,i #aai? ,,congress #a/ ,session ,h4 ,r4 #ejgi ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,septemb] #b1 #bjbe,mr4 ,g>b>9o 7= himself & ,mr4 ,mc,caul7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,homel& ,security1 & 9 addition to ! ,committees on ,ov]sight & ,gov]nm5t ,re=m1 ,intellig5ce 7,p]man5t ,select71 ,en]gy & ,comm]ce1 ,arm$ ,s]vices1 & ! ,judici>y1 = a p]iod to be subsequ5tly det]m9$ by ! ,speak]1 9 ea* case = consid]ation ( su* provisions z fall )9 ! jurisdiction ( ! committee conc]n$ ,a ,,bill ,to reau?orize ! ,cyb]security ,act ( #bjae1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,widespread ,in=mation ,managem5t = ! ,welf>e ( ,infra/ructure & ,gov]nm5t ,act4 #b4 ,reau?orization ( ,cyb]security ,act ( #bjae 7a7 ,9 g5]al ,! ,cyb]security ,act ( #bjae 7#f ,u4,s4,c4 #aeja et seq42 enact$ z division ,n ( ! ,consolidat$ ,appropriations ,act1 #bjaf2 ,public ,law #aad-aac7 is am5d$-- 7#a7 9 section #ajb 7#f ,u4,s4,c4 #aeja2 relat+ to def9itions7-- 7,a7 by r$esignat+ p>agraphs 7#d71 7#e71 7#f71 7#g71 7#h71 7#i71 7#aj71 7#aa71 7#ab71 7#ac71 7#ad71 7#ae71 7#af71 7#ag71 & 7#ah7 z p>agraphs 7#f71 7#g71 7#h71 7#i71 7#aj71 7#aa71 7#ab71 7#ac71 7#ad71 7#ae71 7#af71 7#ag71 7#ai71 7#bj71 & 7#ba71 respectively2 7,b7 by ins]t+ aft] p>agraph 7#c7 ! foll[+ new p>agraphs3 7#d7 ,artificial intellig5ce ,! t]m artificial intellig5ce has ! mean+ giv5 su* t]m 9 section #ejjb ( ! ,national ,artificial ,intellig5ce ,initiative ,act ( #bjbj 7#ae ,u4,s4,c4 #idja74 7#e7 ,critical infra/ructure ,! t]m critical infra/ructure has ! mean+ giv5 su* t]m 9 section #ajaf7;e7 ( ,public ,law #ajg-ef 7#db ,u4,s4,c4 #eaie;c7e774 2 & 7,c7 by ins]t+ aft] p>agraph 7#ag71 z s r$esignat$1 ! foll[+ new p>agraph3 7#ah7 ,sector ,risk ,managem5t ,ag5cy ,! t]m ,sector ,risk ,managem5t ,ag5cy has ! mean+ giv5 su* t]m 9 section #bbjj ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fej74 2 7#b7 9 section #ajc 7#f ,u4,s4,c4 #aejb2 relat+ to %>+ ( in=mation by ! ,f$]al ,gov]nm5t7-- 7,a7 9 subsection 7a71 9 ! matt] prec$+ p>agraph 7#a71 by /rik+ develop & issue & ins]t+ develop1 issue1 &1 z appropriate1 update2 7,b7 9 subsection 7b7-- 7i7 9 p>agraph 7#a7-- 7,i7 9 ! matt] prec$+ subp>agraph 7,a71 by ins]t+ &1 z appropriate1 updat$1 aft] develop$2 7,,ii7 by am5d+ subp>agraph 7,a7 to read z foll[s3 7,a7 ensure ! ,f$]al ,gov]nm5t ma9ta9s ! capability to provide te*nical assi/ance1 on a volunt>y basis1 to non-,f$]al entities 9 utiliz+ cyb] ?reat indicators & def5sive measures = cyb]security purposes2 2 7,,iii7 9 subp>agraph 7,e77ii71 by /rik+ & aft] ! semicolon2 7,,iv7 9 subp>agraph 7,f71 by /rik+ ! p]iod & ins]t+ 2 &2 & 7,v7 by add+ at ! end ! foll[+ new subp>agraph3 7,g7 pursuant to section #bbab ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #ffb71 provide "o-"t read-ins1 z appropriate1 to select individuals id5tifi$ by non-,f$]al entities t own or op]ate critical infra/ructure2 2 & 7ii7 9 p>agraph 7#b7-- 7,i7 by ins]t+ &1 z appropriate1 updat+1 aft] develop+2 & 7,,ii7 by ins]t+ & def5sive measures aft] promote ! %>+ ( cyb] ?reat indicators2 & 7,c7 9 subsection 7c7-- 7i7 by ins]t+ & n lat] ?an #fj days aft] any update1 z appropriate1 ( proc$ures requir$ by subsection 7a71 aft] ,act12 & 7ii7 by ins]t+ 7or update1 z appropriate7 aft] proc$ures2 7#c7 9 section #ajd 7#f ,u4,s4,c4 #aejc2 relat+ to au?orizations = prev5t+1 detect+1 analyz+1 & mitigat+ cyb]security ?reats7-- 7,a7 9 subsection 7c7-- 7i7 9 p>agraph 7#a71 by ins]t+ 1 includ+ ,sector ,risk ,managem5t ,ag5cies t are ag5cies & ! majority ( ! sy/ems ( :i* are n cov]$ "u subsection 7d7 or 7e7 ( section #ceec ( title #dd1 ,unit$ ,/ates ,code1 aft] ,f$]al ,gov]nm5t2 7ii7 9 p>agraph 7#c7-- 7,i7 9 ! matt] prec$+ subp>agraph 7,a71 by /rik+ %all be & ins]t+ may be2 7,,ii7 9 subp>agraph 7,a71 by /rik+ or aft] ! semicolon2 7,,iii7 9 subp>agraph 7,b71 by /rik+ ! p]iod & ins]t+ 2 or2 & 7,,iv7 by add+ at ! end ! foll[+ new subp>agraph3 7,c7 to preclude ! use ( artificial intellig5ce t is develop$ or /rictly deploy$ = cyb]security purposes 9 c>ry+ out ! activities au?oriz$ "u p>agraph 7#a74 2 & 7iii7 9 subp>agraph 7,b7 ( subsection 7d77#b71 by ins]t+ 1 :i* may utilize artificial intellig5ce t is develop$ or /rictly deploy$ = cyb]security purposes1 aft] te*nical capability2 7#d7 9 section #aje 7#f ,u4,s4,c4 #aejd72 relat+ to %>+ ( cyb] ?reat indicators & def5sive measures ) ! ,f$]al ,gov]nm5t-- 7,a7 9 subsection 7a7-- 7i7 9 p>agraph 7#b71 by add+ at ! end ! foll[+ new s5t5ces3 ,z appropriate1 ! ,attorney ,g5]al & ! ,secret>y ( ,homel& ,security %all1 9 consultation ) ! heads ( ! appropriate ,f$]al entities1 jo9tly update su* policies & proc$ures1 & issue & make publicly available su* updat$ policies & proc$ures4 ,su* updates %all prioritize rapid dissem9ation to ,/ate1 local1 ,tribal1 & t]ritorial gov]nm5ts & own]s & op]ators ( non-,f$]al critical infra/ructure ( relevant & actionable cyb] ?reat indicators & def5sive measures42 7ii7 9 p>agraph 7#c71 9 ! matt] prec$+ subp>agraph 7,a71 by /rik+ develop$ or issu$ & ins]t+ develop$1 issu$1 or1 z appropriate1 updat$12 & 7iii7 9 p>agraph 7#d7-- 7,i7 9 subp>agraph 7,a71 by add+ at ! end ! foll[+ new s5t5ce3 ,z appropriate1 ! ,attorney ,g5]al & ! ,secret>y ( ,homel& ,security %all jo9tly update & make publicly available su* guidance to s assi/ entities & promote su* %>+ ( cyb] ?reat indicators & def5sive measures ) su* ,f$]al entities "u ?is title42 & 7,,ii7 9 subp>agraph 7,b71 9 ! matt] prec$+ clause 7i71 by ins]t+ &1 z appropriate1 updat$1 aft] develop$2 7,b7 9 subsection 7b7-- 7i7 9 p>agraph 7#b77;,b71 by ins]t+ 1 &1 z appropriate1 update1 aft] review2 & 7ii7 9 p>agraph 7#c71 9 ! matt] prec$+ subp>agraph 7,a71 by ins]t+ &1 z appropriate1 updat$1 aft] requir$2 7,c7 9 subsection 7c7-- 7i7 9 p>agraph 7#a77;,d71 by ins]t+ 1 includ+ if su* capability & process employs artificial intellig5ce be=e ! semicolon2 7ii7 9 p>agraph 7#b71 by add+ at ! end ! foll[+ new subp>agraph3 7,c7 ,outrea* ,n lat] ?an #ij days aft] ! date ( ! enactm5t ( ?is subp>agraph1 ! ,secret>y ( ,homel& ,security %all develop & cont9u\sly implem5t an outrea* plan1 includ+ t>get$ engagem5t1 to ensure ,f$]al & non-,f$]al entities1 p>ticul>ly small or rural own]s or op]ators ( critical infra/ructure :i* (t5 lack d$icat$ cyb]security /aff b rema9 vital to national security-- 7i7 are aw>e ( ! capability & process requir$ by p>agraph 7#a7 to %>e cyb] ?reat indicators & def5sive measures1 includ+ ! b5efits real-"t in=mation %>+ provides2 7ii7 und]/& h[ to %>e cyb] ?reat indicators & def5sive measures2 7iii7 und]/& ! obligation to remove c]ta9 p]sonal in=mation 9 accordance ) section #ajd7;d77#g7 prior to %>+ a cyb] ?reat indicator2 7iv7 und]/& h[ cyb] ?reat indicators & def5sive measures are receiv$1 process$1 us$1 & protect$2 7v7 und]/& ! protections !y are af=d$ 9 %>+ any cyb] ?reat indicators & def5sive measures2 & 7vi7 c provide fe$back to ! ,secret>y :5 policies1 proc$ures1 & guidel9es t are uncle> or un9t5tionally prohibitive to %>+ cyb] ?reat indicators & def5sive measures4 2 & 7iii7 by add+ at ! end ! foll[+ new subp>agraph3 7,d7 ,brief+s on outrea* ,! ,secret>y ( ,homel& ,security %all annually provide to ! ,committee on ,homel& ,security ( ! ,h\se ( ,repres5tatives & ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate a brief+ on ! implem5tation ( outrea* pursuant to subp>agraph 7,b74 2 & 7,d7 9 subsection 7d7-- 7i7 9 p>agraph 7#a71 by ins]t+ copyright or be=e trade secret protection2 & 7ii7 9 p>agraph 7#e77;,a71 7,i7 9 clause 7iv71 by /rik+ or aft] ! semicolon2 7,,ii7 9 clause 7v77,,iii71 by /rik+ ! p]iod & ins]t+ 2 or2 & 7,,iii7 by add+ at ! end ! foll[+ new clause3 7vi7 ! purpose ( rapidly provid+ o!r ,f$]al entities1 includ+ ,sector ,risk ,managem5t ,ag5cies1 aw>5ess ( a cyb]security ?reat t may impact ! in=mation sy/ems ( su* ,ag5cies4 2 7#e7 9 section #ajh 7#f ,u4,s4,c4 #aejg2 relat+ to con/ruction & preemption7-- 7,a7 9 subsection 7c7-- 7i7 9 ! matt] prec$+ p>agraph 7#a71 by /rik+ %all be & ins]t+ may be2 7ii7 9 p>agraph 7#b71 by /rik+ or aft] ! semicolon2 7iii7 9 p>agraph 7#c71 by /rik+ ! p]iod & ins]t+ 2 or2 & 7iv7 by add+ at ! end ! foll[+ new p>agraph3 7#d7 to preclude ! use ( artificial intellig5ce t is develop$ or /rictly deploy$ = cyb]security purposes 9 c>ry+ out activities au?oriz$ by ?is title4 2 & 7,b7 9 subsection 7f7-- 7i7 9 p>agraph 7#c7-- 7,i7 by ins]t+ to %>e cyb] ?reat indicators or def5sive measures aft] relation%ip2 & 7,,ii7 by /rik+ or aft] ! semicolon2 7ii7 9 p>agraph 7#d71 by /rik+ ! p]iod & ins]t+ 2 or2 & 7iii7 by add+ at ! end ! foll[+ new p>agraph3 7#e7 to limit or modify1 not)/&+ any o!r provision ( law1 ! au?orization to %>e pursuant to section #ajd7;c77#a7 ) ,sector ,risk ,managem5t ,ag5cies describ$ 9 su* section4 2 7#f7 9 section #aji 7#f ,u4,s4,c4 #aejh2 relat+ to report on cyb]security ?reats7-- 7,a7 9 subsection 7a7-- 7i7 by ins]t+ & n lat] ?an ,septemb] #cj ( e two ye>s !reaft]1 aft] ,act12 7ii7 by ins]t+ ! ,secret>y ( ,homel& ,security & aft] 9 coord9ation )2 7iii7 by ins]t+ & ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs be=e ( ! ,s5ate2 7iv7 by ins]t+ & ! ,committee on ,homel& ,security be=e ( ! ,h\se2 & 7v7 by ins]t+ preposition+ activities1 ransomw>e1 aft] attacks12 & 7,b7 9 subsection 7b7-- 7i7 9 p>agraph 7#a71 by ins]t+ preposition+ activities1 ransomw>e1 aft] attacks12 7i7 9 p>agraph 7#b71 by ins]t+ preposition+ activity1 ransomw>e1 aft] attack12 7i7 9 p>agraph 7#c71 by ins]t+ preposition+ activities1 ransomw>e1 aft] attacks1 ea* place x appe>s2 & 7i7 9 p>agraph 7#d71 by ins]t+ preposition+ activities1 ransomw>e1 aft] attacks12 & 7#g7 9 section #aaa7;a7 7#f ,u4,s4,c4 #aeaj7;a71 relat+ to effective p]iod71 by /rik+ #bjbe & ins]t+ #bjce4 7b7 ,con=m+ am5dm5ts ,section #bbjj ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fej2 relat+ to def9itions7 is am5d$-- 7#a7 9 p>agraph 7#e7-- 7,a7 9 subp>agraph 7,b71 by ins]t+ or compromis+ aft] defeat+2 7,b7 9 subp>agraph 7,c71 by ins]t+ includ+ a security vuln]ability affect+ an in=mation sy/em or a te*nology includ$ 9 ! critical & em]g+ te*nologies li/ ( ! ,(fice ( ,sci5ce & ,te*nology ,policy or successor li/1 su* z artificial intellig5ce 7z su* t]m is def9$ 9 section #ejjb ( ! ,national ,artificial ,intellig5ce ,initiative ,act ( #bjbj 7#ae ,u4,s4,c4 #idja771 :i* may be 9 a ,f$]al entity's or non-,f$]al entity's s(tw>e or h>dw>e supply *a91 aft] security vuln]ability12 7,c7 9 subp>agraph 7,d71 by ins]t+ or compromise aft] defeat2 & 7,d7 9 subp>agraph 7,f71 by ins]t+ or compromis$ aft] exfiltrat$2 7#b7 9 p>agraph 7#ad71 by am5d+ subp>agraph 7,b7 to read z foll[s3 7,b7 includes1 9 accordance ) section #ajd7;d77#b7 ( ! ,cyb]security ,%>+ ,act ( #bjae 7#f ,u4,s4,c4 #aejc7;d77#b77-- 7i7 op]ational te*nology1 includ+ indu/rial control sy/ems1 su* z sup]visory control & data acquisition sy/ems1 di/ribut$ control sy/ems1 & programmable logic controll]s2 7ii7 edge devices2 & 7iii7 int]net ( ?+s devices1 includ+ digital & physical infra/ructure impact$ by ransomw>e4 2 & 7#c7 9 p>agraph 7#be71 by ins]t+ or compromise aft] defeat4