,,ii  #aagth ,,congress  #ast ,session  
,s4 #acej  ,,in ,,the ,,senate ,,of     
,,the ,,united ,,states  ,april #bb1    
#bjba,ms4 ,hassan 7for herself and ,mr4 
,sasse7 introduced the following bill2  
which was read twice and referred to the
 ,committee on ,homeland ,security and  
,governmental ,affairs  ,a ,,bill  ,to  
require the ,secretary of ,homeland     
,security to establish a national risk  
management cycle1 and for other         
purposes4  #a4 ,short title ,this ,act  
may be cited as the ,national ,risk     
,management ,act of #bjba4  #b4         
,national risk management cycle  7a7 ,in
 general ,subtitle ,a of title ,,xxii of
 the ,homeland ,security ,act of #bjjb  
7#f ,u4,s4,c4 #fea et seq471 is amended 
by adding at the end the following3     
#bbah4 ,national risk management cycle  
7a7 ,definitions ,in this section3 7#a7 
,critical infrastructure ,the term      
critical infrastructure has the meaning 
given the term in section #ajaf7;e7 of  
the ,critical ,infrastructures          

,protection ,act of #bjja 7#db ,u4,s4,c4
 #eaie;c7e774  7#b7 ,national critical  
functions ,the term national critical   
functions means the functions of        
government and the private sector so    
vital to the ,united ,states that their 
disruption1 corruption1 or dysfunction  
would have a debilitating effect on     
security1 national economic security1   
national public health or safety1 or any
 combination thereof4  7b7 ,national    
risk management cycle  7#a7 ,risk       
identification and assessment  7,a7 ,in 
general ,the ,secretary1 acting through 
the ,director1 shall establish a process
 by which to identify1 assess1 and      
prioritize risks to critical            
infrastructure1 considering both cyber  
and physical threats1 vulnerabilities1  
and consequences4  7,b7 ,consultation   
,in establishing the process required   
under subparagraph 7,a71 the ,secretary 
shall consult with ,sector ,risk        
,management ,agencies1 critical         
infrastructure owners and operators1 and

 the ,national ,cyber ,director4  7,c7  
,publication ,not later than #ahj days  
after the date of enactment of this     
section1 the ,secretary shall publish in
 the ,federal ,register procedures for  
the process established under           
subparagraph 7,a74  7,d7 ,report ,the   
,secretary shall submit to the          
,president1 the ,committee on ,homeland 
,security and ,governmental ,affairs of 
the ,senate1 and the ,committee on      
,homeland ,security of the ,house of    
,representatives a report on the risks  
identified by the process established   
under subparagraph 7,a7-- 7i7 not later 
than #a year after the date of enactment
 of this section2 and  7ii7 not later   
than #a year after the date on which the
 ,secretary submits a periodic          
evaluation described in section         
#ijjb7;b77#b7 of title ,,xc of division 
,h of the ,william ,m4 7,mac7           
,thornberry ,national ,defense          
,authorization ,act for ,fiscal ,year   
#bjba 7,public ,law #aaf-bhc74  7#b7    

,national critical infrastructure       
resilience strategy  7,a7 ,in general   
,not later than #a year after the date  
on which the ,secretary delivers each   
report required under paragraph 7#a71   
the ,president shall deliver to majority
 and minority leaders of the ,senate1   
the ,speaker and minority leader of the 
,house of ,representatives1 the         
,committee on ,homeland ,security and   
,governmental ,affairs of the ,senate1  
and the ,committee on ,homeland         
,security of the ,house of              
,representatives a national critical    
infrastructure resilience strategy      
designed to address the risks identified
 by the ,secretary4  7,b7 ,elements ,in 
each strategy delivered under           
subparagraph 7,a71 the ,president       
shall-- 7i7 identify1 assess1 and       
prioritize areas of risk to critical    
infrastructure that would compromise1   
disrupt1 or impede their ability to     
support the national critical functions 
of national security1 economic security1

 or public health and safety2  7ii7     
assess the implementation of the        
previous national critical              
infrastructure resilience strategy1 as  
applicable2  7iii7 identify and outline 
current and proposed national-level     
actions1 programs1 and efforts to be    
taken to address the risks identified2  
7iv7 identify the ,federal departments  
or agencies responsible for leading each
 national-level action1 program1 or     
effort and the relevant critical        
infrastructure sectors for each2  7v7   
outline the budget plan required to     
provide sufficient resources to         
successfully execute the full range of  
activities proposed or described by the 
strategy2 and  7vi7 request any         
additional authorities or resources     
necessary to successfully execute the   
strategy4  7,c7 ,form ,each strategy    
delivered under subparagraph 7,a7 shall 
be unclassified1 but may contain a      
classified annex4  7#c7 ,congressional  
briefing ,not later than #a year after  

the date on which the ,president        
delivers a strategy under this section1 
and every year thereafter1 the          
,secretary1 in coordination with ,sector
 ,risk ,management ,agencies1 shall     
brief the appropriate committees of     
,congress on the national risk          
management cycle activities undertaken  
pursuant to the strategy4  4  7b7       
,technical and conforming amendment ,the
 table of contents in section #a7;b7 of 
the ,homeland ,security ,act of #bjjb   
7,public ,law #ajg-bif2 #aaf ,stat4     
#bace7 is amended by inserting after the
 item relating to section #bbag the     
following3  ,sec4 #bbah4 ,national risk 
management cycle4  4