,,ii #aag? ,,congress #a/ ,session ,s4 #bfff ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,augu/ #e1 #bjba,mr4 ,rubio 7= himself & ,mrs4 ,fe9/e97 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ,a ,,bill ,to address ?reats relat+ to ransomw>e1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,sanction & ,/op ,ransomw>e ,act ( #bjba4 #b4 ,cyb]security /&>ds = critical infra/ructure 7a7 ,9 g5]al ,title ,,xxii ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fea et seq47 is am5d$ by add+ at ! end ! foll[+3 ,c ,cyb]security /&>ds = critical infra/ructure #bbca4 ,def9ition ( critical infra/ructure entity ,9 ?is subtitle1 ! t]m critical infra/ructure entity means an own] or op]ator ( critical infra/ructure4 #bbcb ,cyb]security /&>ds 7a7 ,9 g5]al ,! ,secret>y1 9 consultation ) ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy1 %all develop & promulgate m&atory cyb]security /&>ds = critical infra/ructure entities4 7b7 ,h>monization & incorporation ,9 develop+ ! cyb]security /&>ds requir$ "u subsection 7a71 ! ,secret>y %all-- 7#a7 to ! greate/ ext5t practicable1 ensure ! cyb]security /&>ds are consi/5t ) ,f$]al regulations exi/+ z ( ! date on enactm5t ( ! ,sanction & ,/op ,ransomw>e ,act ( #bjba2 & 7#b7 9 coord9ation ) ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology1 ensure t ! cyb]security /&>ds incorporate1 to ! greate/ ext5t practicable1 ! /&>ds develop$ ) facilitation & support f ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology "u section #b7;c77#ae7 ( ! ,national ,in/itute ( ,/&>ds & ,te*nology ,act 7#ae ,u4,s4,c4 #bgb7;c77#ae774 7c7 ,compliance assessm5t ,n less frequ5tly ?an annually1 ! ,secret>y1 9 coord9ation ) ! heads ( ,sector ,risk ,managem5t ,ag5cies1 %all assess ! compliance ( ea* critical infra/ructure entity ) ! cyb]security /&>ds develop$ "u subsection 7a74 4 7b7 ,te*nical & con=m+ am5dm5t ,! table ( cont5ts 9 section #a7;b7 ( ! ,homel& ,security ,act ( #bjjb 7,public ,law #ajg-bif2 #aaf ,/at4 #bace7 is am5d$ by add+ at ! end ! foll[+3 ,subtitle ,c--,cyb]security /&>ds = critical infra/ructure ,sec4 #bbca4 ,def9ition ( critical infra/ructure entity4 ,sec4 #bbcb4 ,cyb]security /&>ds4 4 #c4 ,regulation ( cryptocurr5cy ex*anges 7a7 ,secret>y ( ! ,treasury ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 ! ,secret>y ( ! ,treasury %all-- 7#a7 develop & in/itute regulatory requirem5ts = cryptocurr5cy ex*anges op]at+ )9 ! ,unit$ ,/ates to r$uce ! anonymity ( us]s & acc\nts suspect$ ( ransomw>e activity & make records available to ! ,f$]al ,gov]nm5t 9 connection ) ransomw>e incid5ts2 & 7#b7 submit to ,congress a report ) any recomm5dations t may be necess>y reg>d+ cryptocurr5cy ex*anges us$ 9 conjunction ) ransomw>e4 7b7 ,attorney ,g5]al ,! ,attorney ,g5]al %all det]m9e :at in=mation %\ld be pres]v$ by cryptocurr5cy ex*anges to facilitate law en=cem5t inve/igations4 #d4 ,designation ( /ate sponsors ( ransomw>e & report+ requirem5ts 7a7 ,designation ( /ate sponsors ( ransomw>e 7#a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 & annually !reaft]1 ! ,secret>y ( ,/ate1 9 consultation ) ! ,director ( ,national ,intellig5ce1 %all-- 7,a7 designate z a /ate sponsor ( ransomw>e any c\ntry ! gov]nm5t ( :i* ! ,secret>y has det]m9$ has provid$ support = ransomw>e dem& s*emes 7includ+ by provid+ safe hav5 = individuals engag$ 9 su* s*emes72 7,b7 submit to ,congress a report li/+ ! c\ntries designat$ "u subp>agraph 7,a72 & 7,c7 9 mak+ designations "u subp>agraph 7,a71 take into consid]ation ! report submitt$ to ,congress "u section #e7;c77#a74 7#b7 ,sanctions & p5alties ,! ,presid5t %all impose ) respect to ea* /ate sponsor ( ransomw>e designat$ "u p>agraph 7#a77;,a7 ! sanctions & p5alties impos$ ) respect to a /ate sponsor ( t]rorism4 7#c7 ,/ate sponsor ( t]rorism def9$ ,9 ?is subsection1 ! t]m /ate sponsor ( t]rorism means a c\ntry ! gov]nm5t ( :i* ! ,secret>y ( ,/ate has det]m9$ has repeat$ly provid$ support = acts ( int]national t]rorism1 = purposes (-- 7,a7 section #aged7;c77#a77;,a77i7 ( ! ,export ,control ,re=m ,act ( #bjah 7#ej ,u4,s4,c4 #dhac7;c77#a77;,a77i772 7,b7 section #fbj;,a ( ! ,=eign ,assi/ance ,act ( #aifa 7#bb ,u4,s4,c4 #bcga72 7,c7 section #dj7;d7 ( ! ,arms ,export ,control ,act 7#bb ,u4,s4,c4 #bghj7;d772 or 7,d7 any o!r provision ( law4 7b7 ,report+ requirem5ts 7#a7 ,sanctions relat+ to ransomw>e report ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ! ,treasury %all submit a report to ,congress t describes1 = ea* ( ! #e fiscal ye>s imm$iately prec$+ ! date ( su* report1 ! numb] & geographic locations ( individuals1 gr\ps1 & entities subject to sanctions impos$ by ! ,(fice ( ,=eign ,assets ,control :o 7 subsequ5tly det]m9$ to h be5 involv$ 9 a ransomw>e dem& s*eme4 7#b7 ,c\ntry ( orig9 report ,! ,secret>y ( ,/ate1 9 consultation ) ! ,director ( ,national ,intellig5ce & ! ,director ( ! ,f$]al ,bureau ( ,inve/igation1 %all-- 7,a7 submit a report1 ) a classifi$ annex1 to ! ,committee on ,=eign ,relations ( ! ,s5ate1 ! ,select ,committee on ,intellig5ce ( ! ,s5ate1 ! ,committee on ,=eign ,affairs ( ! ,h\se ( ,repres5tatives1 & ! ,p]man5t ,select ,committee on ,intellig5ce ( ! ,h\se ( ,repres5tatives t id5tifies ! c\ntry ( orig9 ( =eign-bas$ ransomw>e attacks2 & 7,b7 make ! report describ$ 9 subp>agraph 7,a7 7exclud+ ! classifi$ annex7 available to ! public4 7#c7 ,inve/igative au?orities report ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,comptroll] ,g5]al ( ! ,unit$ ,/ates %all issue a report t outl9es ! au?orities available to ! ,f$]al ,bureau ( ,inve/igation1 ! ,unit$ ,/ates ,secret ,s]vice1 ! ,cyb]security & ,infra/ructure ,security ,ag5cy1 ! ,homel& ,security ,inve/igations1 & ! ,(fice ( ,=eign ,assets ,control to respond to =eign-bas$ ransomw>e attacks4 #e4 ,deem+ ransomw>e ?reats to critical infra/ructure z a national intellig5ce priority 7a7 ,critical infra/ructure def9$ ,9 ?is section1 ! t]m critical infra/ructure has ! mean+ giv5 su* t]m 9 subsection 7e7 ( ! ,critical ,infra/ructures ,protection ,act ( #bjja 7#db ,u4,s4,c4 #eaie;c7e774 7b7 ,ransomw>e ?reats to critical infra/ructure z national intellig5ce priority ,! ,director ( ,national ,intellig5ce1 pursuant to ! provisions ( ! ,national ,security ,act ( #aidg 7#ej ,u4,s4,c4 #cjja et seq471 ! ,intellig5ce ,re=m & ,t]rorism ,prev5tion ,act ( #bjjd 7,public ,law #ajh-deh71 section #a4c7;b77#ag7 ( ,executive ,ord] #abccc 7#ej ,u4,s4,c4 #cjja note2 relat+ to ,unit$ ,/ates intellig5ce activities71 z 9 effect on ! day be=e ! date ( ! enactm5t ( ?is ,act1 & ,national ,security ,presid5tial ,directive-#bf 7,febru>y #bd1 #bjjc2 relat+ to intellig5ce priorities71 z 9 effect on ! day be=e ! date ( ! enactm5t ( ?is ,act1 %all deem ransomw>e ?reats to critical infra/ructure a national intellig5ce priority compon5t to ! ,national ,intellig5ce ,priorities ,framework4 7c7 ,report 7#a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ,national ,intellig5ce %all1 9 consultation ) ! ,director ( ! ,f$]al ,bureau ( ,inve/igation1 submit to ! ,select ,committee on ,intellig5ce ( ! ,s5ate & ! ,p]man5t ,select ,committee on ,intellig5ce ( ! ,h\se ( ,repres5tatives a report on ! implications ( ! ransomw>e ?reat to ,unit$ ,/ates national security4 7#b7 ,cont5ts ,! report submitt$ "u p>agraph 7#a7 %all address ! foll[+3 7,a7 ,id5tification ( individuals1 gr\ps1 & entities :o pose ! mo/ significant ?reat1 includ+ attribution to individual ransomw>e attacks :5ev] possible4 7,b7 ,locations f :]e individuals1 gr\ps1 & entities conduct ransomw>e attacks4 7,c7 ,! infra/ructure1 tactics1 & te*niques ransomw>e actors commonly use4 7,d7 ,any relation%ips betwe5 ! individuals1 gr\ps1 & entities t conduct ransomw>e attacks & _! gov]nm5ts or c\ntries ( orig9 t c\ld imp$e ! ability to c\nt] ransomw>e ?reats4 7,e7 ,intellig5ce gaps t h1 or curr5tly are1 imp$+ ! ability to c\nt] ransomw>e ?reats4 7#c7 ,=m ,! report submitt$ "u p>agraph 7#a7 %all be submitt$ 9 unclassifi$ =m1 b may include a classifi$ annex4 #f4 ,ransomw>e op]ation report+ capabilities 7a7 ,9 g5]al ,title ,,xxii ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fea et seq471 z am5d$ by section #b7;a71 is am5d$ by add+ at ! end ! foll[+3 ,d ,ransomw>e ,op]ation ,report+ ,capabilities #bbda4 ,def9itions ,9 ?is subtitle3 7#a7 ,def9itions f section #bbja ,! def9itions 9 section #bbja %all apply to ?is subtitle1 except z o!rwise provid$4 7#b7 ,ag5cy ,! t]m ,ag5cy means ! ,cyb]security & ,infra/ructure ,security ,ag5cy4 7#c7 ,appropriate congressional committees ,! t]m appropriate congressional committees means-- 7,a7 ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate2 7,b7 ! ,select ,committee on ,intellig5ce ( ! ,s5ate2 7,c7 ! ,committee on ! ,judici>y ( ! ,s5ate2 7,d7 ! ,committee on ,homel& ,security ( ! ,h\se ( ,repres5tatives2 7,e7 ! ,p]man5t ,select ,committee on ,intellig5ce ( ! ,h\se ( ,repres5tatives2 & 7,f7 ! ,committee on ! ,judici>y ( ! ,h\se ( ,repres5tatives4 7#d7 ,cov]$ entity ,! t]m cov]$ entity means-- 7,a7 a ,f$]al contractor2 7,b7 an own] or op]ator ( critical infra/ructure2 7,c7 a non-gov]nm5t entity t provides cyb]security incid5t response s]vices2 & 7,d7 any o!r entity det]m9$ appropriate by ! ,secret>y1 9 coord9ation ) ! head ( any o!r appropriate dep>tm5t or ag5cy4 7#e7 ,critical function ,! t]m critical function means any action or op]ation t is necess>y to ma9ta9 critical infra/ructure4 7#f7 ,director ,! t]m ,director means ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy4 7#g7 ,f$]al ag5cy ,! t]m ,f$]al ag5cy has ! mean+ giv5 ! t]m ag5cy 9 section #cejb ( title #dd1 ,unit$ ,/ates ,code4 7#h7 ,f$]al contractor ,! t]m ,f$]al contractor-- 7,a7 means a contractor or subcontractor 7at any ti]7 ( ! ,unit$ ,/ates ,gov]nm5t2 & 7,b7 does n include a contractor or subcontractor t is a p>ty only to-- 7i7 a s]vice contract to provide h\sekeep+ or cu/odial s]vices2 or 7ii7 a contract to provide products or s]vices unrelat$ to in=mation te*nology t is bel[ ! micro-pur*ase ?re%old 7z def9$ 9 section #b4aja ( title #dh1 ,code ( ,f$]al ,regulations1 or any successor !reto74 7#i7 ,in=mation te*nology ,! t]m in=mation te*nology has ! mean+ giv5 ! t]m 9 section #aaaja ( title #dj1 ,unit$ ,/ates ,code4 7#aj7 ,ransomw>e ,! t]m ransomw>e means any type ( malici\s s(tw>e t-- 7,a7 prev5ts ! legitimate own] or op]ator ( an in=mation sy/em or network f access+ electronic data1 files1 sy/ems1 or networks2 & 7,b7 dem&s ! paym5t ( a ransom = ! return ( access to ! electronic data1 files1 sy/ems1 or networks describ$ 9 subp>agraph 7,a74 7#aa7 ,ransomw>e notification ,! t]m ransomw>e notification means a notification ( a ransomw>e op]ation4 7#ab7 ,ransomw>e op]ation ,! t]m ransomw>e op]ation means a specific in/ance 9 :i* ransomw>e affects ! in=mation sy/ems or networks own$ or op]at$ by-- 7,a7 a cov]$ entity2 or 7,b7 a ,f$]al ag5cy4 7#ac7 ,sy/em ,! t]m ,sy/em means ! ransomw>e op]ation report+ capabilities e/abli%$ "u section #bbdb7;b74 #bbdb4 ,e/abli%m5t ( ransomw>e op]ation report+ sy/em 7a7 ,designation ,! ,ag5cy %all be ! designat$ ag5cy )9 ! ,f$]al ,gov]nm5t to receive ransomw>e op]ation notifications f o!r ,f$]al ag5cies & cov]$ entities 9 accordance ) ?is subtitle4 7b7 ,e/abli%m5t ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is subtitle1 ! ,director %all e/abli% ransomw>e op]ation report+ capabilities to facilitate ! submission ( timely1 secure1 & confid5tial ransomw>e notifications by ,f$]al ag5cies & cov]$ entities to ! ,ag5cy4 7c7 ,security assessm5t ,! ,director %all-- 7#a7 assess ! security ( ! ,sy/em n less frequ5tly ?an once e #b ye>s2 & 7#b7 z soon z is practicable aft] conduct+ an assessm5t "u p>agraph 7#a71 make any necess>y corrective measures to ! ,sy/em4 7d7 ,requirem5ts ,! ,sy/em %all h ! ability-- 7#a7 to accept classifi$ submissions & notifications2 & 7#b7 to accept a ransomw>e notification f any entity1 reg>dless ( :e!r ! entity is a cov]$ entity4 7e7 ,limitations on use ( in=mation ,any ransomw>e notification submitt$ to ! ,sy/em-- 7#a7 %all be exempt f disclosure "u-- 7,a7 section #eeb ( title #e1 ,unit$ ,/ates ,code 7commonly ref]r$ to z ! 8,fre$om ( ,in=mation ,act071 9 accordance ) subsection 7b77#c77;,b7 ( su* section #eeb2 & 7,b7 any ,/ate1 ,tribal1 or local law requir+ ! disclosure ( in=mation or records2 & 7#b7 may n be-- 7,a7 admitt$ z evid5ce 9 any civil or crim9al action br\ght aga9/ ! victim ( ! ransomw>e op]ation2 or 7,b7 subject to a subpo5a1 unless ! subpo5a is issu$ by ,congress = congressional ov]sight purposes4 7f7 ,privacy & protection 7#a7 ,9 g5]al ,n lat] ?an ! date on :i* ! ,director e/abli%es ! ,sy/em1 ,director %all adopt privacy & protection proc$ures = any in=mation submitt$ to ! ,sy/em t1 at ! "t ( ! submission1 is kn[n to conta9-- 7,a7 ! p]sonal in=mation ( a specific individual2 or 7,b7 in=mation t id5tifies a specific individual t is n directly relat$ to a ransomw>e op]ation4 7#b7 ,model = protections ,! ,director %all base ! privacy & protection proc$ures adopt$ "u p>agraph 7#a7 on ! privacy & protection proc$ures develop$ = in=mation receiv$ & %>$ pursuant to ! ,cyb]security ,in=mation ,%>+ ,act ( #bjae 7#f ,u4,s4,c4 #aeja et seq474 7g7 ,annual reports 7#a7 ,director report+ requirem5t ,n lat] ?an #a ye> aft] ! date on :i* ! ,sy/em is e/abli%$ & once ea* ye> !reaft]1 ! ,director %all submit to ! appropriate congressional committees a report on ! ,sy/em1 :i* %all include1 ) respect to ! #a-ye> p]iod prec$+ ! report-- 7,a7 ! numb] ( notifications receiv$ ?r\gh ! ,sy/em2 & 7,b7 ! actions tak5 9 connection ) ! notifications describ$ 9 subp>agraph 7,a74 7#b7 ,secret>y report+ requirem5t ,n lat] ?an #a ye> aft] ! date on :i* ! ,sy/em is e/abli%$1 & once ea* ye> !reaft]1 ! ,secret>y %all submit to ! appropriate congressional committees a report on ! types ( ransomw>e op]ation in=mation & incid5ts 9 :i* ransom is reque/$ t are requir$ to be submitt$ z a ransomw>e notification1 not+ any *anges f ! previ\s submission4 7#c7 ,=m ,any report requir$ "u ?is subsection may be submitt$ 9 a classifi$ =m1 if necess>y4 #bbdc4 ,requir$ notifications 7a7 ,9 g5]al 7#a7 ,ransomw>e notification ,n lat] ?an #bd h\rs aft] ! discov]y ( a ransomw>e op]ation t compromises1 is reasonably likely to compromise1 or o!rwise mat]ially affects ! p]=mance ( a critical function by a ,f$]al ag5cy or cov]$ entity1 ! ,f$]al ag5cy or cov]$ entity t discov]$ ! ransomw>e op]ation %all submit a ransomw>e notification to ! ,sy/em4 7#b7 ,inclusion ,a ,f$]al ag5cy or cov]$ entity %all submit a ransomw>e notification "u p>agraph 7#a7 ( a ransomw>e op]ation discov]$ by ! ,f$]al ag5cy or cov]$ entity ev5 if ! ransomw>e op]ation does n occur on a sy/em ( ! ,f$]al ag5cy or cov]$ entity4 7b7 ,requir$ updates ,a ,f$]al ag5cy or cov]$ entity t submits a ransomw>e notification "u subsection 7a7 %all1 ^u discov]y ( new in=mation & n less frequ5tly ?an once e #e days until ! date on :i* ! ransomw>e op]ation is mitigat$ & any foll[-up inve/igation is complet$1 submit updat$ ransomw>e ?reat in=mation to ! ,sy/em4 7c7 ,paym5t disclosure ,n lat] ?an #bd h\rs aft] a ,f$]al ag5cy or cov]$ entity issues a ransom paym5t relat+ to a ransomw>e op]ation1 ! ,f$]al ag5cy or cov]$ entity %all submit to ! ,sy/em details ( ! ransom paym5t1 includ+-- 7#a7 ! me?od ( paym5t2 7#b7 ! am\nt ( ! paym5t2 & 7#c7 ! recipi5t ( ! paym5t4 7d7 ,requir$ rulemak+ ,not)/&+ any provision ( ?is title t may limit or re/rict ! promulgation ( rules1 n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is subtitle1 ! ,secret>y1 act+ ?r\gh ! ,director1 9 coord9ation ) ! ,director ( ,national ,intellig5ce & ! ,attorney ,g5]al1 )\t reg>d to ! notice & comm5t rule mak+ requirem5ts "u section #eec ( title #e1 ,unit$ ,/ates ,code1 & accept+ comm5ts aft] ! effective date1 %all promulgate int]im f9al rules t def9e-- 7#a7 ! conditions "u :i* a ransomw>e notification is requir$ to be submitt$ "u subsection 7a77#a72 7#b7 ! ransomw>e op]ation in=mation t %all be includ$ 9 a ransomw>e notification requir$ "u ?is section2 & 7#c7 ! in=mation t %all be includ$ 9 a ransom paym5t disclosure requir$ "u subsection 7c74 7e7 ,requir$ coord9ation ) ,sector ,risk ,managem5t ,ag5cies ,! ,secret>y1 9 coord9ation ) ! head ( ea* ,sector ,risk ,managem5t ,ag5cy1 %all-- 7#a7 e/abli% a set ( report+ crit]ia = ,sector ,risk ,managem5t ,ag5cies to submit ransomw>e notifications to ! ,sy/em2 & 7#b7 take /eps to h>monize ! crit]ia describ$ 9 p>agraph 7#a7 ) ! regulatory report+ requirem5ts 9 effect on ! date ( enactm5t ( ?is subtitle4 7f7 ,protection f liability ,section #ajf ( ! ,cyb]security ,act ( #bjae 7#f ,u4,s4,c4 #aeje7 %all apply to a ,f$]al ag5cy or cov]$ entity requir$ to submit a ransomw>e notification to ! ,sy/em4 7g7 ,en=cem5t 7#a7 ,cov]$ entities ,if a cov]$ entity violates ! requirem5ts ( ?is subtitle1 ! cov]$ entity %all be subject to p5alties det]m9$ by ! ,adm9i/rator ( ! ,g5]al ,s]vices ,adm9i/ration1 :i* may include removal f ! ,f$]al ,contract+ ,s*$ules4 7#b7 ,f$]al ag5cies ,if a ,f$]al ag5cy violates ! requirem5ts ( ?is subtitle1 ! violation %all be ref]r$ to ! inspector g5]al = ! ag5cy1 & %all be treat$ z a matt] ( urg5t conc]n4 4 7b7 ,table ( cont5ts ,! table ( cont5ts 9 section #a7;b7 ( ! ,homel& ,security ,act ( #bjjb 7,public ,law #ajg-bif2 #aaf ,/at4 #bace71 z am5d$ by section #b7;b71 is fur!r am5d$ by add+ at ! end ! foll[+3 ,subtitle ,d--,ransomw>e ,op]ation ,report+ ,capabilities ,sec4 #bbda4 ,def9itions4 ,sec4 #bbdb4 ,e/abli%m5t ( ransomw>e op]ation report+ sy/em4 ,sec4 #bbdc4 ,requir$ notifications4 4 7c7 ,te*nical & con=m+ am5dm5ts ,section #bbjb7;c7 ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #feb7;c77 is am5d$-- 7#a7 by r$esignat+ ! second & ?ird p>agraphs 7#ab7 z p>agraphs 7#ad7 & 7#ae71 respectively2 & 7#b7 by ins]t+ be=e p>agraph 7#ad71 z s r$esignat$1 ! foll[+3 7#ac7 c>ry out ! responsibilities describ$ 9 subtitle ,d relat+ to ! ransomw>e op]ation report+ sy/em2 4 #g4 ,duties ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy 7a7 ,9 g5]al ,subtitle ,a ( title ,,xxii ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fea et seq47 is am5d$-- 7#a7 by r$esignat+ section #bbag 7#f ,u4,s4,c4 #ffe;f7 z section #bbbj2 7#b7 by r$esignat+ section #bbaf 7#f ,u4,s4,c4 #ffe;e7 z section #bbai2 7#c7 by r$esignat+ ! f\r? section #bbae 7relat+ to ,sector ,risk ,managem5t ,ag5cies7 7#f ,u4,s4,c4 #ffe;d7 z section #bbah2 7#d7 by r$esignat+ ! ?ird section #bbae 7relat+ to ! ,cyb]security ,/ate ,coord9ator7 7#f ,u4,s4,c4 #ffe;c7 z section #bbag2 7#e7 by r$esignat+ ! second section #bbae 7relat+ to ! ,jo9t ,cyb] ,plann+ ,(fice7 7#f ,u4,s4,c4 #ffe;b7 z section #bbaf2 & 7#f7 by add+ aft] section #bbbj1 z s r$esignat$1 ! foll[+3 #bbbj;,a4 ,in=mation ,sy/em & ,network ,security ,fund 7a7 ,def9itions ,9 ?is section3 7#a7 ,cov]$ entity ,! t]m cov]$ entity has ! mean+ giv5 ! t]m 9 section #bbda4 7#b7 ,eligible entity ,! t]m eligible entity-- 7,a7 means a cov]$ entity2 & 7,b7 does n include an own] or op]ator ( critical infra/ructure t is n 9 compliance ) ! cyb]security /&>ds develop$ "u section #bbcb7;a74 7#c7 ,fund ,! t]m ,fund means ! ,in=mation ,sy/em & ,network ,security ,fund e/abli%$ "u subsection 7b77#a74 7b7 ,in=mation ,sy/em & ,network ,security ,fund 7#a7 ,e/abli%m5t ,!re is e/abli%$ 9 ! ,treasury ( ! ,unit$ ,/ates a tru/ fund to be kn[n z ! ,in=mation ,sy/em & ,network ,security ,fund4 7#b7 ,cont5ts ( ,fund 7,a7 ,9 g5]al ,! ,fund %all consi/ ( su* am\nts z may be appropriat$ = deposit 9 ! ,fund4 7,b7 ,availability 7i7 ,9 g5]al ,am\nts deposit$ 9 ! ,fund %all rema9 available ?r\gh ! end ( ! t5? fiscal ye> beg9n+ aft] ! date on :i* funds are fir/ appropriat$ to ! ,fund4 7ii7 ,rema9d] to treasury ,any unobligat$ balances 9 ! ,fund aft] ! date describ$ 9 clause 7i7 are resc9d$ & %all be transf]r$ to ! g5]al fund ( ! ,treasury4 7#c7 ,use ( fund 7,a7 ,9 g5]al ,am\nts deposit$ 9 ! ,fund %all be available to ! ,director to di/ribute to eligible entities pursuant to ?is subsection1 9 su* am\nts z ! ,director det]m9es appropriate1 subject to subp>agraph 7,b74 7,b7 ,di/ribution ,! am\nts di/ribut$ to eligible entities "u ?is p>agraph %all be made = a specific network security purpose1 includ+ to enable network recov]y f an ev5t affect+ ! network cyb]security ( ! eligible entity4 7#d7 ,adm9i/ration ( fund ,! ,director1 9 consultation ) ! ,secret>y & 9 coord9ation ) ! head ( ea* ,sector ,risk ,managem5t ,ag5cy1 %all-- 7,a7 e/abli% crit]ia = di/ribution ( am\nts "u p>agraph 7#c72 & 7,b7 adm9i/] ! ,fund to support network security = eligible entities4 7#e7 ,report requir$ ,= ea* fiscal ye> = :i* am\nts 9 ! ,fund are available "u ?is subsection1 ! ,director %all submit to ,congress a report t-- 7,a7 describes h[1 & to :i* eligible entities1 am\nts f ! ,fund h be5 di/ribut$2 7,b7 details ! crit]ia e/abli%$ "u p>agraph 7#d77;,a72 & 7,c7 includes any additional in=mation t ! ,director det]m9es appropriate1 includ+ project$ reque/$ appropriations = ! next fiscal ye>4 7c7 ,au?orization ( appropriations ,!re are au?oriz$ to be appropriat$ = deposit 9 ! ,fund #a1ejj1jjj1jjj1 :i* %all rema9 available until ! la/ day ( ! t5? fiscal ye> beg9n+ aft] ! fiscal ye> dur+ :i* funds are fir/ appropriat$ = deposit 9 ! ,fund4 #bbbj;,b4 ,public aw>5ess ( cyb]security (f]+s 7a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ! ,sanction & ,/op ,ransomw>e ,act ( #bjba1 ! ,director %all e/abli% a public aw>5ess campaign relat+ to ! cyb]security s]vices ( ! ,f$]al ,gov]nm5t4 7b7 ,au?orization ( appropriations ,!re are au?oriz$ to be appropriat$ to ! ,director #aj1jjj1jjj = ea* ( fiscal ye>s #bjbb ?r\gh #bjca to c>ry out subsection 7a74 #bbbj;,c4 ,d>k web analysis 7a7 ,def9ition ( d>k web ,9 ?is section1 ! t]m d>k web means a "p ( ! int]net t-- 7#a7 _c be access$ ?r\gh /&>d web br[s]s2 & 7#b7 requires specific s(tw>e1 configurations1 or au?orizations = access4 7b7 ,au?ority ,to analyze ,! ,director may monitor ! int]net1 includ+ ! d>k web1 = evid5ce ( a compromise to critical infra/ructure4 7c7 ,monitor+ capabilities ,! ,director %all develop1 in/itute1 & ov]see capabilities to c>ry out ! au?ority ( ! ,director "u subsection 7b74 7d7 ,notification ,if ! ,director f9ds cr$ible evid5ce ( a compromise to critical infra/ructure "u subsection 7c71 z soon z is practicable aft] ! f9d+1 ! ,director %all notify ! own] or op]ator ( ! compromis$ critical infra/ructure 9 a mann] t protects ! s\rces & me?ods t l$ to ! f9d+ ( ! compromise4 4 7b7 ,te*nical & con=m+ am5dm5ts ,section #bbjb7;c7 ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #feb7;c77 is am5d$-- 7#a7 9 ! fir/ p>agraph 7#ab71 by /rik+ section #bbae & ins]t+ section #bbag2 & 7#b7 by r$esignat+ ! second & ?ird p>agraphs 7#ab7 z p>agraphs 7#ac7 & 7#ad71 respectively4 7c7 ,table ( cont5ts ,! table ( cont5ts 9 section #a7;b7 ( ! ,homel& ,security ,act ( #bjjb 7,public ,law #ajg-bif2 #aaf ,/at4 #bace7 is am5d$ by /rik+ ! item relat+ to section #bbad & all t foll[s ?r\gh ! item relat+ to section #bbag & ins]t+ ! foll[+3 ,sec4 #bbad4 ,national ,asset ,database4,sec4 #bbae4 ,duties & au?orities relat+ to 4gov int]net doma94,sec4 #bbaf4 ,jo9t ,cyb] ,plann+ ,(fice4 ,sec4 #bbag4 ,cyb]security ,/ate ,coord9ator4,sec4 #bbah4 ,sector ,risk ,managem5t ,ag5cies4 ,sec4 #bbai4 ,cyb]security ,advisory ,committee4,sec4 #bbbj4 ,cyb]security education & tra9+ programs4,sec4 #bbbj;,a4 ,in=mation ,sy/em & ,network ,security ,fund4,sec4 #bbbj;,b4 ,public aw>5ess ( cyb]security (f]+s4,sec4 #bbbj;,c4 ,d>k web analysis4 4 7d7 ,additional te*nical am5dm5t 7#a7 ,am5dm5t ,section #ijd7;b77#a7 ( ! ,,dotgov ,act ( #bjbj 7title ,,ix ( division ,u ( ,public ,law #aaf-bfj7 is am5d$1 9 ! matt] prec$+ subp>agraph 7,a71 by /rik+ ,homel& ,security ,act & ins]t+ ,homel& ,security ,act ( #bjjb4 7#b7 ,effective date ,! am5dm5t made by p>agraph 7#a7 %all take effect z if enact$ z "p ( ! ,,dotgov ,act ( #bjbj 7title ,,ix ( division ,u ( ,public ,law #aaf-bfj74