,i #aahth ,,congress #ast ,session ,h4 ,r4 #edci ,,in ,,the ,,house ,,of ,,representatives ,september #ac1 #bjbc,mr4 ,gallagher 7for himself and ,ms4 ,spanberger7 introduced the following bill2 which was referred to the ,committee on ,homeland ,security ,a ,,bill ,to amend the ,homeland ,security ,act of #bjjb to require the ,secretary of ,homeland ,security to establish a national risk management process1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,national ,risk ,management ,act of #bjbc4 #b4 ,national risk management process 7a7 ,in general ,subtitle ,a of title ,,xxii of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fea et seq47 is amended by adding at the end the following new section3 #bbbj;,f4 ,national risk management process 7a7 ,national critical functions defined ,in this section1 the term national critical functions means the functions of government and the private sector so vital to the ,united ,states that their disruption1 corruption1 or dysfunction would have a debilitating effect on security1 national economic security1 national public health or safety1 or any combination thereof4 7b7 ,national risk management process 7#a7 ,risk identification and assessment 7,a7 ,in general ,the ,secretary1 acting through the ,director1 shall establish a recurring process to identify and assess risks to critical infrastructure1 considering both cybersecurity threats and physical threats1 the associated likelihoods of such threats1 vulnerabilities within systems rendering such systems susceptible to such threats1 and consequences of such threats to critical functions4 7,b7 ,consultation ,in establishing the process required under subparagraph 7,a71 the ,secretary shall consult the following3 7i7 ,sector ,risk ,management ,agencies4 7ii7 ,critical infrastructure owners and operators4 7iii7 ,the ,assistant to the ,president for ,national ,security ,affairs4 7iv7 ,the ,assistant to the ,president for ,homeland ,security4 7v7 ,the ,national ,cyber ,director4 7,c7 ,process elements ,the process established under subparagraph 7,a7 shall include elements to-- 7i7 collect relevant information1 collected pursuant to section #bbah1 from ,sector ,risk ,management ,agencies relating to the threats1 vulnerabilities1 and consequences related to the particular sectors of those ,sector ,risk ,management ,agencies2 7ii7 allow critical infrastructure owners and operators to submit relevant information to the ,secretary for consideration2 and 7iii7 outline how the ,secretary will solicit input from other ,federal departments and agencies4 7,d7 ,publication ,not later than #ahj days after the date of the enactment of this section1 the ,secretary shall publish in the ,federal ,register procedures for the process established under subparagraph 7,a74 7,e7 ,reports ,the ,secretary shall submit to the ,president1 the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate1 and the ,committee on ,homeland ,security of the ,house of ,representatives a report on the risks from cybersecurity threats and physical threats identified by the process established under subparagraph 7,a7-- 7i7 not later than one year after the date of the enactment of this section2 and 7ii7 not later than one year after the date on which the ,secretary submits a periodic evaluation described in section #ijjb7;b77#b7 of title ,,xc of division ,h of the ,william ,m4 7,mac7 ,thornberry ,national ,defense ,authorization ,act for ,fiscal ,year #bjba 7#f ,u4,s4,c4 #feb;a7b77#b774 7#b7 ,national critical infrastructure resilience strategy 7,a7 ,in general ,not later than one year after the date on which the ,secretary submits each report required under paragraph 7#a71 the ,president shall transmit to the majority and minority leaders of the ,senate1 the ,speaker and minority leader of the ,house of ,representatives1 the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate1 and the ,committee on ,homeland ,security of the ,house of ,representatives a national critical infrastructure resilience strategy to address the risks identified by the ,secretary4 7,b7 ,elements ,each strategy under subparagraph 7,a7 shall-- 7i7 prioritize areas of risk to critical infrastructure that would compromise or disrupt national critical functions impacting national security1 economic security1 or public health and safety2 7ii7 assess the implementation of the previous national critical infrastructure resilience strategy1 as applicable2 7iii7 identify and outline current and proposed national-level actions1 programs1 and efforts1 including resource requirements1 to be taken to address the risks identified2 7iv7 identify the ,federal departments or agencies responsible for leading each national-level action1 program1 or effort1 and the relevant critical infrastructure sectors for each2 and 7v7 request any additional authorities necessary to successfully execute the strategy4 7,c7 ,form ,each strategy under subparagraph 7,a7 shall be unclassified but may contain a classified annex4 7#c7 ,congressional briefing ,not later than one year after the date on which the ,president transmits the first strategy required under paragraph 7#b77;,a7 and each year thereafter1 the ,secretary1 in coordination with ,sector ,risk ,management ,agencies1 shall brief the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate and the ,committee on ,homeland ,security of the ,house of ,representatives on-- 7,a7 the national risk management process activities undertaken pursuant to the strategy transmitted in accordance with paragraph 7#b77;,a72 and 7,b7 the amounts and timeline for funding that the ,secretary has determined would be necessary to address risks of cybersecurity threats and physical threats and successfully execute the full range of activities proposed by such strategy4 4 7b7 ,clerical amendment ,the table of contents in section #a7;b7 of the ,homeland ,security ,act of #bjjb is amended by inserting after the item relating to section #bbbj;,e the following new item3 ,sec4 #bbbj;,f4 ,national risk management process4 4