,,ii #aaith ,,congress #b;d ,session ,s4 #defe ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,may #ai1 #bjbf,mr4 ,scott of ,florida introduced the following bill2 which was read twice and referred to the ,committee on ,homeland ,security and ,governmental ,affairs ,a ,,bill ,to ensure the security and integrity of ,united ,states critical infrastructure by establishing an interagency task force and requiring a comprehensive report on the targeting of ,united ,states critical infrastructure by ,people's ,republic of ,china state-sponsored cyber actors1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,strengthening ,cyber ,resilience ,against ,state-,sponsored ,threats ,act4 #b4 ,interagency task force and report on the targeting of ,united ,states critical infrastructure by ,people's ,republic of ,china state-sponsored cyber actors 7a7 ,definitions ,in this section3 7#a7 ,appropriate congressional committees ,the term appropriate congressional committees means-- 7,a7 the ,committee on ,homeland ,security and ,governmental ,affairs1 the ,committee on the ,judiciary1 and the ,select ,committee on ,intelligence of the ,senate2 and 7,b7 the ,committee on ,homeland ,security1 the ,committee on the ,judiciary1 and the ,permanent ,select ,committee on ,intelligence of the ,house of ,representatives4 7#b7 ,asset ,the term asset means a person1 structure1 facility1 information1 material1 equipment1 network1 or process1 whether physical or virtual1 that enables the services1 functions1 or capabilities of an organization4 7#c7 ,critical infrastructure ,the term critical infrastructure has the meaning given the term in section #ajaf7;e7 of the ,critical ,infrastructures ,protection ,act of #bjja 7#db ,u4,s4,c4 #eaie;c7e774 7#d7 ,cybersecurity threat ,the term cybersecurity threat has the meaning given the term in section #bbjj of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fej74 7#e7 ,director ,the term ,director means the ,director of the ,cybersecurity and ,infrastructure ,security ,agency4 7#f7 ,homeland ,security ,enterprise ,the term ,homeland ,security ,enterprise has the meaning given the term in section #bbjj of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fej74 7#g7 ,incident ,the term incident has the meaning given the term in section #bbjj of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fej74 7#h7 ,information sharing ,the term information sharing means the bidirectional sharing of timely and relevant information concerning a cybersecurity threat posed by a ,state-sponsored cyber actor of the ,people's ,republic of ,china to ,united ,states critical infrastructure4 7#i7 ,intelligence community ,the term intelligence community has the meaning given the term in section #c7d7 of the ,national ,security ,act of #aidg 7#ej ,u4,s4,c4 #cjjc7d774 7#aj7 ,locality ,the term locality means any local government authority or agency or component thereof within a ,state having jurisdiction over matters at a county1 municipal1 or other local government level4 7#aa7 ,secretary ,the term ,secretary means the ,secretary of ,homeland ,security4 7#ab7 ,sector ,the term sector means a collection of assets1 systems1 networks1 entities1 or organizations that provide or enable a common function for national security 7including national defense and continuity of ,government71 national economic security1 national public health or safety1 or any combination thereof4 7#ac7 ,sector ,risk ,management ,agency ,the term ,sector ,risk ,management ,agency has the meaning given the term in section #bbjj of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fej74 7#ad7 ,state ,the term ,state means any ,state of the ,united ,states1 the ,district of ,columbia1 the ,commonwealth of ,puerto ,rico1 the ,northern ,mariana ,islands1 the ,united ,states ,virgin ,islands1 ,guam1 ,american ,samoa1 and any other territory or possession of the ,united ,states4 7#ae7 ,systems ,the term systems means a combination of personnel1 structures1 facilities1 information1 materials1 equipment1 networks1 or processes1 whether physical or virtual1 integrated or interconnected for a specific purpose that enables the services1 functions1 or capabilities of an organization4 7#af7 ,task force ,the term task force means the joint interagency task force established under subsection 7b74 7#ag7 ,united ,states ,the term ,united ,states1 when used in a geographic sense1 means any ,state of the ,united ,states4 7#ah7 ,volt ,typhoon ,the term ,volt ,typhoon means the ,people's ,republic of ,china ,state-sponsored cyber actor described in the ,cybersecurity and ,infrastructure ,security ,agency cybersecurity advisory entitled ,,prc ,state-,sponsored ,actors ,compromise and ,maintain ,persistent ,access to ,u4,s4 ,critical ,infrastructure1 issued on ,february #jg1 #bjbd1 or any successor advisory4 7b7 ,interagency task force ,not later than #abj days after the date of enactment of this ,act1 the ,secretary1 acting through the ,director1 in consultation with the ,attorney ,general1 the ,director of the ,federal ,bureau of ,investigation1 and the heads of appropriate ,sector ,risk ,management ,agencies as determined by the ,director1 shall establish a joint interagency task force to facilitate collaboration and coordination among the ,sector ,risk ,management ,agencies assigned a ,federal role or responsibility in ,national ,security ,memorandum-#bb1 issued ,april #cj1 #bjbd 7relating to critical infrastructure security and resilience71 or any successor document1 to detect1 analyze1 and respond to the cybersecurity threat posed by ,state-sponsored cyber actors1 including ,volt ,typhoon1 of the ,people's ,republic of ,china by ensuring that the actions of those agencies are aligned and mutually reinforcing4 7c7 ,chairs 7#a7 ,chairperson ,the ,director1 or the designee of the ,director1 shall serve as the ,chairperson of the task force4 7#b7 ,vice ,chairperson ,the ,director of the ,federal ,bureau of ,investigation1 or the designee of the ,director1 shall serve as the ,vice ,chairperson of the task force4 7d7 ,composition 7#a7 ,in general ,the task force shall consist of appropriate representatives of the departments and agencies specified in subsection 7b7 appointed by the ,chairperson in consultation with the ,vice ,chairperson4 7#b7 ,qualifications ,to materially assist in the activities of the task force1 representatives under paragraph 7#a7 shall be subject matter experts who have familiarity and technical expertise regarding cybersecurity1 digital forensics1 or threat intelligence analysis1 or in-depth knowledge of the tactics1 techniques1 and procedures commonly used by ,state-sponsored cyber actors1 including ,volt ,typhoon1 of the ,people's ,republic of ,china4 7e7 ,vacancy ,any vacancy occurring in the membership of the task force shall be filled in the same manner in which the original appointment was made4 7f7 ,establishment flexibility ,to avoid redundancy1 the task force may coordinate with any preexisting task force1 working group1 or cross-intelligence effort within the ,homeland ,security ,enterprise or the intelligence community that has examined or responded to the cybersecurity threat posed by ,state-sponsored cyber actors1 including ,volt ,typhoon1 of the ,people's ,republic of ,china4 7g7 ,task force reports2 briefing 7#a7 ,initial report ,not later than #edj days after the establishment of the task force1 the task force shall submit to the appropriate congressional committees the first report containing the initial findings1 conclusions1 and recommendations of the task force4 7#b7 ,annual report ,not later than #a year after the date of the submission of the initial report under paragraph 7#a71 and annually thereafter for #e years1 the task force shall submit to the appropriate congressional committees an annual report containing the findings1 conclusions1 and recommendations of the task force4 7#c7 ,contents ,the reports under this subsection shall include the following3 7,a7 ,an assessment at the lowest classification feasible of the sector-specific risks1 trends relating to incidents impacting sectors1 and tactics1 techniques1 and procedures utilized by or relating to ,state-sponsored cyber actors1 including ,volt ,typhoon1 of the ,people's ,republic of ,china4 7,b7 ,an assessment of additional resources and authorities needed by ,federal departments and agencies to better counter the cybersecurity threat posed by ,state-sponsored cyber actors1 including ,volt ,typhoon1 of the ,people's ,republic of ,china4 7,c7 ,a classified assessment of the extent of potential destruction1 compromise1 or disruption to ,united ,states critical infrastructure by ,state-sponsored cyber actors1 including ,volt ,typhoon1 of the ,people's ,republic of ,china in the event of a major crisis or future conflict between the ,people's ,republic of ,china and the ,united ,states4 7,d7 ,a classified assessment of the ability of the ,united ,states to counter the cybersecurity threat posed by ,state-sponsored cyber actors1 including ,volt ,typhoon1 of the ,people's ,republic of ,china in the event of a major crisis or future conflict between the ,people's ,republic of ,china and the ,united ,states1 including with respect to different cybersecurity measures and recommendations that could mitigate such a threat4 7,e7 ,a classified assessment of the ability of ,state-sponsored cyber actors1 including ,volt ,typhoon1 of the ,people's ,republic of ,china to disrupt operations of the ,united ,states ,armed ,forces by hindering mobility across critical infrastructure such as rail1 aviation1 and ports1 including how such disruption would impair the ability of the ,united ,states ,armed ,forces to deploy and maneuver forces effectively4 7,f7 ,a classified assessment of the economic and social ramifications of a disruption to #a or multiple ,united ,states critical infrastructure sectors by ,state-sponsored cyber actors1 including ,volt ,typhoon1 of the ,people's ,republic of ,china in the event of a major crisis or future conflict between the ,people's ,republic of ,china and the ,united ,states4 7,g7 ,such recommendations as the task force may have for the ,homeland ,security ,enterprise1 the intelligence community1 or critical infrastructure owners and operators to improve the detection and mitigation of the cybersecurity threat posed by ,state-sponsored cyber actors1 including ,volt ,typhoon1 of the ,people's ,republic of ,china4 7,h7 ,a one-time plan for an awareness campaign to familiarize critical infrastructure owners and operators with security resources and support offered by ,federal departments and agencies to mitigate the cybersecurity threat posed by ,state-sponsored cyber actors1 including ,volt ,typhoon1 of the ,people's ,republic of ,china4 7#d7 ,briefing ,not later than #cj days after the date of the submission of each report under this subsection1 the task force shall provide to the appropriate congressional committees a classified briefing on the findings1 conclusions1 and recommendations of the task force4 7#e7 ,form ,each report under this subsection shall be submitted in classified form1 consistent with the protection of intelligence sources and methods1 but may include an unclassified executive summary4 7#f7 ,publication ,the unclassified executive summary of each report required under this subsection shall be published on a publicly accessible website of the ,department of ,homeland ,security4 7h7 ,access to information 7#a7 ,in general ,the ,secretary1 the ,director1 the ,attorney ,general1 the ,director of the ,federal ,bureau of ,investigation1 and the heads of appropriate ,sector ,risk ,management ,agencies1 as determined by the ,director1 shall provide to the task force such information1 documents1 analysis1 assessments1 findings1 evaluations1 inspections1 audits1 or reviews relating to efforts to counter the cybersecurity threat posed by ,state-sponsored cyber actors1 including ,volt ,typhoon1 of the ,people's ,republic of ,china as the task force considers necessary to carry out this section4 7#b7 ,receipt1 handling1 storage1 and dissemination ,information1 documents1 analysis1 assessments1 findings1 evaluations1 inspections1 audits1 and reviews described in this subsection shall be received1 handled1 stored1 and disseminated only by members of the task force consistent with all applicable statutes1 regulations1 and ,executive orders4 7#c7 ,security clearances for task force members ,no member of the task force may be provided with access to classified information under this section without the appropriate security clearances4 7i7 ,termination ,the task force1 and all the authorities of this section1 shall terminate on the date that is #fj days after the final briefing required under subsection 7g77#d74 7j7 ,exemption from ,,faca ,chapter #aj of title #e1 ,united ,states ,code1 shall not apply to the task force4 7k7 ,exemption from ,paperwork ,reduction ,act ,chapter #ce of title #dd1 ,united ,states ,code 7commonly known as the ,paperwork ,reduction ,act71 shall not apply to the task force4