,,ii #aahth ,,congress #ast ,session ,s4 #hbd ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,march #ae1 #bjbc,ms4 ,hassan 7for herself and ,mr4 ,romney7 introduced the following bill2 which was read twice and referred to the ,committee on ,homeland ,security and ,governmental ,affairs ,a ,,bill ,to require the ,secretary of ,homeland ,security to establish a national risk management cycle1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,national ,risk ,management ,act of #bjbc4 #b4 ,national risk management cycle 7a7 ,in general ,subtitle ,a of title ,,xxii of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fea et seq47 is amended by adding at the end the following3 #bbbj;,f4 ,national risk management cycle 7a7 ,national critical functions defined ,in this section1 the term national critical functions means the functions of government and the private sector so vital to the ,united ,states that their disruption1 corruption1 or dysfunction would have a debilitating effect on security1 national economic security1 national public health or safety1 or any combination thereof4 7b7 ,national risk management cycle 7#a7 ,risk identification and assessment 7,a7 ,in general ,the ,secretary1 acting through the ,director1 shall establish a recurring process by which to identify and assess risks to critical infrastructure1 considering both cyber and physical threats and the associated likelihoods1 vulnerabilities1 and consequences4 7,b7 ,consultation ,in establishing the process required under subparagraph 7,a71 the ,secretary shall consult-- 7i7 ,sector ,risk ,management ,agencies2 7ii7 critical infrastructure owners and operators2 7iii7 the ,assistant to the ,president for ,national ,security ,affairs2 7iv7 the ,assistant to the ,president for ,homeland ,security2 and 7v7 the ,national ,cyber ,director4 7,c7 ,process elements ,the process established under subparagraph 7,a7 shall include elements to-- 7i7 collect relevant information1 collected pursuant to section #bbah1 from ,sector ,risk ,management ,agencies relating to the threats1 vulnerabilities1 and consequences related to the particular sectors of those ,sector ,risk ,management ,agencies2 7ii7 allow critical infrastructure owners and operators to submit relevant information to the ,secretary for consideration2 and 7iii7 outline how the ,secretary will solicit input from other ,federal departments and agencies4 7,d7 ,publication ,not later than #ahj days after the date of enactment of this section1 the ,secretary shall publish in the ,federal ,register procedures for the process established under subparagraph 7,a71 subject to any redactions the ,secretary determines are necessary to protect classified or other sensitive information4 7,e7 ,report ,the ,secretary shall submit to the ,president1 the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate1 and the ,committee on ,homeland ,security of the ,house of ,representatives a report on the risks identified by the process established under subparagraph 7,a7-- 7i7 not later than #a year after the date of enactment of this section2 and 7ii7 not later than #a year after the date on which the ,secretary submits a periodic evaluation described in section #ijjb7;b77#b7 of title ,,xc of division ,h of the ,william ,m4 7,mac7 ,thornberry ,national ,defense ,authorization ,act for ,fiscal ,year #bjba 7#f ,u4,s4,c4 #feb;a7b77#b774 7#b7 ,national critical infrastructure resilience strategy 7,a7 ,in general ,not later than #a year after the date on which the ,secretary delivers each report required under paragraph 7#a71 the ,president shall deliver to majority and minority leaders of the ,senate1 the ,speaker and minority leader of the ,house of ,representatives1 the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate1 and the ,committee on ,homeland ,security of the ,house of ,representatives a national critical infrastructure resilience strategy designed to address the risks identified by the ,secretary4 7,b7 ,elements ,each strategy delivered under subparagraph 7,a7 shall-- 7i7 prioritize areas of risk to critical infrastructure that would compromise or disrupt national critical functions impacting national security1 economic security1 or public health and safety2 7ii7 assess the implementation of the previous national critical infrastructure resilience strategy1 as applicable2 7iii7 identify and outline current and proposed national-level actions1 programs1 and efforts1 including resource requirements1 to be taken to address the risks identified2 7iv7 identify the ,federal departments or agencies responsible for leading each national-level action1 program1 or effort and the relevant critical infrastructure sectors for each2 and 7v7 request any additional authorities necessary to successfully execute the strategy4 7,c7 ,form ,each strategy delivered under subparagraph 7,a7 shall be unclassified1 but may contain a classified annex4 7#c7 ,congressional briefing ,not later than #a year after the date on which the ,president delivers the first strategy required under paragraph 7#b77;,a71 and each year thereafter1 the ,secretary1 in coordination with ,sector ,risk ,management ,agencies1 shall brief the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate and the ,committee on ,homeland ,security of the ,house of ,representatives on-- 7,a7 the national risk management cycle activities undertaken pursuant to the strategy delivered under subparagraph 7,a72 and 7,b7 the amounts and timeline for funding that the ,secretary has determined would be necessary to address risks and successfully execute the full range of activities proposed by the strategy delivered subparagraph 7,a74 4 7b7 ,technical and conforming amendment ,the table of contents in section #a7;b7 of the ,homeland ,security ,act of #bjjb 7,public ,law #ajg-bif2 #aaf ,stat4 #bace7 is amended by inserting after the item relating to section #bbbj;,e the following3 ,sec4 #bbbj;,f4 ,national risk management cycle4 4