,i #aag? ,,congress #a/ ,session ,h4 ,r4 #dici ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,augu/ #f1 #bjba,mr4 ,b]a 7= himself & ,mr4 ,web] ( ,texas7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,sci5ce1 ,space1 & ,te*nology1 & 9 addition to ! ,committee on ,homel& ,security1 = a p]iod to be subsequ5tly det]m9$ by ! ,speak]1 9 ea* case = consid]ation ( su* provisions z fall )9 ! jurisdiction ( ! committee conc]n$ ,a ,,bill ,to provide = a compreh5sive int]discipl9>y rese>*1 developm5t1 & demon/ration initiative to /r5g!n ! capacity ( ! en]gy sector to prep>e = & )/& cyb] & physical attacks1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,grid ,security ,rese>* & ,developm5t ,act4 #b4 ,f9d+s ,congress f9ds ! foll[+3 7#a7 ,! ,nation1 & e critical infra/ructure sector1 dep5ds on reliable electricity4 7#b7 ,intellig5t electronic devices1 advanc$ analytics1 & in=mation sy/ems us$ across ! en]gy sector are ess5tial to ma9ta9+ reliable op]ation ( ! electric grid4 7#c7 ,! cyb]security ?reat l&scape is con/antly *ang+ & attack] capabilities are advanc+ rapidly1 requir+ ongo+ modifications1 advancem5ts1 & inve/m5ts 9 te*nologies1 proc$ures1 & work=ce developm5t to ma9ta9 security4 7#d7 ,x is 9 ! national int]e/ = ,f$]al ag5cies to inve/ 9 innovative cyb]security rese>* t in=ms & facilitates private sector inve/m5t & use ( new & advanc$ cyb]security tools & proc$ures to protect in=mation sy/ems4 7#e7 ,! numb] ( devices & sy/ems connect+ to ! electric grid is increas+1 & integrat+ cyb]security protections into in=mation sy/ems :5 !y are design$ & built is m effective ?an modify+ products aft] in/allation to meet cyb]security goals4 7#f7 ,an und]/&+ ( human factors c be lev]ag$ to und]/& ! behavior ( cyb] ?reat actors1 develop /rategies to c\nt] ?reat actors1 improve cyb]security tra9+ programs1 optimize ! design ( human-ma*9e int]faces & cyb]security tools1 & increase ! capacity ( ! en]gy sector work=ce to prev5t unau?oriz$ access to critical sy/ems4 #c4 ,am5dm5t to ,division ,z ( ! ,consolidat$ ,appropriations ,act1 #bjba ,title ,,viii ( division ,z ( ! ,consolidat$ ,appropriations ,act1 #bjba 7,public ,law #aaf-bfj7 is am5d$ by ins]t+ aft] section #hjab ! foll[+3 #hjac4 ,en]gy sector security rese>*1 developm5t1 & demon/ration program 7a7 ,9 g5]al ,! ,secret>y1 9 coord9ation ) appropriate ,f$]al ag5cies1 ! ,electricity ,subsector ,coord9at+ ,c\ncil1 ! ,electric ,reliability ,organization1 ,/ate1 tribal1 local1 & t]ritorial gov]nm5ts1 ! private sector1 & o!r relevant /akehold]s1 %all c>ry out a rese>*1 developm5t1 & demon/ration program to protect ! electric grid & en]gy sy/ems1 includ+ assets connect$ to ! di/ribution grid1 & associat$ supply *a9s1 f cyb] & physical attacks by increas+ ! cyb] & physical security capabilities ( ! en]gy sector & accel]at+ ! developm5t ( relevant te*nologies & tools4 7b7 ,dep>tm5t ( ,en]gy ,z "p ( ! initiative describ$ 9 subsection 7a71 ! ,secret>y %all aw>d rese>*1 developm5t1 & demon/ration grants to-- 7#a7 id5tify cyb]security risks to in=mation te*nology & op]ational te*nology )91 & impact+1 ! electricity sector1 en]gy sy/ems1 & en]gy infra/ructure2 7#b7 develop me?ods & tools to rapidly detect cyb] intrusions & cyb] incid5ts1 includ+ ?r\gh ! use ( data & big data analytics te*niques1 su* z intrusion detection1 & security in=mation & ev5t managem5t sy/ems1 to validate & v]ify sy/em behavior2 7#c7 assess em]g+ cyb]security capabilities t c\ld be appli$ to en]gy sy/ems & develop te*nologies t integrate cyb]security features & proc$ures into ! design & developm5t ( exi/+ & em]g+ grid te*nologies1 includ+ r5ewable en]gy1 /orage1 & dem&-side managem5t te*nologies2 7#d7 id5tify exi/+ vuln]abilities 9 intellig5t electronic devices1 advanc$ analytics sy/ems1 & in=mation sy/ems2 7#e7 "w ) relevant entities to develop te*nologies or concepts t build or retr(it cyb]security features & proc$ures into-- 7,a7 in=mation & en]gy managem5t sy/em devices1 compon5ts1 s(tw>e1 firmw>e1 & h>dw>e1 includ+ di/ribut$ control & managem5t sy/ems1 & build+ managem5t sy/ems2 7,b7 data /orage sy/ems1 data managem5t sy/ems1 & data analysis processes2 7,c7 automat$ & manually controll$ devices & equipm5t = monitor+ & /abiliz+ ! electric grid2 7,d7 te*nologies us$ to syn*ronize "t & develop guidance = op]ational cont+5cy plans :5 "t syn*ronization te*nologies1 are compromis$2 7,e7 p[] sy/em deliv]y & end us] sy/ems & devices t connect to ! grid1 includ+-- 7i7 met]s1 phasor measurem5t units1 & o!r s5sors2 7ii7 di/ribution automation te*nologies1 sm>t inv]t]s1 & o!r grid control te*nologies2 7iii7 di/ribut$ g5]ation1 en]gy /orage1 & o!r di/ribut$ en]gy te*nologies2 7iv7 dem& response te*nologies2 7v7 home & build+ en]gy managem5t & control sy/ems2 7vi7 electric & plug-9 hybrid vehicles & electric vehicle *>g+ sy/ems2 & 7vii7 o!r relevant devices1 s(tw>e1 firmw>e1 & h>dw>e2 & 7,f7 ! supply *a9 ( electric grid managem5t sy/em compon5ts2 7#f7 develop te*nologies1 includ+ in=mation te*nologies & op]ational te*nologies1 t improve ! physical security ( ! electric grid1 includ+ remote assets2 7#g7 integrate human factors rese>* into ! design & developm5t ( advanc$ tools & processes = dynamic monitor+1 detection1 protection1 mitigation1 response1 & cyb] situational aw>5ess2 7#h7 evaluate & und]/& ! pot5tial consequ5ces ( practices us$ to ma9ta9 ! cyb]security ( in=mation sy/ems & intellig5t electronic devices2 7#i7 develop or exp& ! capabilities ( exi/+ cyb]security te/ b$s to simulate impacts ( cyb] attacks & comb9$ cyb]-physical attacks on in=mation sy/ems & electronic devices1 includ+ by increas+ access to exi/+ & em]g+ te/ b$s = coop]ative utilities1 utilities own$ by a political subdivision ( a ,/ate1 su* z municipally own$ electric utilities1 & o!r relevant /akehold]s2 & 7#aj7 develop te*nologies t r$uce ! co/ ( implem5t+ effective cyb]security te*nologies & tools1 includ+ updates to ^! te*nologies & tools1 9 ! en]gy sector4 7c7 ,national ,sci5ce ,f\ndation ,! ,national ,sci5ce ,f\ndation1 9 coord9ation ) o!r ,f$]al ag5cies z appropriate1 %all ?r\gh its cyb]security rese>* & developm5t programs-- 7#a7 support basic rese>* to advance k1 applications1 te*nologies1 & tools to /r5g!n ! cyb]security ( in=mation sy/ems t support ! electric grid & en]gy sy/ems1 includ+ int]discipl9>y rese>* 9-- 7,a7 evolution>y sy/ems1 !ories1 ma!matics1 & models2 7,b7 economic & f9ancial !ories1 ma!matics1 & models2 & 7,c7 big data analytical me?ods1 ma!matics1 comput] cod+1 & algori?ms2 & 7#b7 support cyb]security education & tra9+ focus$ on in=mation sy/ems = ! electric grid & en]gy work=ce1 includ+ ?r\gh ! ,advanc$ ,te*nological ,education program1 ! ,cyb]corps program1 graduate rese>* fell[%ips1 & o!r appropriate programs4 7d7 ,dep>tm5t ( ,homel& ,security ,sci5ce & ,te*nology ,directorate ,! ,sci5ce & ,te*nology ,directorate ( ! ,dep>tm5t ( ,homel& ,security %all coord9ate ) ! ,dep>tm5t ( ,en]gy1 ! private sector1 & o!r relevant /akehold]s1 to rese>* exi/+ cyb]security te*nologies & tools us$ 9 ! def5se indu/ry 9 ord] to-- 7#a7 id5tify te*nologies & tools t may meet civilian en]gy sector cyb]security ne$s2 7#b7 develop a rese>* /rategy t incorporates human factors rese>* f9d+s to guide ! modification ( def5se indu/ry cyb]security tools = use 9 ! civilian sector2 7#c7 develop a /rategy to accel]ate ef=ts to br+ modifi$ def5se indu/ry cyb]security tools to ! civilian m>ket2 & 7#d7 c>ry out o!r activities ! ,secret>y ( ,homel& ,security consid]s appropriate to meet ! goals ( ?is subsection4 #hjad4 ,grid resili5ce & em]g5cy response 7a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! enactm5t ( ! ,grid ,security ,rese>* & ,developm5t ,act1 ! ,secret>y %all e/abli% a rese>*1 developm5t1 & demon/ration program to enhance resili5ce & /r5g!n em]g5cy response & managem5t p]ta9+ to ! en]gy sector4 7b7 ,grants ,! ,secret>y %all aw>d grants to eligible entities "u subsection 7d7 on a competitive basis to conduct rese>* & developm5t ) ! purpose ( improv+ ! resili5ce & reliability ( ! electric grid by-- 7#a7 develop+ me?ods to improve community & gov]nm5tal prep>ation = & em]g5cy response to l>ge-area1 long-duration electricity int]ruptions1 includ+ ?r\gh ! use ( en]gy effici5cy1 /orage1 & di/ribut$ g5]ation te*nologies2 7#b7 develop+ tools to help utilities & communities ensure ! cont9u\s deliv]y ( electricity to critical facilities2 7#c7 develop+ tools to improve coord9ation betwe5 utilities & relevant ,f$]al ag5cies to enable communication1 in=mation-%>+1 & situational aw>5ess 9 ! ev5t ( a physical or cyb]-attack on ! electric grid2 7#d7 develop+ te*nologies & capabilities to )/& & address ! curr5t & project$ impact ( ! *ang+ climate on en]gy sector infra/ructure1 includ+ extreme wea!r ev5ts1 o!r natural disa/]s1 & wildfires2 7#e7 develop+ te*nologies capable ( e>ly detection ( malfunction+ electrical equipm5t on ! transmission & di/ribution grid1 includ+ detection ( sp>k ignition caus+ wildfires & risks ( vegetation contact2 7#f7 assess+ upgrades & additions ne$$ to en]gy sector infra/ructure due to project$ *anges 9 ! en]gy g5]ation mix & en]gy dem&2 7#g7 upgrad+ tools us$ to e/imate ! co/s ( outages long] ?an #bd h\rs2 & 7#h7 develop+ tools & te*nologies to assi/ ) ! plann+1 safe execution (1 & safe & timely re/oration ( p[] aft] cyb] & physical attacks1 natural disa/]s1 & em]g5cy p[] %ut (fs1 su* z ^? conduct$ to r$uce risks ( wildfires />t$ by grid infra/ructure4 7c7 ,concurr5t & co-,locat$ disa/]s ,9 c>ry+ out ! program "u subsection 7a71 ! ,secret>y %all support rese>* & developm5t on tools1 te*niques1 & te*nologies = improv+ electric grid & en]gy sector safety & resili5ce 9 ! ev5t ( multiple simultane\s or co-locat$ wea!r or climate ev5ts lead+ to extreme conditions1 su* z extreme w9d1 wildfires1 extreme cold1 & extreme heat4 7d7 ,eligible entities ,! entities eligible to receive grants "u ?is section include-- 7#a7 an in/itution ( high] education1 includ+ a hi/orically ,black college or univ]sity or a m9ority-s]v+ in/itution2 7#b7 a nonpr(it organization2 7#c7 a ,national ,laboratory2 7#d7 a unit ( ,/ate1 local1 or tribal gov]nm5t2 7#e7 an electric utility or electric coop]ative2 7#f7 a retail s]vice provid] ( electricity2 7#g7 a private comm]cial entity2 7#h7 a p>tn]%ip or consortium ( #b or m entities describ$ 9 p>agraphs 7#a7 ?r\gh 7#g72 & 7#i7 any o!r entities ! ,secret>y deems appropriate4 7e7 ,relevant activities ,grants aw>d$ "u subsection 7b7 %all include fund+ = rese>* & developm5t activities relat$ to ! purpose describ$ 9 subsection 7b71 su* z-- 7#a7 developm5t ( te*nologies to use di/ribut$ en]gy res\rces1 su* z sol> photovoltaics1 en]gy /orage sy/ems1 electric vehicles1 & microgrids1 to improve grid & critical end-us] resili5ce2 7#b7 analysis ( non-te*nical b>ri]s to great] integration & use ( te*nologies on ! di/ribution grid2 7#c7 analysis ( pa/ l>ge-area1 long-duration electricity int]ruptions to id5tify common elem5ts & be/ practices = electricity re/oration1 mitigation1 & prev5tion ( future disruptions2 7#d7 developm5t (-- 7,a7 advanc$ monitor+1 analytics1 op]ation1 & controls ( electric grid sy/ems to improve electric grid resili5ce2 & 7,b7 indep5d5t v]ification & validation me?odologies1 9 coord9ation ) ! ,national ,in/itute ( ,/&>ds & ,te*nology1 to address ! pot5tial cyb]security vuln]abilities ( ! te*nologies id5tifi$ 9 subp>agraph 7,a7 ( ?is p>agraph2 7#e7 analysis ( te*nologies1 me?ods1 & concepts t c improve community resili5ce & survivability ( frequ5t or long-duration p[] outages2 7#f7 developm5t ( me?odologies to ma9ta9 cyb]security dur+ re/oration ( en]gy sector infra/ructure & op]ation2 7#g7 developm5t ( advanc$ p[] fl[ control sy/ems & compon5ts to improve electric grid resili5ce2 & 7#h7 any o!r relevant activities det]m9$ by ! ,secret>y4 7f7 ,te*nical assi/ance 7#a7 ,9 g5]al ,! ,secret>y %all provide te*nical assi/ance to eligible entities = ! comm]cial application ( te*nologies to improve ! resili5ce ( ! electric grid & comm]cial application ( te*nologies to help entities develop plans = prev5t+ & recov]+ f v>i\s p[] outage sc5>ios at ! local1 regional1 & ,/ate level4 7#b7 ,te*nical assi/ance program ,! comm]cial application te*nical assi/ance program e/abli%$ 9 p>agraph 7#a7 %all include assi/ance to eligible entities =-- 7,a7 ! comm]cial application ( te*nologies develop$ f ! grant program e/abli%$ 9 subsection 7b71 includ+ coop]ative utilities & utilities own$ by a political subdivision ( a ,/ate1 su* z municipally own$ electric utilities2 7,b7 ! developm5t ( me?ods to /r5g!n or o!rwise mitigate adv]se impacts on electric grid infra/ructure aga9/ natural haz>ds2 7,c7 ! use ( ,dep>tm5t data & model+ tools = v>i\s purposes2 7,d7 a res\rce assessm5t & analysis ( future dem& & di/ribution requirem5ts1 includ+ developm5t ( advanc$ grid ar*itectures & risk analysis2 7,e7 ! developm5t ( tools & te*nologies to coord9ate data across relevant entities to promote resili5ce & wildfire prev5tion 9 ! plann+1 design1 con/ruction1 op]ation1 & ma9t5ance ( transmission infra/ructure2 7,f7 analysis to pr$ict ! likelihood ( extreme wea!r ev5ts to in=m ! plann+1 design1 con/ruction1 op]ation1 & ma9t5ance ( transmission infra/ructure 9 consultation ) ! ,national ,oceanic & ,atmosph]ic ,adm9i/ration2 & 7,g7 ! comm]cial application ( relevant te*nologies1 su* z di/ribut$ en]gy res\rces1 microgrids1 or o!r en]gy te*nologies1 to e/abli% backup p[] = us]s or facilities affect$ by em]g5cy p[] %ut(fs4 7#c7 ,eligible entities ,! entities eligible to receive te*nical assi/ance = comm]cial application ( te*nologies "u ?is subsection include-- 7,a7 repres5tatives ( all sectors ( ! electric p[] indu/ry1 includ+ electric utilities1 trade organizations1 & transmission & di/ribution sy/em organizations1 own]s1 & op]ators2 7,b7 ,/ate & local gov]nm5ts & regulatory au?orities1 includ+ public utility commissions2 7,c7 tribal & ,alaska ,native gov]nm5tal entities2 7,d7 p>tn]%ips among entities "u subp>agraphs 7,a7 ?r\gh 7,c72 7,e7 regional p>tn]%ips2 & 7,f7 any o!r entities ! ,secret>y deems appropriate4 7#d7 ,au?ority ,no?+ 9 ?is subsection %all au?orize ! ,secret>y to require any entity to adopt any model1 tool1 te*nology1 plan1 analysis1 or assessm5t4 #hjae4 ,be/ practices & guidance docum5ts = en]gy sector cyb]security rese>* 7a7 ,9 g5]al ,! ,secret>y1 9 coord9ation ) appropriate ,f$]al ag5cies1 ! ,electricity ,subsector ,coord9at+ ,c\ncil1 /&>ds developm5t organizations1 ,/ate1 tribal1 local1 & t]ritorial gov]nm5ts1 ! private sector1 public utility commissions1 & o!r relevant /akehold]s1 %all coord9ate ! developm5t ( guidance docum5ts = rese>*1 developm5t1 & demon/ration activities to improve ! cyb]security capabilities ( ! en]gy sector ?r\gh p>ticipat+ ag5cies4 ,z "p ( ^! activities1 ! ,secret>y1 9 consultation ) relevant ,f$]al ag5cies1 %all-- 7#a7 facilitate /akehold] involvem5t to update-- 7,a7 ! ,roadmap to ,a*ieve ,en]gy ,deliv]y ,sy/ems ,cyb]security2 7,b7 ! ,cyb]security ,procurem5t ,language = ,en]gy ,deliv]y ,sy/ems1 includ+ develop+ guidance =-- 7i7 contract+ ) ?ird p>ties to conduct vuln]ability te/+ = in=mation sy/ems us$ across ! en]gy production1 deliv]y1 /orage1 & end use sy/ems2 7ii7 contract+ ) ?ird p>ties t utilize transi5t devices to access in=mation sy/ems2 & 7iii7 manag+ supply *a9 risks2 & 7,c7 ! ,electricity ,subsector ,cyb]security ,capability ,maturity ,model1 includ+ ! developm5t ( metrics to measure *anges 9 cyb]security read9ess2 & 7#b7 develop volunt>y guidance to improve digital =5sic analysis capabilities1 includ+-- 7,a7 develop+ /&>diz$ t]m9ology & monitor+ processes2 & 7,b7 utiliz+ human factors rese>* to develop m effective proc$ures = logg+ incid5t ev5ts2 & 7#c7 "w ) ! ,national ,sci5ce ,f\ndation1 ,dep>tm5t ( ,homel& ,security1 & /akehold]s to develop a me*anism to anonymize1 aggregate1 & %>e ! te/+ results f cyb]security te/ b$s to facilitate te*nology improvem5ts by public & private sector rese>*]s4 7b7 ,be/ practices ,! ,secret>y1 9 collaboration ) ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology1 ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy1 & o!r appropriate ,f$]al ag5cies1 %all conv5e relevant /akehold]s & facilitate ! developm5t (-- 7#a7 cons5sus-bas$ be/ practices to improve cyb]security =-- 7,a7 em]g+ en]gy te*nologies2 7,b7 di/ribut$ g5]ation & /orage te*nologies1 & o!r di/ribut$ en]gy res\rces2 7,c7 electric vehicles & electric vehicle *>g+ /ations2 & 7,d7 o!r te*nologies & devices t connect to ! electric grid2 7#b7 recomm5d$ cyb]security designs & te*nical requirem5ts t c be us$ by ! private sector to design & build int]op]able cyb]security features into te*nologies t connect to ! electric grid1 includ+ network$ devices & compon5ts on di/ribution sy/ems2 & 7#c7 te*nical analysis t c be us$ by ! private sector 9 develop+ be/ practices = te/ b$s & te/ b$ me?odologies t w enable reproducible te/+ ( cyb]security protections = in=mation sy/ems1 electronic devices1 & o!r relevant compon5ts1 s(tw>e1 & h>dw>e across te/ b$s4 7c7 ,regulatory au?ority ,none ( ! activities au?oriz$ 9 ?is section %all be con/ru$ to au?orize regulatory actions4 ,additionally1 ! volunt>y /&>ds develop$ "u ?is section %all n duplicate or conflict ) m&atory reliability /&>ds4 #hjaf4 ,vuln]ability te/+ & te*nical assi/ance to improve cyb]security ,! ,secret>y %all-- 7#a7 coord9ate ) appropriate ,f$]al ag5cies & en]gy sector asset own]s & op]ators1 lev]ag+ ! rese>* facilities & exp]tise ( ! ,national ,laboratories1 to assi/ entities 9 develop+ te/+ capabilities by-- 7,a7 utiliz+ a range ( me?ods to id5tify vuln]abilities 9 physical & cyb] sy/ems2 7,b7 develop+ cyb]security risk assessm5t tools & provid+ analyses & recomm5dations to p>ticipat+ /akehold]s2 & 7,c7 work+ ) appropriate ,f$]al ag5cies & /akehold]s to develop me?ods to %>e anonymiz$ & aggregat$ te/ results to assi/ relevant /akehold]s 9 ! en]gy sector1 rese>*]s1 & ! private sector to advance cyb]security ef=ts1 te*nologies1 & tools2 7#b7 collaborate ) relevant /akehold]s1 includ+ public utility commissions1 to-- 7,a7 id5tify in=mation1 rese>*1 /aff tra9+1 & analytical tools ne$$ to evaluate cyb]security issues & *all5ges 9 ! en]gy sector2 & 7,b7 facilitate ! %>+ ( in=mation & ! developm5t ( tools id5tifi$ "u subp>agraph 7,a72 7#c7 coord9ate ) tribal gov]nm5ts to id5tify in=mation1 rese>*1 & analysis tools ne$$ by tribal gov]nm5ts to increase ! cyb]security ( en]gy assets )9 _! jurisdiction4 #hjag4 ,cyb]security education & work=ce tra9+ rese>* & /&>ds 7a7 ,9 g5]al ,! ,secret>y %all support ! developm5t ( a cyb]security work=ce ?r\gh a program t-- 7#a7 facilitates collaboration betwe5 und]graduate & graduate /ud5ts1 rese>*]s at ! ,national ,laboratories1 & ! private sector2 7#b7 prioritizes sci5ce & te*nology 9 areas relevant to ! mission ( ! ,dep>tm5t ( ,en]gy ?r\gh ! design & application ( cyb]security te*nologies = ! en]gy sector2 7#c7 develops1 or facilitates private sector developm5t (1 volunt>y cyb]security tra9+ & retra9+ /&>ds1 lessons1 & recomm5dations = ! en]gy sector t m9imize duplication ( cyb]security compliance tra9+ programs2 & 7#d7 ma9ta9s a public database ( en]gy sector cyb]security education1 tra9+1 & c]tification programs4 7b7 ,grid resili5ce te*nology tra9+ ,! ,secret>y %all support ! developm5t ( ! grid work=ce ?r\gh a tra9+ program t prioritizes activities t enhance ! resili5ce ( ! electric grid & en]gy sector infra/ructure1 includ+ tra9+ on ! use ( tools1 te*nologies1 & me?ods develop$ "u ! grant program e/abli%$ 9 section #acaa7;b74 7c7 ,collaboration ,9 c>ry+ out ! program au?oriz$ 9 subsection 7a7 & 7b71 ! ,secret>y %all coord9ate ) appropriate ,f$]al ag5cies & lev]age programs & activities c>ri$ out across ! ,dep>tm5t ( ,en]gy1 o!r relevant ,f$]al ag5cies1 in/itutions ( high] education1 & o!r appropriate entities be/ suit$ to provide national lead]%ip on cyb]security & grid resili5ce-relat$ issues4 #hjah4 ,int]ag5cy coord9ation & /rategic plan = en]gy sector cyb]security rese>* 7a7 ,duties ,! ,secret>y1 9 coord9ation ) appropriate ,f$]al ag5cies & ! ,en]gy ,sector ,gov]nm5t ,coord9at+ ,c\ncil1 %all-- 7#a7 review ! mo/ rec5t v]sions ( ! ,roadmap to ,a*ieve ,en]gy ,deliv]y ,sy/ems ,cyb]security & ! ,multi-,ye> ,program ,plan = ,en]gy ,sector ,cyb]security to id5tify crosscutt+ en]gy sector cyb]security rese>* ne$s & opportunities = collaboration among ,f$]al ag5cies & o!r relevant /akehold]s2 7#b7 id5tify int]discipl9>y rese>*1 te*nology1 & tools t c be appli$ to cyb]security *all5ges 9 ! en]gy sector2 7#c7 id5tify te*nology transf] opportunities to accel]ate ! developm5t & comm]cial application ( novel cyb]security te*nologies1 sy/ems1 & processes 9 ! en]gy sector2 & 7#d7 develop a coord9at$ ,int]ag5cy ,/rategic ,plan = rese>* to advance cyb]security capabilities us$ 9 ! en]gy sector t builds on ! ,roadmap to ,a*ieve ,en]gy ,deliv]y ,sy/ems 9 ,cyb]security & ! ,multi-,ye> ,program ,plan = ,en]gy ,sector ,cyb]security4 7b7 ,int]ag5cy ,/rategic ,plan 7#a7 ,submittal ,! ,int]ag5cy ,/rategic ,plan develop$ "u subsection 7a77#d7 %all be submitt$ to ,congress & made public )9 #ab mon?s aft] ! date ( enactm5t ( ! ,grid ,security ,rese>* & ,developm5t ,act4 7#b7 ,cont5ts ,! ,int]ag5cy ,/rategic ,plan %all include-- 7,a7 an analysis ( h[ exi/+ cyb]security rese>* ef=ts across ! ,f$]al ,gov]nm5t are advanc+ ! goals ( ! ,roadmap to ,a*ieve ,en]gy ,deliv]y ,sy/ems ,cyb]security & ! ,multi-,ye> ,program ,plan = ,en]gy ,sector ,cyb]security2 7,b7 recomm5dations = rese>* areas t may advance ! cyb]security ( ! en]gy sector2 7,c7 an ov]view ( exi/+ & propos$ public & private sector rese>* ef=ts t address ! topics outl9$ 9 p>agraph 7#c72 & 7,d7 an ov]view ( ne$$ support = work=ce tra9+ 9 cyb]security = ! en]gy sector4 7#c7 ,consid]ations ,9 develop+ ! ,int]ag5cy ,/rategic ,plan1 ! ,secret>y1 9 coord9ation ) appropriate ,f$]al ag5cies & ! ,en]gy ,sector ,gov]nm5t ,coord9at+ ,c\ncil1 %all consid]-- 7,a7 opportunities = human factors rese>* to improve ! design & effectiv5ess ( cyb]security devices1 te*nologies1 tools1 processes1 & tra9+ programs2 7,b7 contributions ( o!r discipl9es to ! developm5t ( innovative cyb]security proc$ures1 devices1 compon5ts1 te*nologies1 & tools2 7,c7 opportunities = te*nology transf] programs to facilitate private sector developm5t ( cyb]security proc$ures1 devices1 compon5ts1 te*nologies1 & tools = ! en]gy sector2 7,d7 broad] applications ( ! "w done by relevant ,f$]al ag5cies to advance ! cyb]security ( in=mation sy/ems & data analytics sy/ems = ! en]gy sector2 & 7,e7 activities call$ = 9 ! ,f$]al cyb]security rese>* & developm5t /rategic plan requir$ by section #bja7;a77#a7 ( ! ,cyb]security ,enhancem5t ,act ( #bjad 7#ae ,u4,s4,c4 #gdca7;a77#a774 7c7 ,p>ticipation ,= ! purposes ( c>ry+ out ?is section1 ! ,en]gy ,sector ,gov]nm5t ,coord9at+ ,c\ncil %all include repres5tatives f ,f$]al ag5cies ) exp]tise 9 ! en]gy sector1 in=mation sy/ems1 data analytics1 cyb] & physical sy/ems1 eng9e]+1 human factors rese>*1 human-ma*9e int]faces1 high p]=mance comput+1 big data & data analytics1 or o!r discipl9es consid]$ appropriate by ! ,c\ncil ,*air4 #hjai4 ,report to ,congress 7a7 ,/udy ,! ,secret>y1 9 collaboration ) ! ,national ,in/itute ( ,/&>ds & ,te*nology1 o!r ,f$]al ag5cies1 & en]gy sector /akehold]s1 9 ord] to provide recomm5dations = additional rese>*1 developm5t1 demon/ration1 & comm]cial application activities1 %all-- 7#a7 analyze physical & cyb] attacks on en]gy sector infra/ructure & in=mation sy/ems & id5tify co/-effective opportunities to improve physical & cyb]security2 & 7#b7 exam9e ! risks associat$ ) increas+ p5etration ( digital te*nologies 9 grid networks1 p>ticul>ly on ! di/ribution grid4 7b7 ,cont5t ,! /udy %all-- 7#a7 analyze processes1 op]ational proc$ures1 & o!r factors common among cyb] attacks2 7#b7 id5tify areas :]e human behavior plays a critical role 9 ma9ta9+ or compromis+ ! security ( a sy/em2 7#c7 recomm5d-- 7,a7 *anges to ! design ( devices1 human-ma*9e int]faces1 te*nologies1 tools1 processes1 or proc$ures to optimize security t d n require a *ange 9 human behavior2 & 7,b7 tra9+ te*niques to increase ! capacity ( employees to actively id5tify1 prev5t1 or neutralize ! impact ( cyb] attacks2 7#d7 evaluate exi/+ eng9e]+ & te*nical design crit]ia & guidel9es t incorporate human factors rese>* f9d+s1 & recomm5d crit]ia & guidel9es = cyb]security tools t c be us$ to develop display sy/ems = cyb]security monitor+1 su* z al>ms1 us]-fri5dly displays1 & lay\ts2 7#e7 evaluate ! cyb]security risks & b5efits ( v>i\s design & ar*itecture options = en]gy sector sy/ems1 network$ grid sy/ems & compon5ts1 & automation sy/ems1 includ+ consid]ation (-- 7,a7 designs t include bo? digital & analog control devices & te*nologies2 7,b7 diff]5t communication te*nologies us$ to transf] in=mation & data betwe5 control sy/em devices1 te*nologies1 & sy/em op]ators2 7,c7 automat$ & human-9-!-loop devices & te*nologies2 7,d7 programmable v]sus nonprogrammable devices & te*nologies2 7,e7 increas$ r$undancy us+ dissimil> cyb]security te*nologies2 & 7,f7 grid ar*itectures t use autonom\s functions to limit control vuln]abilities2 & 7#f7 recomm5d me?ods or metrics to docum5t *anges 9 risks associat$ ) sy/em designs & ar*itectures4 7c7 ,consultation ,9 conduct+ ! /udy1 ! ,secret>y %all consult ) en]gy sector /akehold]s1 academic rese>*]s1 ! private sector1 & o!r relevant /akehold]s4 7d7 ,report ,n lat] ?an #bd mon?s aft] ! date ( enactm5t ( ! ,grid ,security ,rese>* & ,developm5t ,act1 ! ,secret>y %all submit ! /udy to ! ,committee on ,sci5ce1 ,space1 & ,te*nology ( ! ,h\se ( ,repres5tatives & ! ,committee on ,en]gy & ,natural ,res\rces ( ! ,s5ate4 #hjbj4 ,critical infra/ructure rese>* & con/ruction 7a7 ,9 g5]al ,! ,secret>y %all c>ry out a program ( rese>*1 developm5t1 & demon/ration ( te*nologies & tools to help ensure ! resili5ce & security ( critical integrat$ grid infra/ructures4 7b7 ,critical infra/ructure def9$ ,9 ?is section1 ! t]m critical infra/ructure means infra/ructure t ! ,secret>y det]m9es to be vital to socioeconomic activities su* t1 if de/roy$ or damag$1 su* de/ruction or damage c\ld cause sub/antial disruption to su* socioeconomic activities4 7c7 ,coord9ation ,9 c>ry+ out ! program "u subsection 7a71 ! ,secret>y %all lev]age exp]tise & res\rces ( & facilitate collaboration & coord9ation betwe5-- 7#a7 relevant programs & activities across ! ,dep>tm5t2 7#b7 ! ,dep>tm5t ( ,def5se2 & 7#c7 ! ,dep>tm5t ( ,homel& ,security4 7d7 ,en]gy sector critical infra/ructure te/ facility ,9 c>ry+ out ! program "u subsection 7a71 ! ,secret>y1 9 consultation ) o!r appropriate ,f$]al ag5cies1 %all e/abli% & op]ate an ,en]gy ,sector ,critical ,infra/ructure ,te/ ,facility 7ref]r$ to 9 ?is section z ! ,te/ ,facility7 t all[s = scalable physical & cyb] p]=mance te/+ to be conduct$ on indu/ry-scale en]gy sector critical infra/ructure sy/ems4 ,?is facility %all include a focus on-- 7#a7 cyb]security te/ b$s2 & 7#b7 electric grid te/ b$s4 7e7 ,selection ,! ,secret>y %all select ! ,te/ ,facility "u ?is section on a competitive1 m]it-review$ basis4 ,! ,secret>y %all consid] applications f ,national ,laboratories1 in/itutions ( high] education1 multi-in/itutional collaborations1 & o!r appropriate entities4 7f7 ,duration ,! ,te/ ,facility e/abli%$ "u ?is section %all receive support = a p]iod ( n m ?an #e ye>s1 subject to ! availability ( appropriations4 7g7 ,r5ewal ,^u ! expiration ( any p]iod ( support ( ! ,te/ ,facility1 ! ,secret>y may r5ew support = ! ,te/ ,facility1 on a m]it-review$ basis1 = a p]iod ( n m ?an #e ye>s4 7h7 ,t]m9ation ,consi/5t ) ! exi/+ au?orities ( ! ,dep>tm5t1 ! ,secret>y may t]m9ate ! ,te/ ,facility = cause dur+ ! p]=mance p]iod4 #hjba4 ,def9itions ,9 ?is title3 7#a7 ,big data ,! t]m big data means datasets t require advanc$ analytical me?ods = _! trans=mation into useful in=mation4 7#b7 ,cyb]security ,! t]m cyb]security means protect+ an in=mation sy/em or in=mation t is /or$ on1 process$ by1 or transit+ an in=mation sy/em f a cyb]security ?reat or security vuln]ability4 7#c7 ,cyb]security ?reat ,! t]m cyb]security ?reat has ! mean+ giv5 ! t]m 9 section #ajb ( ! ,cyb]security ,in=mation ,%>+ ,act ( 7#f ,u4,s4,c4 #aeja74 7#d7 ,dep>tm5t ,! t]m ,dep>tm5t means ! ,dep>tm5t ,( ,en]gy4 7#e7 ,electricity ,subsector ,coord9at+ ,c\ncil ,! t]m ,electricity ,subsector ,coord9at+ ,c\ncil means ! self-organiz$1 self-gov]n$ c\ncil consi/+ ( s5ior indu/ry repres5tatives to s]ve z ! pr9cipal liaison betwe5 ! ,f$]al ,gov]nm5t & ! electric p[] sector & to c>ry out ! role ( ! ,sector ,coord9at+ ,c\ncil z e/abli%$ 9 ! ,national ,infra/ructure ,protection ,plan = ! electricity subsector4 7#f7 ,en]gy ,sector ,gov]nm5t ,coord9at+ ,c\ncil ,! t]m ,en]gy ,sector ,gov]nm5t ,coord9at+ ,c\ncil means ! c\ncil consi/+ ( repres5tatives f relevant ,f$]al ,gov]nm5t ag5cies to provide effective coord9ation ( en]gy sector ef=ts to ensure a secure1 reliable1 & resili5t en]gy infra/ructure & to c>ry out ! role ( ! ,gov]nm5t ,coord9at+ ,c\ncil z e/abli%$ 9 ! ,national ,infra/ructure ,protection ,plan = ! en]gy sector4 7#g7 ,hi/orically ,black college or univ]sity ,! t]m hi/orically ,black college or univ]sity has ! mean+ giv5 ! t]m "p ,b in/itution 9 section #cbb7b7 ( ! ,high] ,education ,act ( #aife 7#bi ,u4,s4,c4 #ajf7b774 7#h7 ,human factors rese>* ,! t]m human factors rese>* means rese>* on human p]=mance 9 social & physical environm5ts1 & on ! integration & int]action ( humans ) physical sy/ems & comput] h>dw>e & s(tw>e4 7#i7 ,human-ma*9e int]faces ,! t]m human-ma*9e int]faces means te*nologies t pres5t in=mation to an op]ator or us] ab\t ! /ate ( a process or sy/em1 or accept human in/ructions to implem5t an action1 includ+ visualization displays su* z a graphical us] int]face4 7#aj7 ,in=mation sy/em ,! t]m in=mation sy/em-- 7,a7 has ! mean+ giv5 ! t]m 9 section #ajb ( ! ,cyb]security ,in=mation ,%>+ ,act ( #bjae 7#f ,u4,s4,c4 #aeja72 & 7,b7 includes op]ational te*nology1 in=mation te*nology1 & communications4 7#aa7 ,m9ority-s]v+ in/itution ,! t]m m9ority-s]v+ in/itution means an eligible in/itution "u section #cga7;a7 ( ! ,high] ,education ,act ( #aife 7#bj ,u4,s4,c4 #ajfgq7a774 7#ab7 ,national laboratory ,! t]m national laboratory has ! mean+ giv5 ! t]m 9 section #b ( ! ,en]gy ,policy ,act ( #bjje 7#db ,u4,s4,c4 #aehja74 7#ac7 ,secret>y ,! t]m ,secret>y means ! ,secret>y ( ,en]gy4 7#ad7 ,security vuln]ability ,! t]m security vuln]ability has ! mean+ giv5 ! t]m 9 section #ajb ( ! ,cyb]security ,in=mation ,%>+ ,act ( #bjae 7#f ,u4,s4,c4 #aeja74 7#ae7 ,transi5t devices ,! t]m transi5t devices means removable m$ia1 includ+ floppy disks1 compact disks1 ,,usb fla% drives1 ext]nal h>d drives1 mobile devices1 & o!r devices t utilize wireless connections4 4 #d4 ,au?orization ( appropriations ,section #hjab ( division ,z ( ! ,consolidat$ ,appropriations ,act1 #bjba 7,public ,law #aaf-bfj7 is am5d$ by /rik+ subsection 7b77#a7 & ins]t+ ! foll[+3 7#a7 to c>ry out sections #hjjf1 #hjac1 #hjad1 #hjae1 #hjaf1 #hjag1 #hjah1 #hjai1 #hjbj & ! am5dm5ts made by sections #hjja1 #hjjb1 & #hjje ( ?is title-- 7,a7 #cga1jjj1jjj = fiscal ye> #bjbb2 7,b7 #che1eej1jjj = fiscal ye> #bjbc2 7,c7 #djj1egg1ejj = fiscal ye> #bjbd2 7,d7 #dbj1fjf1cge = fiscal ye> #bjbe2 & 7,e7 #dda1fcf1fid = fiscal ye> #bjbf4 4 #e4 ,con=m+ am5dm5ts 7a7 ,section #aja7;b7 ( ! division ,z ( ! ,consolidat$ ,appropriations ,act1 #bjba 7,public ,law #aaf-bfj7 is am5d$ 9 ! table ( cont5ts-- 7#a7 9 ! matt] relat+ to #hjac1 by /rik+ #hjac & ins]t+ #hjbb2 7#b7 9 ! matt] relat+ to #hjad1 by /rik+ #hjad & ins]t+ #hjbc2 7#c7 9 ! matt] relat+ to #hjae1 by /rik+ #hjae & ins]t+ #hjbd2 7#d7 by add+ aft] ! matt] relat+ to section #hjab ! foll[+3 ,sec4 #hjac4 ,en]gy sector security rese>*1 developm5t1 & demon/ration program4 ,sec4 #hjad4 ,grid resili5ce & em]g5cy response4 ,sec4 #hjae4 ,be/ practices & guidance docum5ts = en]gy sector cyb]security rese>*4 ,sec4 #hjaf4 ,vuln]ability te/+ & te*nical assi/ance to improve cyb]security4 ,sec4 #hjag4 ,cyb]security education & work=ce tra9+ rese>* & /&>ds4 ,sec4 #hjah4 ,int]ag5cy coord9ation & /rategic plan = en]gy sector cyb]security rese>*4 ,sec4 #hjai4 ,report to ,congress4 ,sec4 #hjbj4 ,critical infra/ructure rese>* & con/ruction4 ,sec4 #hjba4 ,def9itions4 4 7b7 ,sections #hjac ?r\gh #hjae ( division ,z ( ! ,consolidat$ ,appropriations ,act1 #bjba 7,public ,law #aaf-bfj7 are r$esignat$ z sections #hjbb ?r\gh #hjbd1 respectively4