,i #aah? ,,congress #b;d ,session ,h4 ,r4 #igfh ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,septemb] #bd1 #bjbd,mr4 ,swalwell 7= himself & ,mr4 ,?ompson ( ,mississippi7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,homel& ,security1 & 9 addition to ! ,committee on ,ov]sight & ,acc\ntability1 = a p]iod to be subsequ5tly det]m9$ by ! ,speak]1 9 ea* case = consid]ation ( su* provisions z fall )9 ! jurisdiction ( ! committee conc]n$ ,a ,,bill ,to am5d ! ,homel& ,security ,act ( #bjjb to e/abli% )9 ! ,cyb]security & ,infra/ructure ,security ,ag5cy a ,jo9t ,cyb] ,def5se ,collaborative1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,jo9t ,cyb] ,def5se ,collaborative ,act4 #b4 ,e/abli%m5t ( ,jo9t ,cyb] ,def5se ,collaborative 7a7 ,9 g5]al ,section #bbaf ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #ffe;b7 is am5d$-- 7#a7 9 ! section head+1 by /rik+ ,jo9t ,cyb] ,plann+ ,(fice & ins]t+ ,jo9t ,cyb] ,def5se ,collaborative2 7#b7 by /rik+ subsection 7a72 7#c7 by r$esignat+ subsections 7b7 ?r\gh 7f7 z subsections 7f7 ?r\gh 7j71 respectively2 7#d7 by ins]t+ be=e subsection 7f71 z s r$esignat$1 ! foll[+ new subsections3 7a7 ,9 g5]al ,! ,ag5cy %all ma9ta9 ! ,jo9t ,cyb] ,def5se ,collaborative program 79 ?is section ref]r$ to z ! ,collaborative7 to support enhanc$ public-private p>tn]%ips across critical infra/ructure sectors = collective cyb] def5se op]ations1 in=mation %>+1 & op]ational collaboration1 & develop1 = ,f$]al & non-,f$]al entities1 plans = cyb] def5se op]ations1 includ+ ! developm5t ( a set ( coord9at$ actions to detect1 prev5t1 limit1 prep>e =1 mitigate1 protect aga9/1 respond to1 recov] f1 & build resili5ce to cyb]security risks1 security vuln]abilities1 & incid5ts1 & cyb]security ?reats to1 & incid5ts or active malici\s cyb] op]ations t>get+1 critical infra/ructure or national int]e/s4 ,! ,collaborative %all be head$ by a s5ior (ficial ( ! ,ag5cy select$ by ! ,director4 7b7 ,functions ,! ,collaborative %all c>ry out ! foll[+3 7#a7 ,ma9ta9 /rategic1 op]ational p>tn]%ips ) entities & organizations ) div]se cyb]security roles1 exp]tise1 & situational aw>5ess t w enhance ! ,ag5cy's situational aw>5ess ( cyb]security risks1 cyb]security ?reats1 & active malici\s cyb] op]ations1 includ+ ) cyb]security & te*nology companies1 critical infra/ructure own]s & op]ators1 security rese>*]s & academic in/itutions1 non-gov]nm5tal organizations1 in=mation sy/em v5dors1 manufactur]s1 & =eign gov]nm5t entities 9 accordance ) subsection 7c71 & o!r entities z appropriate4 7#b7 ,develop1 = public & private sector entities1 plans = cyb] def5se op]ations1 includ+ ! developm5t ( a set ( coord9at$ actions to support gov]nm5tal & non-gov]nm5tal entities to-- 7,a7 protect1 detect1 respond to1 & recov] f cyb]security risks1 cyb]security ?reats1 active malici\s cyb] op]ations1 or incid5ts2 or 7,b7 limit1 mitigate1 or def5d aga9/ active or anticipat$ malici\s cyb] op]ations t pose a pot5tial risk to critical infra/ructure or national security int]e/s4 7#c7 ,develop plans = gov]nm5tal & non-gov]nm5tal entities1 includ+ cyb] incid5t response plans "u #bbaj7;c71 plans relat+ to ?reat-focus$ campaigns1 & plans to address long-t]m cyb]security priorities4 7#d7 ,ga!r1 analyze1 syn!size1 & rapidly %>e in=mation relat+ to cyb]security ?reats & w>n+s to in=m collective cyb] def5se op]ations1 ei!r ?r\gh direct engagem5t or ?r\gh ! %>+ ( cyb]security guidance ?r\gh indu/ry organizations to drive action across all /akehold] communities4 7#e7 ,facilitate ! developm5t & publication ( jo9t analyses ) ,gov]nm5t & non-gov]nm5t p>tn]s1 z well z int]national p>tn]s1 z appropriate1 reg>d+ ?reat actors1 cyb]security risks1 cyb]security ?reats1 active malici\s cyb] op]ations1 & incid5ts )9 & across critical infra/ructure sectors1 to enhance aw>5ess ( adv]s>y tactics1 te*niques1 & proc$ures & provide recomm5dations = mitigation4 7#f7 ,utiliz+ me*anisms t enable confid5tial real-"t in=mation %>+ & dissem9ation ( te*nical products betwe5 ! ,collaborative & its p>tn]s4 7#g7 ,develop processes & proc$ures to rapidly %>e ) non-gov]nm5tal entities timely & actionable cyb] ?reat intellig5ce & in=mation f ,gov]nm5t entities1 includ+ ! ,collaborative's p>tn]s1 = purposes ( in=m+ jo9t activities )9 ! ,collaborative1 z well z proactive def5se actions to def5d critical infra/ructure & non-,f$]al networks4 7#h7 ,e/abli%1 z appropriate1 focus$ initiatives design$ to respond to significant1 em]g5t1 or evolv+ cyb]security risks or cyb]security ?reats to1 or active malici\s cyb] op]ations t>get+1 critical infra/ructure sectors or te*nologies1 includ+ indu/rial control sy/ems4 7#i7 ,develop plans = cyb] def5se op]ations = ,f$]al ,gov]nm5t & non-,f$]al ,gov]nm5t entities1 z well z plans to respond to specific cyb]security risks1 cyb]security ?reats1 active malici\s cyb] op]ations1 or ?reat actors4 7#aj7 ,id5tify in=mation & intellig5ce gaps relat$ to cyb]security risks1 cyb]security ?reats1 active malici\s cyb] op]ations1 & ?reat actors4 7#aa7 ,su* o!r activities z ! ,director det]m9es appropriate to enhance ! ,ag5cy's ability to c>ry out its mission z describ$ 9 subsection 7a74 7c7 ,*>t] 7#a7 ,9 g5]al ,! ,collaborative %all op]ate pursuant to a *>t]1 to be develop$ by ! ,director1 t includes a description ( ea* ( ! foll[+3 7,a7 ,! organization & /ructure ( ! ,collaborative1 z well z ! relation%ip betwe5 ! ,collaborative & exi/+ ,ag5cy in=mation %>+ functions1 su* programs )9 ! national cyb]security & communications integration c5t] e/abli%$ pursuant to section #bbji1 & ! mann] 9 :i* ! ,collaborative w engage1 coord9ate )1 & support o!r ,ag5cy divisions & programs4 7,b7 ,! core capabilities ! ,collaborative w provide4 7,c7 ,h[ ! ,collaborative w prioritize1 ref9e1 develop1 & mature exi/+ & future capabilities to address significant1 em]g5t1 or evolv+ cyb]security risks1 cyb]security ?reats1 active malici\s cyb] op]ations1 & incid5ts4 7,d7 ,! policies & proc$ures t w be us$ to gov]n ! ,collaborative1 includ+ me*anisms & protocols to improve /akehold] aw>5ess (1 & input into1 ,collaborative activities1 z well z proc$ures = notify+ ,collaborative p>tn]s ab\t *anges 9 memb]%ip4 7,e7 ,policies gov]n+ ! collection1 use1 dissem9ation1 & ret5tion ( in=mation relat+ to cyb]security ?reats provid$ to or develop$ by ! ,collaborative1 consi/5t ) ! protections e/abli%$ 9 sections #aje & #ajf ( ! ,cyb]security ,act ( #bjae 7#f ,u4,s4,c4 #aejd & #aeje2 enact$ z division ,n ( ! ,consolidat$ ,appropriations ,act1 #bjaf 7,public ,law #aad-aac774 7,f7 ,crit]ia to be us$ 9 select+ focus areas1 activities1 & initiatives ! ,collaborative w pursue1 ) proc$ures requir+ new initiatives to cite relevant portions ( ! ,*>t]1 relevant crit]ia1 & o!r factors us$ to support su* selection4 7,g7 ,a description ( ! types or categories ( p>tn]%ips 9 :i* ! ,collaborative w engage4 7,h7 ,proc$ures gov]n+ ! selection ( p>tn] organizations & t]ms ( su* p>tn]%ips1 includ+ ! foll[+3 7i7 ,! diff]5t p>tn]%ip models ! ,collaborative plans to (f]1 dep5d+ on ! type ( pot5tial p>tn] an organization is1 ! role & function ( a pot5tial p>tn] organization )9 ! cyb] ecosy/em1 ! type ( exp]tise & situational aw>5ess a pot5tial p>tn] organization is able to provide1 & ! type ( support or in=mation %>+ a pot5tial p>tn] organization is seek+ f su* a p>tn]%ip4 7ii7 ,! crit]ia to be us$ 9 ! selection ( gov]nm5tal & non-gov]nm5tal entities ) :i* ! ,collaborative w p>tn]4 7iii7 ,a cle>ly def9$ process = any prospective p>tn] to apply to jo9 ! ,collaborative1 :i* %all be po/$ on ! ,ag5cy's website4 7iv7 ,a process = evaluat+ =eign entity p>ticipation4 7v7 ,a process = al]t+ ,collaborative p>tn]s ( new p>tn]s1 includ+ =eign entities4 7,h7 ,adm9i/rative managem5t policies to facilitate regul> communication betwe5 ! ,collaborative & its p>tn]s1 includ+ designat+ ,collaborative liaisons to support ! adm9i/rative ne$s ( ,collaborative p>tn]s4 7,i7 ,! types ( assessm5ts1 guidance1 reports1 & o!r products ! ,collective w release to p>tn]s & ! public1 z well z ! anticipat$ frequ5cy ) :i* su* products w be publi%$4 7,j7 ,p]=mance metrics t w be us$ evaluate ! effectiv5ess ( ! ,collaborative & its activities1 & track progress on specific focus areas & initiatives4 7#b7 ,consid]ations ,9 develop+ ! *>t] describ$ 9 p>agraph 7#a71 ! ,director %all consid] ! foll[+3 7,a7 ,build+ & ma9ta9+ tru/ ) & among p>tn]s ( ! ,collaborative4 7,b7 ,co/s to p>tn]s associat$ ) p>ticipation 9 ! ,collaborative4 7,c7 ,! pot5tial ( ! ,collaborative's activities to r$uce cyb]security risks & cyb]security ?reats to1 or active malici\s cyb] op]ations t>get+1 p>tn]s ( ! ,collaborative1 & entities t are n p>tn]s ( ! ,collaborative4 7,d7 ,appropriate me*anisms to assess collaboration ) =eign entities or =eign-own$ entities4 7d7 ,advisory ,c\ncil ,n lat] ?an #fj days aft] ! date ( ! enactm5t ( ?is p>agraph1 ! ,director %all e/abli% a ,jo9t ,cyb] ,def5se ,collaborative ,advisory ,c\ncil1 compris$ ( #be repres5tatives ( ,collaborative p>tn]s ) div]se cyb]security & critical infra/ructure roles1 exp]tise1 & situational aw>5ess1 to in=m ! developm5t ( ! *>t] describ$ 9 p>agraph 7#a7 7& any updates !reto7 & provide recomm5dations on initiatives = ! ,collaborative to und]take4 ,! ,director %all seek su* recomm5dations f p>tn]s ( ! ,collaborative1 & appo9t memb]s to ! ,advisory ,c\ncil1 on a rotational basis1 = a p]iod ( n m ?an two ye>s4 ,no ,memb] ( ! ,cyb]security ,advisory ,committee "u section #bbai may s]ve on ! ,advisory ,c\ncil4 7e7 ,p>tn] organization views ,! ,director %all e/abli% a me*anism to receive ! views ( p>tn] organizations reg>d+ ! activities ( ! ,collaborative1 &1 9 addition1 accept volunt>y annual evaluations f sector coord9at+ c\ncils ) memb]s t are p>tn]s ( ! ,collaborative4 ,any su* evaluations %all by %>$ by ! ,director ) ! ,committee on ,homel& ,security ( ! ,h\se ( ,repres5tatives & ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate4 7f7 ,no "r or b5efit 7#a7 ,9 g5]al ,! provision ( assi/ance or in=mation to1 & inclusion 9 ! ,collaborative1 or any activity ( ! ,collaborative1 ( any gov]nm5tal or non-gov]nm5tal entity "u ?is section %all be at ! discretion ( ! ,director4 7#b7 ,limitation ,! provision ( c]ta9 assi/ance or in=mation to1 or inclusion 9 ! ,collaborative1 or any activity ( ! ,collaborative1 pursuant to ?is section %all n create a "r or b5efit1 :e!r sub/antive or proc$ural1 to simil> assi/ance or in=mation = any o!r gov]nm5tal or non-gov]nm5tal entity4 7g7 ,implem5tation ,= any action tak5 to implem5t ?is section1 ! foll[+ %all n apply3 7#a7 ,*apt] #ce ( title #dd1 ,unit$ ,/ates ,code4 7#b7 ,*apt] #aj ( title #e1 ,unit$ ,/ates ,code4 2 7#e7 9 subsection 7g71 z s r$esignat$-- 7,a7 9 ! matt] prec$+ p>agraph 7#a71 by /rik+ ,(fice & ins]t+ ,collaborative2 7,b7 9 p>agraph 7#a71 by /rik+ plann+2 & 7,c7 9 p>agraph 7#b7-- 7i7 9 subp>agraph 7,e71 by /rik+ & aft] ! semicolon2 & 7ii7 9 subp>agraph 7,f71 by /rik+ ! p]iod & ins]t+ a semicolon2 & 7iii7 by add+ at ! end ! foll[+ new subp>agraphs3 7,g7 ! ,dep>tm5t ( ,/ate2 & 7,h7 ! ,c5tral ,intellig5ce ,ag5cy4 2 7#f7 9 subsection 7h71 z s r$esignat$1 9 ! matt] prec$+ p>agraph 7#a71 by /rik+ responsibilities & ins]t+ functions2 7#g7 9 subsection 7i71 z s r$esignat$1 by /rik+ subsection 7c7 & ins]t+ subsection 7g72 & 7#h7 by add+ at ! end ! foll[+ new subsection3 7k7 ,sunset ,?is section %all expire on ! date t is five ye>s aft] ! date ( ! enactm5t ( ?is subsection4 4 7b7 ,/rategy2 annual brief+s2 in=mation policy 7#a7 ,*>t] ,n lat] ?an #abj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy ( ! ,dep>tm5t ( ,homel& ,security %all submit to ! ,committee on ,homel& ,security ( ! ,h\se ( ,repres5tatives & ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate ! *>t] = ! ,jo9t ,cyb] ,def5se ,collaborative develop$ pursuant to subsection 7c7 ( section #bbaf ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #ffe;b71 z am5d$ by ?is section1 & %all make su* *>t] publicly available 9 ! ,f$]al ,regi/] )9 sev5 days aft] su* submission to ,congress4 7#b7 ,/rategy ,n lat] ?an "o ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy ( ! ,dep>tm5t ( ,homel& ,security %all submit to ! ,committee on ,homel& ,security ( ! ,h\se ( ,repres5tatives & ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate a /rategy describ+ ! key priorities1 objectives1 & mile/ones ( ! ,jo9t ,cyb] ,def5se ,collaborative "u section #bbaf ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #ffe;b71 z am5d$ by ?is section1 z well z plans to c>ry out su* objectives & metrics t w be us$ to evaluate effectiv5ess & su/a9 op]ations ov] "t4 ,! ,director may1 z appropriate1 submit to su* ,committees any legislative proposals = new au?orities ! ,collaborative ne$s to c>ry out its mission4 7#c7 ,annual brief+s ,n lat] ?an "o ye> aft] ! date ( ! enactm5t ( ?is ,act & annually !reaft]1 ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy ( ! ,dep>tm5t ( ,homel& ,security %all provide to ! ,committee on ,homel& ,security ( ! ,h\se ( ,repres5tatives & ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate a brief+ on ! activities ( ! ,jo9t ,cyb] ,def5se ,collaborative "u section #bbaf ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #ffe;b71 z am5d$ by ?is section4 7#d7 ,in=mation access & security policy ,n lat] ?an #ij days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy ( ! ,dep>tm5t ( ,homel& ,security %all issue a policy reg>d+ h[ in=mation %>$ ) ! ,jo9t ,cyb] ,def5se ,collaborative "u section #bbaf ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #ffe;b71 z am5d$ by ?is section1 may be us$1 includ+ among diff]5t p>ticipants )9 ! ,collaborative1 z well z re/rictions on ! use ( in=mation1 includ+ prohibitions on %>+ in=mation ) gov]nm5tal & non-gov]nm5tal entities bas$ 9 or controll$ by c\ntries ! intellig5ce community 7z su* t]m is def9$ 9 section #c7d7 ( ! ,national ,security ,act ( #aidg 7#ej ,u4,s4,c4 #cjjc7d77 has id5tifi$ z a =eign adv]s>y 9 its mo/ rec5t ,annual ,?reat ,assessm5t or t ! ,secret>y ( ,homel& ,security1 9 coord9ation ) ! ,director ( ,national ,intellig5ce1 has id5tifi$ z a =eign adv]s>y 9 its mo/ rec5t ,annual ,?reat ,assessm5t4 ,su* policy %all also describe h[ in=mation reta9$ by ! ,collaborative w be secur$1 includ+ t all in=mation relat+ to cyb]security ?reats & incid5ts 7z su* t]ms are def9$ 9 section #bbjj ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fej77 provid$ by any gov]nm5t or non-gov]nm5t p>ticipant %all be protect$ z a ,high ,value ,asset z describ$ 9 ,f$]al ,in=mation ,process+ ,/&>ds ,publication #aii1 or any successor docum5t4 7c7 ,cl]ical am5dm5t ,! table ( cont5ts 9 section #a7;b7 ( ! ,homel& ,security ,act ( #bjjb is am5d$ by am5d+ ! item relat+ to section #bbaf to read z foll[s3 ,sec4 #bbaf4 ,jo9t ,cyb] ,def5se ,collaborative4 4