,,ii #aai? ,,congress #a/ ,session ,s4 #beic ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,july #ca1 #bjbe ,mr4 ,scott ( ,florida introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,bank+1 ,h\s+1 & ,urban ,affairs ,a ,,bill ,to direct ! ,secret>y ( ,comm]ce to submit a report assess+ vuln]abilities to ! electric grid 9 ! ,unit$ ,/ates f c]ta9 ,int]net-connect$ devices & applications1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,prev5t+ ,remote ,op]ations by ,?reat5+ ,entities on ,critical ,te*nology = ! ,grid ,act or ! ,,protect ! ,grid ,act4 #b4 ,f9d+s2 ,purposes 7a7 ,f9d+s ,congress f9ds t-- 7#a7 ! rapid prolif]ation ( highwattage ,io,t devices1 su* z electric vehicle *>g]s1 clo!s dry]s1 sm>t air condition]s1 wat] heat]s1 ov5s1 & simil> appliances1 has dramatically increas$ ! numb] ( connect$ devices 9 h\seholds 9 ! ,unit$ ,/ates2 7#b7 7,a7 sm>t appliance applications & s(tw>e plat=ms increas+ly s]ve z remote control int]faces2 & 7,b7 :5 ^? applications & s(tw>e plat=ms orig9ate f companies op]at+ "u ! jurisdiction or direction ( =eign adv]s>ies !y (f] a pa?way = l>ge-scale1 coord9at$ manipulation ( p[] dem&1 ?reat5+ grid /ability2 7#c7 7,a7 9 c]ta9 =eign adv]s>y jurisdictions1 p>ticul>ly ! ,p's ,republic ( ,*9a1 private companies are subject to =mal political ov]sight ?r\gh me*anisms su* z1 9 ! case ( ! ,p's ,republic ( ,*9a1 emb$d$ ,*9ese ,communi/ ,p>ty committees & executive-level ,*9ese ,communi/ ,p>ty lead]%ip2 & 7,b7 ^? arrangem5ts blur ! l9es betwe5 comm]cial activity & /ate-direct$ /rategic int]e/s2 7#d7 fur!r elevat+ ! risk to ! ,unit$ ,/ates electric grid is ! #bjag ,cyb]security ,law ( ! ,p's ,republic ( ,*9a 7commonly ref]r$ to z ! ,*9ese ,cyb]security ,law71 :i* m&ates t ,*9ese companies /ore cu/om] data dome/ically & grant ,*9ese /ate au?orities broad access to ^? data2 7#e7 ! legal & political /ructures describ$ 9 p>agraphs 7#c7 & 7#d7 increase ! likelihood t connect$ home appliances c\ld be lev]ag$ by =eign adv]s>ies to t>get critical infra/ructure 9 ! ev5t ( a conflict ) ! ,unit$ ,/ates2 7#f7 companies controll$ by =eign adv]s>ies-- 7,a7 are actively pursu+ rapid deploym5t ( high-wattage ,io,t devices t c\ld be us$ to attack ! electric grid 9 ! ,unit$ ,/ates2 & 7,b7 control m ?an #be p]c5t ( ! major appliance indu/ry 9 ! ,unit$ ,/ates1 :i* provides an e/abli%$ plat=m = quickly deploy+ ^? high-wattage ,io,t devices2 7#g7 ?r\gh sm>t applications1 companies controll$ by =eign adv]s>ies-- 7,a7 are actively collect+ detail$ consum] data on millions ( p 9 ! ,unit$ ,/ates2 & 7,b7 h ! ability to directly manipulate ! dem& ( high-wattage devices on ! electric grid2 7#h7 z a result1 =eign adv]s>y-controll$ applications = highwattage ,io,t devices create significant risk ( coord9at$1 delib]ate1 dem&-manipulation attacks on ! electric grid 9 ! ,unit$ ,/ates2 7#i7 sev]al academic /udies f rese>*]s at ,pr9ceton ,univ]sity1 ! ,georgia ,in/itute ( ,te*nology1 & ! ,univ]sity ( ,cali=nia1 ,santa ,cruz1 po9t to significant risks ( manipulation ( dem& via ,io,t 7commonly ref]r$ to z ,ma,d,io,t7 attacks to manipulate p[] dem& on ! electric grid t c\ld result 9 l>ge-scale black\ts & pot5tial damage to ! electric grid2 7#aj7 x is !re=e critical to protect en]gy infra/ructure 9 ! ,unit$ ,/ates by ensur+ t sm>t applications emb$d$ 9 home appliances are secure & _c s]ve z an entry po9t = =eign adv]s>ies2 & 7#aa7 fail+ to address ! vuln]abilities pres5t$ by ^? sm>t applications c\ld lead to grid in/ability1 frequ5cy imbalances1 cascad+ sy/em failures1 &1 ultimately1 cata/rophic disruptions t jeop>dize bo? public safety & ! broad] economy ( ! ,unit$ ,/ates4 7b7 ,purposes ,! purposes ( ?is ,act are-- 7#a7 to h>monize & re9=ce exi/+ national security initiatives aim$ at secur+ ! dome/ic in=mation & communications te*nology & s]vices 7commonly ref]r$ to z ,,icts7 supply *a9 aga9/ manipulation ( dem&1 especially by ! ,p's ,republic ( ,*9a2 & 7#b7 to direct ! ,secret>y ( ,comm]ce1 9 consultation ) o!r relevant ,f$]al (ficials1 to submit to ,congress a report conta9+ f9d+s & recomm5dations to ensure t network-connect$ home appliances 9 h\seholds 9 ! ,unit$ ,/ates d n s]ve z a conduit = activities by =eign adv]s>ies or jeop>dize ! /ability ( ! electric grid 9 ! ,unit$ ,/ates4 #c4 ,def9itions ,9 ?is ,act3 7#a7 ,consum] product ,! t]m consum] product has ! mean+ giv5 ! t]m 9 section #c7;a7 ( ! ,consum] ,product ,safety ,act 7#ae ,u4,s4,c4 #bjeb7;a774 7#b7 ,cov]$ entity ,! t]m cov]$ entity means an entity t-- 7,a7 is subject to ! jurisdiction ( a =eign adv]s>y2 7,b7 is directly or indirectly op]at+ on behalf ( a =eign adv]s>y2 or 7,c7 is own$ by1 directly or indirectly controll$ by1 or o!rwise subject to ! direction or influ5ce (1 a =eign adv]s>y4 7#c7 ,critical infra/ructure ,! t]m critical infra/ructure has ! mean+ giv5 ! t]m 9 subsection 7e7 ( ! ,critical ,infra/ructures ,protection ,act ( #bjja 7#db ,u4,s4,c4 #eaie;c74 7#d7 ,=eign adv]s>y ,! t]m =eign adv]s>y means-- 7,a7 any cov]$ nation 7z def9$ 9 section #dhgb7;f7 ( title #aj1 ,unit$ ,/ates ,code72 & 7,b7 ! ,boliv>ian ,republic ( ,v5ezuela :ile ,nicols ,maduro ,moros is 9 p[]4 7#e7 ,=eign adv]s>y-controll$ application ,! t]m =eign adv]s>y-controll$ application means a website1 desktop application1 mobile application1 or augm5t$ or imm]sive te*nology application t is op]at$1 directly or indirectly 7includ+ ?r\gh a p>5t1 subsidi>y1 or affiliate 7z ^? t]ms are def9$ 9 section #bcj4dje ( title #ag1 ,code ( ,f$]al ,regulations 7z 9 effect on ! date ( enactm5t ( ?is ,act7771 by a cov]$ entity4 7#f7 ,high-wattage ,io,t device ,! t]m high-wattage ,io,t device means any ,int]netconnect$ appliance or device t is capable ( consum+ or controll+ electrical p[] at a level exce$+ #ejj watts1 reg>dless ( :e!r ! device is us$ or design$ = use 9 resid5tial or comm]cial applications4 7#g7 ,io,t ,! t]m ,io,t means ,int]net ( ,?+s4 7#h7 ,relevant ,f$]al (ficial ,! t]m relevant ,f$]al (ficial means-- 7,a7 any ,f$]al (ficial describ$ 9 section #a7;a7 ( ,executive ,ord] #achgc 7#hd ,f$4 ,reg4 #bbfhi2 relat+ to secur+ ! in=mation & communications te*nology & s]vices supply *a97 7z 9 effect on ! date ( enactm5t ( ?is ,act7 7or a designee ( ! applicable ,f$]al (ficial72 & 7,b7 ! head 7or a designee ( ! head7 ( any o!r ,f$]al dep>tm5t or ag5cy t1 9 ! det]m9ation ( ! ,secret>y ( ,comm]ce1 is relevant to ! purposes ( ?is ,act4 #d4 ,report on national security risks pos$ by =eign adv]s>y-controll$ applications ) ! capability ( controll+ high-wattage ,io,t devices 7a7 ,9 g5]al ,n lat] ?an #bgj days aft] ! date ( enactm5t ( ?is ,act1 ! ,secret>y ( ,comm]ce1 9 coord9ation ) o!r relevant ,f$]al (ficials1 %all submit to ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation ( ! ,s5ate & ! ,committee on ,en]gy & ,comm]ce ( ! ,h\se ( ,repres5tatives a report assess+ ! national security risks associat$ ) =eign adv]s>y-controll$ applications ) ! ability to attack or und]m9e critical infra/ructure 9 ! ,unit$ ,/ates4 7b7 ,consid]ations ,9 prep>+ ! report "u subsection 7a71 ! ,secret>y ( ,comm]ce %all consid]1 at a m9imum-- 7#a7 ! ext5t ( deploym5t ( high-wattage ,io,t devices across ! ,unit$ ,/ates2 7#b7 risks relat+ to =eign adv]s>y-controll$ applications1 especially ^? incorporat$ into consum] products t c\ld be us$ to attack or o!rwise de/abilize ! electric grid2 7#c7 pot5tial impacts ( ^? risks & any o!r relevant vuln]abilities on national security1 includ+ ! risks ( frequ5cy imbalances1 cascad+ failures1 & o!r disruptions to critical infra/ructure2 & 7#d7 public comm5ts & input f indu/ry exp]ts1 dome/ic produc]s1 import]s1 consum] gr\ps1 & o!r /akehold]s reg>d+ ! security (1 & ! ext5t ( =eign influ5ce ov]1 =eign adv]s>y-controll$ applications & high-wattage ,io,t devices4 7c7 ,recomm5dations ,! report submitt$ "u subsection 7a7 %all include recomm5dations = mitigation measures to address any id5tifi$ national security risks1 :i* may include-- 7#a7 an assessm5t ( h[ ,executive ,ord] #achgc 7#hd ,f$4 ,reg4 #bbfhi2 relat+ to secur+ ! in=mation & communications te*nology & s]vices supply *a97 7z 9 effect on ! date ( enactm5t ( ?is ,act7 may be appli$ to ,io,t devices1 z su* devices apply to ! electric grid1 to include re/rictions or conditions on transactions directly involv+ =eign adv]s>y-controll$ applications 9 high-wattage ,io,t devices2 7#b7 specifically re/rict+ ! procurem5t by ! ,f$]al ,gov]nm5t ( consum] products ) a =eign adv]s>y-controll$ application2 7#c7 c]tification or label+ requirem5ts = high-wattage ,io,t devices2 & 7#d7 any o!r proposal1 z det]m9$ necess>y by ! ,secret>y ( ,comm]ce1 9 consultation ) o!r relevant ,f$]al (ficials4 #e4 ,codification ( ,executive ,ord] #achgc 7a7 ,9 g5]al ,! provisions ( ,executive ,ord] #achgc 7#hd ,f$4 ,reg4 #bbfhi2 relat+ to secur+ ! in=mation & communications te*nology & s]vices supply *a97 7z 9 effect on ! date ( enactm5t ( ?is ,act7 are enact$ into law4 7b7 ,publication ,9 publi%+ ?is ,act 9 slip =m & 9 ! ,unit$ ,/ates ,/atutes at ,l>ge pursuant to section #aab ( title #a1 ,unit$ ,/ates ,code1 ! ,ar*ivi/ ( ! ,unit$ ,/ates %all include aft] ! date ( approval at ! end an app5dix sett+ =? ! text ( ! ,executive ord] ref]r$ to 9 subsection 7a7 7z 9 effect on ! date ( enactm5t ( ?is ,act74