,,ib ,union ,calendar ,no4 #fj #aagth ,,congress #ast ,session ,h4 ,r4 #cbdc ,report ,no4 #aag-he ,,in ,,the ,,house ,,of ,,representatives ,may #ad1 #bjba,mr4 ,cleaver 7for himself1 ,mr4 ,thompson of ,mississippi1 ,mr4 ,katko1 ,mrs4 ,watson ,coleman1 ,ms4 ,clarke of ,new ,york1 ,ms4 ,jackson ,lee1 ,mr4 ,langevin1 ,mr4 ,correa1 ,mr4 ,green of ,texas1 ,mr4 ,swalwell1 ,ms4 ,titus1 ,ms4 ,barragn1 ,mrs4 ,luria1 ,mr4 ,torres of ,new ,york1 and ,mr4 ,gimenez7 introduced the following bill2 which was referred to the ,committee on ,homeland ,security ,july #ac1 #bjba;,additional sponsors3 ,mr4 ,van ,drew and ,mrs4 ,axne ,july #ac1 #bjba,reported with amendments1 committed to the ,committee of the ,whole ,house on the ,state of the ,union1 and ordered to be printed ,a ,,bill ,to codify the ,transportation ,security ,administration's responsibility relating to securing pipelines against cybersecurity threats1 acts of terrorism1 and other nefarious acts that jeopardize the physical security or cybersecurity of pipelines1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,pipeline ,security ,act4 #b4 ,pipeline security responsibilities ,subsection 7f7 of section #aad of title #di1 ,united ,states ,code1 is amended-- 7#a7 in paragraph 7#ae71 by striking and after the semicolon at the end2 7#b7 by redesignating paragraph 7#af7 as paragraph 7#ag72 and 7#c7 by inserting after paragraph 7#ae7 the following new paragraph3 7#af7 maintain responsibility1 in coordination with the ,director of the ,cybersecurity and ,infrastructure ,security ,agency1 as appropriate1 relating to securing pipeline transportation and pipeline facilities 7as such terms are defined in section #fjaja of this title7 against cybersecurity threats 7as such term is defined in section #ajb of the ,cybersecurity ,information ,sharing ,act of #bjae 7,public ,law #aad-aac2 #f ,u4,s4,c4 #aeja771 an act of terrorism 7as such term is defined in section #cjgg of title #ah71 and other nefarious acts that jeopardize the physical security or cybersecurity of such transportation or facilities2 and 4 #c4 ,pipeline security section ,pipeline security division 7a7 ,in general ,title ,,xvi of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #efa et seq47 is amended by adding at the end the following3 ,d ,pipeline ,security #afca4 ,pipeline security section ,pipeline security division 7a7 ,establishment ,there is within the ,administration a pipeline security sectionpipeline security division to carry out pipeline security programs in furtherance of section #aad7;f77#af7 of title #di1 ,united ,states ,code4 7b7 ,mission ,the mission of the sectiondivision referred to in subsection 7a7 is to oversee1 in coordination with the ,cybersecurity and ,infrastructure ,security ,agency of the ,department1 the security of pipeline transportation and pipeline facilities 7as such terms are defined in section #fjaja of title #di1 ,united ,states ,code7 against cybersecurity threats 7as such term is defined in section #ajb of the ,cybersecurity ,information ,sharing ,act of #bjae 7,public ,law #aad-aac2 #f ,u4,s4,c4 #aeja771 an act of terrorism 7as such term is defined in section #cjgg of title #ah1 ,united ,states ,code71 and other nefarious acts that jeopardize the physical security or cybersecurity of such transportation or facilities4 7c7 ,leadership2 staffing ,the ,administrator shall appoint as the head of the sectiondivisionan individual in the executive service of the ,administration with knowledge of the pipeline industry and security best practices1 as determined appropriate by the ,administrator4 ,the sectiondivision shall be staffed by a workforce that includes personnel with cybersecurity expertise4 7d7 ,responsibilities ,the sectiondivision shall be responsible for carrying out the duties of the sectiondivision as directed by the ,administrator1 acting through the head appointed pursuant to subsection 7c74 ,such duties shall include the following3 7#a7 ,developing1 in consultation with relevant ,federal1 ,state1 local1 ,tribal1 and territorial entities and public and private sector stakeholders1 guidelines for improving the security of pipeline transportation and pipeline facilities against cybersecurity threats1 an act of terrorism1 and other nefarious acts that jeopardize the physical security or cybersecurity of such transportation or facilities1 consistent with the ,national ,institute of ,standards and ,technology ,framework for ,improvement of ,critical ,infrastructure ,cybersecurity and any update to such guidelines pursuant to section #b7;c77#ae7 of the ,national ,institute for ,standards and ,technology ,act 7#ae ,u4,s4,c4 #bgb7;c77#ae774 7#b7 ,updating such guidelines as necessary based on intelligence and risk assessments1 but not less frequently than every three years1 unless such guidelines are superseded by directives or regulations4 7#c7 ,sharing of such guidelines and1 as appropriate1 intelligence and information regarding such security threats to pipeline transportation and pipeline facilities1 as appropriate1 with relevant ,federal1 ,state1 local1 ,tribal1 and territorial entities and public and private sector stakeholders4 7#d7 ,conducting voluntary security assessments based on such guidelines to provide recommendations1 or mandatory security assessments if required by superseding directives or regulations1 to provide recommendations or requirements for the improvement of the security of pipeline transportation and pipeline facilities against cybersecurity threats1 an act of terrorism1 and other nefarious acts that jeopardize the physical security or cybersecurity of such transportation or facilities1 including the security policies1 plans1 practices1 and training programs maintained by owners and operators of pipeline facilities4 7#e7 ,carrying out a program through which the ,administrator identifies and ranks the relative risk of pipelines and inspects pipeline facilities designated by owners and operators of such facilities as critical based on such guidelines or superseding directives or regulations4 7#f7 ,preparing notice and comment regulations for publication1 if determined necessary by the ,administrator4 7#f7 ,supporting the development and implementation of a security directive or regulation when the ,administrator issues such a directive or regulation4 7e7 ,details ,in furtherance of the section'sdivision's mission1 as set forth in subsection 7b71 the ,administrator and the ,director of the ,cybersecurity and ,infrastructure ,security ,agency may detail personnel between their components to leverage expertise4 ,personnel detailed from the ,cybersecurity and ,infrastructure ,security ,agency may be considered as fulfilling the cybersecurity expertise requirements in referred to in subsection 7c74 4 7b7 ,updated guidelines ,not later than one year after the date of the enactment of this ,act1 the pipeline security sectionpipeline security division of the ,transportation ,security ,administration established pursuant to section #afca of the ,homeland ,security ,act of #bjjb1 as added by subsection 7a71 shall publish updated guidelines described in subsection 7d7 of such section1 except to the extent such guidelines have been superseded by directives or regulations4 7c7 ,clerical amendments ,the table of contents in section #a7;b7 of the ,homeland ,security ,act of #bjjb is amended by-- 7#a7 striking the item relating to section #afag and inserting the following new item3 ,sec4 #afag4 ,diversified security technology industry marketplace4 2 7#b7 by striking the item relating to section #afba and inserting the following new item3 ,sec4 #afba4 ,maintenance validation and oversight4 2 7#c7 inserting after the item relating to section #afba the following3 ,subtitle ,d--,pipeline ,security ,sec4 #afca4 ,pipeline security section ,pipeline security division4 4 #d4 ,personnel strategy 7a7 ,in general ,not later than #ahj days after the date of the enactment of this ,act1 the ,administrator of the ,transportation ,security ,administration1 in coordination with the ,director of the ,cybersecurity and ,infrastructure ,security ,agency of the ,department of ,homeland ,security1 shall develop a personnel strategy for enhancing operations within the pipeline security section pipeline security division of the ,transportation ,security ,administration established pursuant to section #afca of the ,homeland ,security ,act of #bjjb1 as added by section #c4 7b7 ,contents ,the strategy required under subsection 7a7 shall take into consideration the most recently published versions of each of the following documents3 7#a7 ,the ,transportation ,security ,administration ,national ,strategy for ,transportation ,security4 7#b7 ,the ,department of ,homeland ,security ,cybersecurity ,strategy4 7#c7 ,the ,transportation ,security ,administration ,cybersecurity ,roadmap4 7#d7 ,the ,department of ,homeland ,security ,balanced ,workforce ,strategy4 7#e7 ,the ,department of ,homeland ,security ,quadrennial ,homeland ,security ,review4 7c7 ,cybersecurity expertise ,the strategy shall include an assessment of the cybersecurity expertise determined necessary by the ,administrator of the ,transportation ,security ,administration and a plan for developing such expertise within the ,administration4 7c7 7d7 ,resources ,the strategy shall include an assessment of resources determined necessary by the ,administrator of the ,transportation ,security ,administration to carry out such strategy4 7d7 7e7 ,submission to ,congress ,upon development of the strategy1 the ,administrator of the ,transportation ,security ,administration shall provide to the ,committee on ,homeland ,security of the ,house of ,representatives and the ,committee on ,commerce1 ,science1 and ,transportation of the ,senate a copy of such strategy4 #e4 ,oversight 7a7 ,report to ,congress ,the ,administrator of the ,transportation ,security ,administration shall report to the ,committee on ,homeland ,security of the ,house of ,representatives and the ,committee on ,commerce1 ,science1 and ,transportation of the ,senate not less than annually on activities of the pipeline security section pipeline security division of the ,administration established pursuant to section #afca of the ,homeland ,security ,act of #bjjb1 as added by section #c1 including information with respect to guidelines1 directives1 regulations1 security assessments1 and inspections under such section4 ,each such report shall include a determination by the ,administrator regarding whether there is a need for new regulations or non-regulatory initiatives and the basis for such determination4 7b7 ,,gao review ,not later than two years after the date of the enactment of this ,act1 the ,comptroller ,general of the ,united ,states shall conduct a review of the implementation of this ,act and the amendments made by this ,act4 #f4 ,stakeholder engagement ,not later than one year after the date of the enactment of this ,act1 the ,administrator of the ,transportation ,security ,administration shall convene not less than two industry days to engage with relevant pipeline transportation and pipeline facilities stakeholders on matters related to the security of pipeline transportation and pipeline facilities 7as such terms are defined in section #fjaja of title #di1 ,united ,states ,code74 ,july #ac1 #bjba,reported with amendments1 committed to the ,committee of the ,whole ,house on the ,state of the ,union1 and ordered to be printed