#aagth ,,congress #b;d ,session ,s4 #bebj ,,an ,,act ,to amend the ,homeland ,security ,act of #bjjb to provide for engagements with ,state1 local1 ,tribal1 and territorial governments1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,state and ,local ,government ,cybersecurity ,act of #bjba4 #b4 ,amendments to the ,homeland ,security ,act of #bjjb ,subtitle ,a of title ,,xxii of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fea et seq47 is amended-- 7#a7 in section #bbja 7#f ,u4,s4,c4 #fea71 by adding at the end the following3 7#g7 ,,sltt entity ,the term ,,sltt entity means a domestic government entity that is a ,state government1 local government1 ,tribal government1 territorial government1 or any subdivision thereof4 2 and 7#b7 in section #bbji 7#f ,u4,s4,c4 #fei7-- 7,a7 in subsection 7c77#f71 by inserting operational and before timely2 7,b7 in subsection 7d77#a77;,e71 by inserting 1 including an entity that collaborates with election officials1 after governments2 and 7,c7 by adding at the end the following3 7p7 ,coordination on cybersecurity for ,,sltt entities 7#a7 ,coordination ,the ,center shall1 upon request and to the extent practicable1 and in coordination as appropriate with ,federal and non-,federal entities1 such as the ,multi-,state ,information ,sharing and ,analysis ,center-- 7,a7 conduct exercises with ,,sltt entities2 7,b7 provide operational and technical cybersecurity training to ,,sltt entities to address cybersecurity risks or incidents1 with or without reimbursement1 related to-- 7i7 cyber threat indicators2 7ii7 defensive measures2 7iii7 cybersecurity risks2 7iv7 vulnerabilities2 and 7v7 incident response and management2 7,c7 in order to increase situational awareness and help prevent incidents1 assist ,,sltt entities in sharing1 in real time1 with the ,federal ,government as well as among ,,sltt entities1 actionable-- 7i7 cyber threat indicators2 7ii7 defensive measures2 7iii7 information about cybersecurity risks2 and 7iv7 information about incidents2 7,d7 provide ,,sltt entities notifications containing specific incident and malware information that may affect them or their residents2 7,e7 provide to1 and periodically update1 ,,sltt entities via an easily accessible platform and other means-- 7i7 information about tools2 7ii7 information about products2 7iii7 resources2 7iv7 policies2 7v7 guidelines2 7vi7 controls2 and 7vii7 other cybersecurity standards and best practices and procedures related to information security1 including1 as appropriate1 information produced by other ,federal agencies2 7,f7 work with senior ,,sltt entity officials1 including chief information officers and senior election officials and through national associations1 to coordinate the effective implementation by ,,sltt entities of tools1 products1 resources1 policies1 guidelines1 controls1 and procedures related to information security to secure the information systems1 including election systems1 of ,,sltt entities2 7,g7 provide operational and technical assistance to ,,sltt entities to implement tools1 products1 resources1 policies1 guidelines1 controls1 and procedures on information security2 7,h7 assist ,,sltt entities in developing policies and procedures for coordinating vulnerability disclosures consistent with international and national standards in the information technology industry2 and 7,i7 promote cybersecurity education and awareness through engagements with ,federal agencies and non-,federal entities4 7q7 ,report ,not later than #a year after the date of enactment of this subsection1 and every #b years thereafter1 the ,secretary shall submit to the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate and the ,committee on ,homeland ,security of the ,house of ,representatives a report on the services and capabilities that the ,agency directly and indirectly provides to ,,sltt entities4 4 ,passed the ,senate ,january #aa 7legislative day1 ,january #aj71 #bjbb4,secretary