,,ii  #aai? ,,congress  #b;d ,session   
,s4 #defd  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,may #ai1 #bjbf,mr4    
,scott ( ,florida 7= himself & ,mr4     
,kim7 introduc$ ! foll[+ bill2 :i* 0    
read twice & ref]r$ to ! ,committee on  
,comm]ce1 ,sci5ce1 & ,transportation  ,a
 ,,bill  ,to am5d title #df1 ,unit$     
,/ates ,code1 to require ! ,secret>y ( !
 dep>tm5t 9 :i* ! ,coa/ ,gu>d is op]at+ 
to assess cyb]security risks ( c]ta9    
s(tw>e & h>dw>e us$ 9 c]ta9 m>itime     
facilities1 & = o!r purposes4  #a4 ,%ort
 title ,?is ,act may be cit$ z !        
,m>itime ,cyb]security ,act4  #b4       
,cyb]security vuln]ability assessm5ts ( 
c]ta9 m>itime facility s(tw>e & h>dw>e  
,section #gjajb ( title #df1 ,unit$     
,/ates ,code1 is am5d$-- 7#a7 9         
subsection 7b7-- 7,a7 9 p>agraph        
7#a77;,c71 by ins]t+ 7includ+1 ) respect
 to cov]$ facilities1 cyb]security risks
 ( cov]$ s(tw>e or h>dw>e z provid$ "u  
subsection 7d77#a77 aft] cyb]security   
risks2  7,b7 9 p>agraph 7#c71 by ins]t+ 

be=e ! p]iod 1 except t1 = cov]$        
facilities1 ! ,secret>y %all annually   
update ea* su* vuln]ability assessm5t ) 
respect to ! id5tification ( weaknesses 
9 security & cyb]security risks ( cov]$ 
s(tw>e or h>dw>e 9 accordance )         
subsection 7d77#a72 &  7,c7 9 p>agraph  
7#d7-- 7i7 by /rik+ ,9 lieu & ins]t+    
7,a7 ,except z provid$ 9 subp>agraph    
7,b71 9 lieu2 &  7ii7 by add+ at ! end !
 foll[+3  7,b7 ,9 ! ev5t t ! ,secret>y  
accepts an alt]native assessm5t describ$
 9 subp>agraph 7,a7 = a cov]$ facility1 
! ,secret>y %all /ill conduct an        
assessm5t "u p>agraph 7#a7 ( weaknesses 
9 security & cyb]security risks ( cov]$ 
s(tw>e or h>dw>e us$ at ! facility 9    
accordance ) subsection 7d77#a74  2 &   
7#b7 by add+ at ! end ! foll[+3  7d7    
,assess+ cyb]security risks ( cov]$     
s(tw>e or h>dw>e  7#a7 ,assessm5ts  7,a7
 ,9 g5]al ,n lat] ?an #a ye> aft] ! date
 ( enactm5t ( ?is subsection1 & annually
 !reaft]1 ! ,secret>y1 9 coord9ation ) !
 ,director ( ! ,cyb]security &          

,infra/ructure ,security ,ag5cy1 %all   
conduct an assessm5t "u subsection      
7b77#a7 ) respect to weaknesses 9       
security & cyb]security risks ( cov]$   
s(tw>e or h>dw>e4  7,b7 ,r$uc+ b>ri]s ,!
 ,secret>y may conduct an assessm5t "u  
?is p>agraph-- 7i7 not)/&+ any provision
 ( an end us] lic5s+ agreem5t or o!r    
contract t w\ld o!rwise h9d] su*        
assessm5t2 &  7ii7 )\t obta9+ ! cons5t (
 any own] or op]ator ( a cov]$ facility1
 or any o!r p]son1 not)/&+ any o!r      
provision ( law4  7#b7 ,cov]$ facility  
reports & compliance  7,a7 ,9 g5]al ,n  
lat] ?an #ahj days aft] ! date (        
enactm5t ( ?is subsection1 & annually   
!reaft]1 ! own] or op]ator ( a cov]$    
facility %all submit a report to !      
,secret>y t-- 7i7 id5tifies-- 7,i7 any  
cov]$ s(tw>e or h>dw>e t-- 7aa7 ! own]  
or op]ator is us+1 plans to use1 or dur+
 ! previ\s ye> us$ at ! facility2 &     
7bb7 0 manufactur$-- 7,,aa7 by a =eign  
entity ( conc]n or a =eign c\ntry (     
conc]n2 7,,bb7 by a company controll$ or

 op]at$ by a =eign entity ( conc]n or a 
=eign c\ntry ( conc]n2 or 7,,cc7 9 a    
=eign c\ntry ( conc]n2  7,,ii7 any      
in/ance ) respect to ! facility ( a     
cyb]security risk result+ 9 a           
transportation security incid5t involv+ 
! m>9e transportation sy/em or any port 
security sy/em2 &  7,,iii7 any o!r      
cyb]security risk ) respect to !        
facility1 )\t reg>d to :e!r ! risk      
result$ 9 a transportation security     
incid5t2 &  7ii7 except z provid$ "u    
subp>agraph 7,b77ii71 c]tifies t any    
cov]$ s(tw>e or h>dw>e t ! own] or      
op]ator is us+1 plans to use1 or dur+ ! 
previ\s ye> us$ has be5 assess$ =       
consi/5cy ) /&>ds ( ! ,national         
,in/itute ( ,/&>ds & ,te*nology or      
equival5t /&>ds )9 ! previ\s ye> & !    
own] or op]ator has mitigat$ aga9/ any  
inconsi/5cies ) su* /&>ds4  7,b7        
,compliance  7i7 ,9 g5]al ,except z     
provid$ 9 clause 7ii71 ! own] or op]ator
 ( a cov]$ facility may n use any cov]$ 
s(tw>e or h>dw>e describ$ 9 subp>agraph 

7,a77ii7 = :i* x _c c]tify consi/5cy )  
/&>ds ( ! ,national ,in/itute ( ,/&>ds &
 ,te*nology or equival5t /&>ds4  7ii7   
,waiv] process ,! ,secret>y may issue a 
waiv] to all[ an own] or op]ator ( a    
cov]$ facility to use cov]$ s(tw>e or   
h>dw>e = :i* x _c c]tify consi/5cy )    
/&>ds ( ! ,national ,in/itute ( ,/&>ds &
 ,te*nology or equival5t /&>ds if !     
,secret>y det]m9es t !re is l[ risk to  
national security :i* is outweigh$ by ! 
b5efit to comm]ce4  7#c7 ,annual reports
 to ,congress ,n lat] ?an #a ye> aft] ! 
date ( enactm5t ( ?is subsection1 &     
annually !reaft]1 ! ,secret>y1 9        
coord9ation ) ! ,director ( !           
,cyb]security & ,infra/ructure ,security
 ,ag5cy1 %all provide a report1 to !    
,committee on ,homel& ,security &       
,gov]nm5tal ,affairs ( ! ,s5ate & !     
,committee on ,homel& ,security ( !     
,h\se ( ,repres5tatives1 on-- 7,a7 !    
f9d+s ( ! mo/ rec5t assessm5t "u        
p>agraph 7#a72  7,b7 ! f9d+s ( ! mo/    
rec5t reports "u p>agraph 7#b72  7,c7   

any actions tak5 by ! ,secret>y1 or !   
,director ( ! ,cyb]security &           
,infra/ructure ,security ,ag5cy1 to     
mitigate cyb]security risks ) respect to
 cov]$ s(tw>e or h>dw>e2 &  7,d7 any    
recomm5dations to ,congress on /r5g!n+  
m>itime transportation & port security )
 respect to cyb]security risks ( cov]$  
s(tw>e or h>dw>e4  7#d7 ,nondisclosure  
,subject to p>agraph 7#e71 in=mation 9  
any assessm5t or report "u ?is          
subsection %all n be disclos$ to !      
public1 pursuant to section #eeb7;b77#c7
 ( ! ,unit$ ,/ates ,code4  7#e7         
,coord9ation ,! ,secret>y %all          
coord9ate1 z appropriate1 ) ,f$]al      
entities1 & any o!r entities t h an     
agreem5t 9 effect ) ! ,secret>y = ! %>+ 
( in=mation1 to make in=mation compil$  
by ! ,secret>y "u ?is subsection        
available to su* entities = ! purposes (
 m>itime transportation security1       
cyb]security risk mitigation1 or        
compliance assi/ance relat$ to cov]$    
facilities or cov]$ s(tw>e or h>dw>e4   

7e7 ,def9itions ,9 ?is section3 7#a7    
,cov]$ facility ,! t]m cov]$ facility   
means a facility-- 7,a7 t is describ$ 9 
subsection 7b77#a72 &  7,b7 to :i* "p   
#aje or #ajf ( title #cc1 ,code ( ,f$]al
 ,regulations 7or successor             
regulations71 applies4  7#b7 ,cov]$     
s(tw>e or h>dw>e ,! t]m cov]$ s(tw>e or 
h>dw>e means any s(tw>e or h>dw>e t--   
7,a7 connects to ! int]net or o!rwise   
poses a cyb]security risk2  7,b7 is us$ 
at a cov]$ facility2 &  7,c7 is us$ 9-- 
7i7 ! m>9e transportation sy/em1 includ+
 9 a crane manufactur$-- 7,i7 by a =eign
 entity ( conc]n or a =eign c\ntry (    
conc]n2  7,,ii7 by a company controll$  
or op]at$ by a =eign entity ( conc]n or 
a =eign c\ntry ( conc]n2 or  7,,iii7 9 a
 =eign c\ntry ( conc]n2 or  7ii7 a      
bus9ess sy/em t1 if compromis$ or       
exploit$1 c\ld result 9 a transportation
 security incid5t2  7iii7 a sy/em ^:    
own]%ip1 op]ation1 ma9t5ance1 or control
 is delegat$ :olly or 9 "p to any o!r   
p>ty2 or  7iv7 any o!r m>itime          

infra/ructure det]m9$ by ! ,secret>y to 
be a high cyb]security risk to !        
security ( any cov]$ facility or to     
m>itime transportation security4  7#c7  
,cyb]security vuln]ability ,! t]m       
cyb]security vuln]ability means a       
*>act]i/ic or specific weakness t r5d]s 
s(tw>e or h>dw>e or affiliat$ sy/ems op5
 to exploitation by a giv5 ?reat or     
susceptible to a giv5 haz>d4  7#d7      
,=eign c\ntry ( conc]n2 =eign entity (  
conc]n ,! t]ms =eign c\ntry ( conc]n &  
=eign entity ( conc]n h ! mean+s giv5   
su* t]ms 9 section #ajfab7;a7 ( !       
,rese>* & ,developm5t1 ,competition1 &  
,innovation ,act 7#db ,u4,s4,c4         
#aibba7;a774  4