chairperson of the ,advisory ,committee2 and 7,b7 a member to serve as chairperson of each subcommittee of the ,advisory ,committee established under subsection 7d74 7d7 ,subcommittees 7#a7 ,in general ,the ,director shall establish subcommittees within the ,advisory ,committee to address cybersecurity issues1 which may include the following3 7,a7 ,information exchange4 7,b7 ,critical infrastructure4 7,c7 ,risk management4 7,d7 ,public and private partnerships4 7#b7 ,meetings and reporting ,each subcommittee shall meet not less frequently than semiannually1 and submit to the ,advisory ,committee for inclusion in the annual report required under subsection 7b77#d7 information1 including activities1 findings1 and recommendations1 regarding subject matter considered by the subcommittee4 7#c7 ,subject matter experts ,the chair of the ,advisory ,committee shall appoint members to subcommittees and shall ensure that each member appointed to a subcommittee has subject matter expertise relevant to the subject matter of the subcommittee4 7e7 ,nonapplicability of ,,faca ,the ,federal ,advisory ,committee ,act 7#e ,u4,s4,c4 ,app47 shall not apply to the ,advisory ,committee and its subcommittees4 4 7b7 ,clerical amendment ,the table of contents in section #a7;b7 of the ,homeland ,security ,act of #bjjb 7,public ,law #ajg-bif2 #aaf ,stat4 #bace7 is amended by inserting after the item relating to section #bbad the following3 #bbae4 ,cybersecurity ,advisory ,committee4 4 #a4 ,short title ,this ,act may be cited as the ,cybersecurity ,advisory ,committee ,authorization ,act of #bjbj4 #b4 ,cybersecurity ,advisory ,committee 7a7 ,in general ,subtitle ,a of title ,,xxii of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fea et seq47 is amended by adding at the end the following3 #bbae4 ,cybersecurity ,advisory ,committee 7a7 ,establishment ,the ,secretary shall establish within the ,agency a ,cybersecurity ,advisory ,committee 7referred to in this section as the ,advisory ,committee74 7b7 ,duties 7#a7 ,in general ,the ,advisory ,committee shall advise1 consult with1 report to1 and make recommendations to the ,director1 as appropriate1 on the development1 refinement1 and implementation of policies1 programs1 planning1 and training pertaining to the cybersecurity mission of the ,agency4 7#b7 ,recommendations 7,a7 ,in general ,the ,advisory ,committee shall develop1 at the request of the ,director1 recommendations for improvements to advance the cybersecurity mission of the ,agency and strengthen the cybersecurity of the ,united ,states4 7,b7 ,recommendations of subcommittees ,recommendations agreed upon by subcommittees established under subsection 7d7 for any year shall be approved by the ,advisory ,committee before the ,advisory ,committee submits to the ,director the annual report under paragraph 7#d7 for that year4 7#c7 ,periodic reports ,the ,advisory ,committee shall periodically submit to the ,director-- 7,a7 reports on matters identified by the ,director2 and 7,b7 reports on other matters identified by a majority of the members of the ,advisory ,committee4 7#d7 ,annual report 7,a7 ,in general ,the ,advisory ,committee shall submit to the ,director an annual report providing information on the activities1 findings1 and recommendations of the ,advisory ,committee1 including its subcommittees1 for the preceding year4 7,b7 ,publication ,not later than #ahj days after the date on which the ,director receives an annual report for a year under subparagraph 7,a71 the ,director shall publish a public version of the report describing the activities of the ,advisory ,committee and such related matters as would be informative to the public during that year1 consistent with section #eeb7;b7 of title #e1 ,united ,states ,code4 7#e7 ,feedback ,not later than #ij days after receiving any recommendation submitted by the ,advisory ,committee under paragraph 7#b71 7#c71 or 7#d71 the ,director shall respond in writing to the ,advisory ,committee with feedback on the recommendation4 ,such a response shall include-- 7,a7 with respect to any recommendation with which the ,director concurs1 an action plan to implement the recommendation2 and 7,b7 with respect to any recommendation with which the ,director does not concur1 a justification for why the ,director does not plan to implement the recommendation4 7#f7 ,congressional notification ,not less frequently than once per year after the date of enactment of this section1 the ,director shall provide to the ,committee on ,homeland ,security and ,governmental ,affairs and the ,committee on ,appropriations of the ,senate and the ,committee on ,homeland ,security and the ,committee on ,appropriations of the ,house of ,representatives a briefing on feedback from the ,advisory ,committee4 7#g7 ,governance rules ,the ,director shall establish rules for the structure and governance of the ,advisory ,committee and all subcommittees established under subsection 7d74 7c7 ,membership 7#a7 ,appointment 7,a7 ,in general ,not later than #ahj days after the date of enactment of the ,cybersecurity ,advisory ,committee ,authorization ,act of #bjbj1 the ,director shall appoint the members of the ,advisory ,committee4 7,b7 ,composition ,the membership of the ,advisory ,committee shall consist of not more than #ce individuals4 7,c7 ,representation 7i7 ,in general ,the membership of the ,advisory ,committee shall-- 7,i7 consist of subject matter experts2 7,,ii7 be geographically balanced2 and 7,,iii7 include representatives of ,state1 local1 and ,tribal governments and of a broad range of industries1 which may include the following3 7aa7 ,defense4 7bb7 ,education4 7cc7 ,financial services and insurance4 7dd7 ,healthcare4 7ee7 ,manufacturing4 7ff7 ,media and entertainment4 7gg7 ,chemicals4 7hh7 ,retail4 7ii7 ,transportation4 7jj7 ,energy4 7kk7 ,information ,technology4 7ll7 ,communications4 7mm7 ,other relevant fields identified by the ,director4 7ii7 ,prohibition ,not less than #a member nor more than #c members may represent any #a category under clause 7i77,,iii74 7iii7 ,publication of membership list ,the ,advisory ,committee shall publish its membership list on a publicly available website not less than once per fiscal year and shall update the membership list as changes occur4 7#b7 ,term of office 7,a7 ,terms ,the term of each member of the ,advisory ,committee shall be #b years1 except that a member may continue to serve until a successor is appointed4 7,b7 ,removal ,the ,director may review the participation of a member of the ,advisory ,committee and remove such member any time at the discretion of the ,director4 7,c7 ,reappointment ,a member of the ,advisory ,committee may be reappointed for an unlimited number of terms4 7#c7 ,prohibition on compensation ,the members of the ,advisory ,committee may not receive pay or benefits from the ,united ,states ,government by reason of their service on the ,advisory ,committee4 7#d7 ,meetings 7,a7 ,in general ,the ,director shall require the ,advisory ,committee to meet not less frequently than semiannually1 and may convene additional meetings as necessary4 7,b7 ,public meetings ,at least one of the meetings referred to in subparagraph 7,a7 shall be open to the public4 7,c7 ,attendance ,the ,advisory ,committee shall maintain a record of the persons present at each meeting4 7#e7 ,member access to classified information 7,a7 ,in general ,not later than #fj days after the date on which a member is first appointed to the ,advisory ,committee and before the member is granted access to any classified information1 the ,director shall determine1 for the purposes of the ,advisory ,committee1 if the member should be restricted from reviewing1 discussing1 or possessing classified information4 7,b7 ,access ,access to classified materials shall be managed in accordance with ,executive ,order ,no4 #acebf of ,december #bi1 #bjji 7#ge ,fed4 ,reg4 #gjg71 or any subsequent corresponding ,executive ,order4 7,c7 ,protections ,a member of the ,advisory ,committee shall protect all classified information in accordance with the applicable requirements for the particular level of classification of such information4 7,d7 ,rule of construction ,nothing in this paragraph shall be construed to affect the security clearance of a member of the ,advisory ,committee or the authority of a ,federal agency to provide a member of the ,advisory ,committee access to classified information4 7#f7 ,chairperson ,the ,advisory ,committee shall select1 from among the members of the ,advisory ,committee-- 7,a7 a member to serve as chairperson of the ,advisory ,committee2 and 7,b7 a member to serve as chairperson of each subcommittee of the ,advisory ,committee established under subsection 7d74 7d7 ,subcommittees 7#a7 ,in general ,the ,director shall establish subcommittees within the ,advisory ,committee to address cybersecurity issues1 which may include the following3 7,a7 ,information exchange4 7,b7 ,critical infrastructure4 7,c7 ,risk management4 7,d7 ,public and private partnerships4 7#b7 ,meetings and reporting ,each subcommittee shall meet not less frequently than semiannually1 and submit to the ,advisory ,committee for inclusion in the annual report required under subsection 7b77#d7 information1 including activities1 findings1 and recommendations1 regarding subject matter considered by the subcommittee4 7#c7 ,subject matter experts ,the chairperson of the ,advisory ,committee shall appoint members to subcommittees and shall ensure that each member appointed to a subcommittee has subject matter expertise relevant to the subject matter of the subcommittee4 4 7b7 ,clerical amendment ,the table of contents in section #a7;b7 of the ,homeland ,security ,act of #bjjb 7,public ,law #ajg-bif2 #aaf ,stat4 #bace7 is amended by inserting after the item relating to section #bbad the following3 ,sec4 #bbae4 ,cybersecurity ,advisory ,committee4 4 ,september #i1 #bjbj,reported with an amendment