,,ii  #aag? ,,congress  #a/ ,session    
,s4 #bdci  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,july #bb1 #bjba,mr4   
,pet]s 7= himself1 ,mr4 ,portman1 ,mr4  
,rubio1 & ,mr4 ,w>n]7 introduc$ ! foll[+
 bill2 :i* 0 read twice & ref]r$ to !   
,committee on ,homel& ,security &       
,gov]nm5tal ,affairs  ,a ,,bill  ,to    
am5d ! ,homel& ,security ,act ( #bjjb to
 provide = ! responsibility ( !         
,cyb]security & ,infra/ructure ,security
 ,ag5cy to ma9ta9 capabilities to       
id5tify ?reats to indu/rial control     
sy/ems1 & = o!r purposes4  #a4 ,%ort    
title ,?is ,act may be cit$ z ! ,,dhs   
,indu/rial ,control ,sy/ems             
,capabilities ,enhancem5t ,act ( #bjba4 
#b4 ,capabilities ( ! ,cyb]security &   
,infra/ructure ,security ,ag5cy to      
id5tify ?reats to indu/rial control     
sy/ems  7a7 ,9 g5]al ,section #bbji ( ! 
,homel& ,security ,act ( #bjjb 7#f      
,u4,s4,c4 #fei7 is am5d$-- 7#a7 9       
subsection 7e77#a7-- 7,a7 9 subp>agraph 
7,g71 by /rik+ & aft] ! semicolon2  7,b7

 9 subp>agraph 7,h71 by ins]t+ & aft] ! 
semicolon2 &  7,c7 by add+ at ! end !   
foll[+ new subp>agraph3  7,i7 activities
 ( ! ,c5t] address ! security ( bo?     
in=mation te*nology & op]ational        
te*nology1 includ+ indu/rial control    
sy/ems2  2 &  7#b7 by add+ at ! end !   
foll[+ new subsection3  7p7 ,indu/rial  
control sy/ems ,! ,director %all ma9ta9 
capabilities to id5tify & address ?reats
 & vuln]abilities to products &         
te*nologies int5d$ = use 9 ! automat$   
control ( critical infra/ructure        
processes4 ,9 c>ry+ out ?is subsection1 
! ,director %all-- 7#a7 lead ,f$]al     
,gov]nm5t ef=ts1 9 consultation )       
,sector ,risk ,managem5t ,ag5cies1 z    
appropriate1 to id5tify & mitigate      
cyb]security ?reats to indu/rial control
 sy/ems1 includ+ sup]visory control &   
data acquisition sy/ems2  7#b7 ma9ta9   
?reat hunt+ & incid5t response          
capabilities to respond to indu/rial    
control sy/em cyb]security risks &      
incid5ts2  7#c7 provide cyb]security    

te*nical assi/ance to indu/ry end-us]s1 
product manufactur]s1 ,sector ,risk     
,managem5t ,ag5cies1 o!r ,f$]al ag5cies1
 & o!r indu/rial control sy/em          
/akehold]s to id5tify1 evaluate1 assess1
 & mitigate vuln]abilities2  7#d7       
collect1 coord9ate1 & provide           
vuln]ability in=mation to ! indu/rial   
control sy/ems community by1 z          
appropriate1 work+ closely ) security   
rese>*]s1 indu/ry end-us]s1 product     
manufactur]s1 ,sector ,risk ,managem5t  
,ag5cies1 o!r ,f$]al ag5cies1 & o!r     
indu/rial control sy/ems /akehold]s2 &  
7#e7 conduct su* o!r ef=ts & assi/ance z
 ! ,secret>y det]m9es appropriate4  4   
7b7 ,report to ,congress ,n lat] ?an    
#ahj days aft] ! date ( ! enactm5t ( ?is
 ,act & e #f mon?s !reaft] dur+ !       
subsequ5t #d-ye> p]iod1 ! ,director ( ! 
,cyb]security & ,infra/ructure ,security
 ,ag5cy ( ! ,dep>tm5t ( ,homel&         
,security %all provide to ! ,committee  
on ,homel& ,security & ,gov]nm5tal      
,affairs ( ! ,s5ate & ! ,committee on   

,homel& ,security ( ! ,h\se (           
,repres5tatives a brief+ on ! indu/rial 
control sy/ems capabilities ( ! ,ag5cy  
"u section #bbji ( ! ,homel& ,security  
,act ( #bjjb 7#f ,u4,s4,c4 #fei71 z     
am5d$ by subsection 7a74  7c7 ,,gao     
review ,n lat] ?an two ye>s aft] ! date 
( ! enactm5t ( ?is ,act1 ! ,comptroll]  
,g5]al ( ! ,unit$ ,/ates %all review    
implem5tation ( ! requirem5ts (         
subsections 7e77#a77;,i7 & 7p7 ( section
 #bbji ( ! ,homel& ,security ,act (     
#bjjb 7#f ,u4,s4,c4 #fei71 z am5d$ by   
subsection 7a71 & submit to ! ,committee
 on ,homel& ,security & ,gov]nm5t       
,affairs ( ! ,s5ate & ! ,committee on   
,homel& ,security ( ! ,h\se (           
,repres5tatives a report conta9+ f9d+s &
 recomm5dations relat+ to su*           
implem5tation4 ,su* report %all include 
in=mation on ! foll[+3 7#a7 ,any        
int]ag5cy coord9ation *all5ges to !     
ability ( ! ,director ( ! ,cyb]security 
& ,infra/ructure ,ag5cy ( ! ,dep>tm5t ( 
,homel& ,security to lead ,f$]al ef=ts  

to id5tify & mitigate cyb]security      
?reats to indu/rial control sy/ems      
pursuant to subsection 7p77#a7 ( su*    
section #bbji4  7#b7 ,! degree to :i* ! 
,ag5cy has adequate capacity1 exp]tise1 
& res\rces to c>ry out ?reat hunt+ &    
incid5t response capabilities to        
mitigate cyb]security ?reats to         
indu/rial control sy/ems pursuant to    
subsection 7p77#b7 ( su* section #bbji1 
z well z additional res\rces t w\ld be  
ne$$ to close any op]ational gaps 9 su* 
capabilities4  7#c7 ,! ext5t to :i*     
indu/rial control sy/em /akehold]s s\ght
 cyb]security te*nical assi/ance f !    
,ag5cy pursuant to subsection 7p77#c7 ( 
su* section #bbji1 & ! utility &        
effectiv5ess ( su* te*nical assi/ance4  
7#d7 ,! degree to :i* ! ,ag5cy works )  
security rese>*]s & o!r indu/rial       
control sy/ems /akehold]s1 pursuant to  
subsection 7p77#d7 ( su* section #bbji1 
to provide vuln]ability in=mation to !  
indu/rial control sy/ems community4