,,ii  #aagth ,,congress  #ast ,session  
,s4 #bdci  ,,in ,,the ,,senate ,,of     
,,the ,,united ,,states  ,july #bb1     
#bjba,mr4 ,peters 7for himself1 ,mr4    
,portman1 ,mr4 ,rubio1 and ,mr4 ,warner7
 introduced the following bill2 which   
was read twice and referred to the      
,committee on ,homeland ,security and   
,governmental ,affairs  ,a ,,bill  ,to  
amend the ,homeland ,security ,act of   
#bjjb to provide for the responsibility 
of the ,cybersecurity and               
,infrastructure ,security ,agency to    
maintain capabilities to identify       
threats to industrial control systems1  
and for other purposes4  #a4 ,short     
title ,this ,act may be cited as the    
,,dhs ,industrial ,control ,systems     
,capabilities ,enhancement ,act of      
#bjba4  #b4 ,capabilities of the        
,cybersecurity and ,infrastructure      
,security ,agency to identify threats to
 industrial control systems  7a7 ,in    
general ,section #bbji of the ,homeland 
,security ,act of #bjjb 7#f ,u4,s4,c4   

#fei7 is amended-- 7#a7 in subsection   
7e77#a7-- 7,a7 in subparagraph 7,g71 by 
striking and after the semicolon2  7,b7 
in subparagraph 7,h71 by inserting and  
after the semicolon2 and  7,c7 by adding
 at the end the following new           
subparagraph3  7,i7 activities of the   
,center address the security of both    
information technology and operational  
technology1 including industrial control
 systems2  2 and  7#b7 by adding at the 
end the following new subsection3  7p7  
,industrial control systems ,the        
,director shall maintain capabilities to
 identify and address threats and       
vulnerabilities to products and         
technologies intended for use in the    
automated control of critical           
infrastructure processes4 ,in carrying  
out this subsection1 the ,director      
shall-- 7#a7 lead ,federal ,government  
efforts1 in consultation with ,sector   
,risk ,management ,agencies1 as         
appropriate1 to identify and mitigate   
cybersecurity threats to industrial     

control systems1 including supervisory  
control and data acquisition systems2   
7#b7 maintain threat hunting and        
incident response capabilities to       
respond to industrial control system    
cybersecurity risks and incidents2  7#c7
 provide cybersecurity technical        
assistance to industry end-users1       
product manufacturers1 ,sector ,risk    
,management ,agencies1 other ,federal   
agencies1 and other industrial control  
system stakeholders to identify1        
evaluate1 assess1 and mitigate          
vulnerabilities2  7#d7 collect1         
coordinate1 and provide vulnerability   
information to the industrial control   
systems community by1 as appropriate1   
working closely with security           
researchers1 industry end-users1 product
 manufacturers1 ,sector ,risk           
,management ,agencies1 other ,federal   
agencies1 and other industrial control  
systems stakeholders2 and  7#e7 conduct 
such other efforts and assistance as the
 ,secretary determines appropriate4  4  

7b7 ,report to ,congress ,not later than
 #ahj days after the date of the        
enactment of this ,act and every #f     
months thereafter during the subsequent 
#d-year period1 the ,director of the    
,cybersecurity and ,infrastructure      
,security ,agency of the ,department of 
,homeland ,security shall provide to the
 ,committee on ,homeland ,security and  
,governmental ,affairs of the ,senate   
and the ,committee on ,homeland         
,security of the ,house of              
,representatives a briefing on the      
industrial control systems capabilities 
of the ,agency under section #bbji of   
the ,homeland ,security ,act of #bjjb   
7#f ,u4,s4,c4 #fei71 as amended by      
subsection 7a74  7c7 ,,gao review ,not  
later than two years after the date of  
the enactment of this ,act1 the         
,comptroller ,general of the ,united    
,states shall review implementation of  
the requirements of subsections         
7e77#a77;,i7 and 7p7 of section #bbji of
 the ,homeland ,security ,act of #bjjb  

7#f ,u4,s4,c4 #fei71 as amended by      
subsection 7a71 and submit to the       
,committee on ,homeland ,security and   
,government ,affairs of the ,senate and 
the ,committee on ,homeland ,security of
 the ,house of ,representatives a report
 containing findings and recommendations
 relating to such implementation4 ,such 
report shall include information on the 
following3 7#a7 ,any interagency        
coordination challenges to the ability  
of the ,director of the ,cybersecurity  
and ,infrastructure ,agency of the      
,department of ,homeland ,security to   
lead ,federal efforts to identify and   
mitigate cybersecurity threats to       
industrial control systems pursuant to  
subsection 7p77#a7 of such section      
#bbji4  7#b7 ,the degree to which the   
,agency has adequate capacity1          
expertise1 and resources to carry out   
threat hunting and incident response    
capabilities to mitigate cybersecurity  
threats to industrial control systems   
pursuant to subsection 7p77#b7 of such  

section #bbji1 as well as additional    
resources that would be needed to close 
any operational gaps in such            
capabilities4  7#c7 ,the extent to which
 industrial control system stakeholders 
sought cybersecurity technical          
assistance from the ,agency pursuant to 
subsection 7p77#c7 of such section      
#bbji1 and the utility and effectiveness
 of such technical assistance4  7#d7    
,the degree to which the ,agency works  
with security researchers and other     
industrial control systems stakeholders1
 pursuant to subsection 7p77#d7 of such 
section #bbji1 to provide vulnerability 
information to the industrial control   
systems community4