,,ii  #aafth ,,congress  #b;d ,session  
,s4 #dgie  ,,in ,,the ,,senate ,,of     
,,the ,,united ,,states  ,october #a1   
#bjbj,ms4 ,rosen 7for herself and ,mr4  
,hoeven7 introduced the following bill2 
which was read twice and referred to the
 ,committee on ,energy and ,natural     
,resources  ,a ,,bill  ,to require the  
,secretary of ,energy to establish a    
voluntary ,cyber ,sense program to test 
the cybersecurity of products and       
technologies intended for use in the    
bulk-power system1 and for other        
purposes4  #a4 ,short title ,this ,act  
may be cited as the ,cyber ,sense ,act  
of #bjbj4  #b4 ,cyber ,sense program    
7a7 ,definitions ,in this section3 7#a7 
,bulk-power system ,the term bulk-power 
system has the meaning given the term in
 section #bae7;a7 of the ,federal ,power
 ,act 7#af ,u4,s4,c4 #hbdo7a774  7#b7   
,critical electric infrastructure ,the  
term critical electric infrastructure   
has the meaning given the term in       
section #bae;,a7a7 of the ,federal      

,power ,act 7#af ,u4,s4,c4              
#hbdo-#a7;a774  7#c7 ,program ,the term 
program means the voluntary ,cyber      
,sense program established under        
subsection 7b74  7#d7 ,secretary ,the   
term ,secretary means the ,secretary of 
,energy4  7b7 ,establishment ,the       
,secretary1 in coordination with the    
heads of other relevant ,federal        
agencies1 shall establish a voluntary   
,cyber ,sense program to test the       
cybersecurity of products and           
technologies intended for use in the    
bulk-power system4  7c7 ,program        
requirements ,in carrying out subsection
 7b71 the ,secretary shall-- 7#a7       
establish a testing process under the   
program to test the cybersecurity of    
products and technologies intended for  
use in the bulk-power system1 including 
products relating to industrial control 
systems and operational technologies1   
such as supervisory control and data    
acquisition systems2  7#b7 for products 
and technologies tested under the       

program1 establish and maintain         
cybersecurity vulnerability reporting   
processes and a related database2  7#c7 
provide technical assistance to electric
 utilities1 product manufacturers1 and  
other electricity sector stakeholders to
 develop solutions to mitigate          
identified cybersecurity vulnerabilities
 in products and technologies tested    
under the program2  7#d7 biennially     
review products and technologies tested 
under the program for cybersecurity     
vulnerabilities and provide analysis    
with respect to how those products and  
technologies respond to and mitigate    
cyber threats2  7#e7 develop guidance   
that is informed by analysis and testing
 results under the program for electric 
utilities for the procurement of        
products and technologies2  7#f7 provide
 reasonable notice to1 and solicit      
comments from1 the public prior to      
establishing or revising the testing    
process under the program2  7#g7 oversee
 the testing of products and            

technologies under the program2 and     
7#h7 consider incentives to encourage   
the use of analysis and results of      
testing under the program in the design 
of products and technologies for use in 
the bulk-power system4  7d7 ,disclosure 
of information ,any cybersecurity       
vulnerability reported pursuant to a    
process established under subsection    
7c77#b71 the disclosure of which the    
,secretary reasonably foresees would    
cause harm to critical electric         
infrastructure1 shall be considered to  
be critical electric infrastructure     
information for purposes of section     
#bae;,a7d7 of the ,federal ,power ,act  
7#af ,u4,s4,c4 #hbdo-#a7;d774  7e7      
,federal government liability ,nothing  
in this section authorizes the          
commencement of an action against the   
,united ,states with respect to the     
testing of a product or technology under
 the program4