,,ii  #aai? ,,congress  #b;d ,session   
,s4 #defe  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,may #ai1 #bjbf,mr4    
,scott ( ,florida introduc$ ! foll[+    
bill2 :i* 0 read twice & ref]r$ to !    
,committee on ,homel& ,security &       
,gov]nm5tal ,affairs  ,a ,,bill  ,to    
ensure ! security & integrity ( ,unit$  
,/ates critical infra/ructure by        
e/abli%+ an int]ag5cy task =ce & requir+
 a compreh5sive report on ! t>get+ (    
,unit$ ,/ates critical infra/ructure by 
,p's ,republic ( ,*9a /ate-sponsor$ cyb]
 actors1 & = o!r purposes4  #a4 ,%ort   
title ,?is ,act may be cit$ z ! ,/r5g!n+
 ,cyb] ,resili5ce ,aga9/ ,/ate-,sponsor$
 ,?reats ,act4  #b4 ,int]ag5cy task =ce 
& report on ! t>get+ ( ,unit$ ,/ates    
critical infra/ructure by ,p's ,republic
 ( ,*9a /ate-sponsor$ cyb] actors  7a7  
,def9itions ,9 ?is section3 7#a7        
,appropriate congressional committees ,!
 t]m appropriate congressional          
committees means-- 7,a7 ! ,committee on 
,homel& ,security & ,gov]nm5tal         

,affairs1 ! ,committee on ! ,judici>y1 &
 ! ,select ,committee on ,intellig5ce ( 
! ,s5ate2 &  7,b7 ! ,committee on       
,homel& ,security1 ! ,committee on !    
,judici>y1 & ! ,p]man5t ,select         
,committee on ,intellig5ce ( ! ,h\se (  
,repres5tatives4  7#b7 ,asset ,! t]m    
asset means a p]son1 /ructure1 facility1
 in=mation1 mat]ial1 equipm5t1 network1 
or process1 :e!r physical or virtual1 t 
enables ! s]vices1 functions1 or        
capabilities ( an organization4  7#c7   
,critical infra/ructure ,! t]m critical 
infra/ructure has ! mean+ giv5 ! t]m 9  
section #ajaf7;e7 ( ! ,critical         
,infra/ructures ,protection ,act ( #bjja
 7#db ,u4,s4,c4 #eaie;c7e774  7#d7      
,cyb]security ?reat ,! t]m cyb]security 
?reat has ! mean+ giv5 ! t]m 9 section  
#bbjj ( ! ,homel& ,security ,act ( #bjjb
 7#f ,u4,s4,c4 #fej74  7#e7 ,director ,!
 t]m ,director means ! ,director ( !    
,cyb]security & ,infra/ructure ,security
 ,ag5cy4  7#f7 ,homel& ,security        
,ent]prise ,! t]m ,homel& ,security     

,ent]prise has ! mean+ giv5 ! t]m 9     
section #bbjj ( ! ,homel& ,security ,act
 ( #bjjb 7#f ,u4,s4,c4 #fej74  7#g7     
,incid5t ,! t]m incid5t has ! mean+ giv5
 ! t]m 9 section #bbjj ( ! ,homel&      
,security ,act ( #bjjb 7#f ,u4,s4,c4    
#fej74  7#h7 ,in=mation %>+ ,! t]m      
in=mation %>+ means ! bidirectional %>+ 
( timely & relevant in=mation conc]n+ a 
cyb]security ?reat pos$ by a            
,/ate-sponsor$ cyb] actor ( ! ,p's      
,republic ( ,*9a to ,unit$ ,/ates       
critical infra/ructure4  7#i7           
,intellig5ce community ,! t]m           
intellig5ce community has ! mean+ giv5 !
 t]m 9 section #c7d7 ( ! ,national      
,security ,act ( #aidg 7#ej ,u4,s4,c4   
#cjjc7d774  7#aj7 ,locality ,! t]m      
locality means any local gov]nm5t       
au?ority or ag5cy or compon5t !re( )9 a 
,/ate hav+ jurisdiction ov] matt]s at a 
c\nty1 municipal1 or o!r local gov]nm5t 
level4  7#aa7 ,secret>y ,! t]m ,secret>y
 means ! ,secret>y ( ,homel& ,security4 
7#ab7 ,sector ,! t]m sector means a     

collection ( assets1 sy/ems1 networks1  
entities1 or organizations t provide or 
enable a common function = national     
security 7includ+ national def5se &     
cont9uity ( ,gov]nm5t71 national        
economic security1 national public heal?
 or safety1 or any comb9ation !re(4     
7#ac7 ,sector ,risk ,managem5t ,ag5cy ,!
 t]m ,sector ,risk ,managem5t ,ag5cy has
 ! mean+ giv5 ! t]m 9 section #bbjj ( ! 
,homel& ,security ,act ( #bjjb 7#f      
,u4,s4,c4 #fej74  7#ad7 ,/ate ,! t]m    
,/ate means any ,/ate ( ! ,unit$ ,/ates1
 ! ,di/rict ( ,columbia1 ! ,commonweal? 
( ,pu]to ,rico1 ! ,nor!rn ,m>iana       
,isl&s1 ! ,unit$ ,/ates ,virg9 ,isl&s1  
,guam1 ,am]ican ,samoa1 & any o!r       
t]ritory or possession ( ! ,unit$       
,/ates4  7#ae7 ,sy/ems ,! t]m sy/ems    
means a comb9ation ( p]sonnel1          
/ructures1 facilities1 in=mation1       
mat]ials1 equipm5t1 networks1 or        
processes1 :e!r physical or virtual1    
integrat$ or int]connect$ = a specific  
purpose t enables ! s]vices1 functions1 

or capabilities ( an organization4      
7#af7 ,task =ce ,! t]m task =ce means ! 
jo9t int]ag5cy task =ce e/abli%$ "u     
subsection 7b74  7#ag7 ,unit$ ,/ates ,! 
t]m ,unit$ ,/ates1 :5 us$ 9 a geographic
 s5se1 means any ,/ate ( ! ,unit$       
,/ates4  7#ah7 ,volt ,typhoon ,! t]m    
,volt ,typhoon means ! ,p's ,republic ( 
,*9a ,/ate-sponsor$ cyb] actor describ$ 
9 ! ,cyb]security & ,infra/ructure      
,security ,ag5cy cyb]security advisory  
entitl$ ,,prc ,/ate-,sponsor$ ,actors   
,compromise & ,ma9ta9 ,p]si/5t ,access  
to ,u4,s4 ,critical ,infra/ructure1     
issu$ on ,febru>y #jg1 #bjbd1 or any    
successor advisory4  7b7 ,int]ag5cy task
 =ce ,n lat] ?an #abj days aft] ! date (
 enactm5t ( ?is ,act1 ! ,secret>y1 act+ 
?r\gh ! ,director1 9 consultation ) !   
,attorney ,g5]al1 ! ,director ( ! ,f$]al
 ,bureau ( ,inve/igation1 & ! heads (   
appropriate ,sector ,risk ,managem5t    
,ag5cies z det]m9$ by ! ,director1 %all 
e/abli% a jo9t int]ag5cy task =ce to    
facilitate collaboration & coord9ation  

among ! ,sector ,risk ,managem5t        
,ag5cies assign$ a ,f$]al role or       
responsibility 9 ,national ,security    
,memor&um-#bb1 issu$ ,april #cj1 #bjbd  
7relat+ to critical infra/ructure       
security & resili5ce71 or any successor 
docum5t1 to detect1 analyze1 & respond  
to ! cyb]security ?reat pos$ by         
,/ate-sponsor$ cyb] actors1 includ+     
,volt ,typhoon1 ( ! ,p's ,republic (    
,*9a by ensur+ t ! actions ( ^? ag5cies 
are align$ & mutually re9=c+4  7c7      
,*airs  7#a7 ,*airp]son ,! ,director1 or
 ! designee ( ! ,director1 %all s]ve z !
 ,*airp]son ( ! task =ce4  7#b7 ,vice   
,*airp]son ,! ,director ( ! ,f$]al      
,bureau ( ,inve/igation1 or ! designee (
 ! ,director1 %all s]ve z ! ,vice       
,*airp]son ( ! task =ce4  7d7           
,composition  7#a7 ,9 g5]al ,! task =ce 
%all consi/ ( appropriate repres5tatives
 ( ! dep>tm5ts & ag5cies specifi$ 9     
subsection 7b7 appo9t$ by ! ,*airp]son 9
 consultation ) ! ,vice ,*airp]son4     
7#b7 ,qualifications ,to mat]ially assi/

 9 ! activities ( ! task =ce1           
repres5tatives "u p>agraph 7#a7 %all be 
subject matt] exp]ts :o h famili>ity &  
te*nical exp]tise reg>d+ cyb]security1  
digital =5sics1 or ?reat intellig5ce    
analysis1 or 9-dep? k ( ! tactics1      
te*niques1 & proc$ures commonly us$ by  
,/ate-sponsor$ cyb] actors1 includ+     
,volt ,typhoon1 ( ! ,p's ,republic (    
,*9a4  7e7 ,vacancy ,any vacancy occurr+
 9 ! memb]%ip ( ! task =ce %all be fill$
 9 ! same mann] 9 :i* ! orig9al         
appo9tm5t 0 made4  7f7 ,e/abli%m5t      
flexibility ,to avoid r$undancy1 ! task 
=ce may coord9ate ) any preexi/+ task   
=ce1 work+ gr\p1 or cross-intellig5ce   
ef=t )9 ! ,homel& ,security ,ent]prise  
or ! intellig5ce community t has exam9$ 
or respond$ to ! cyb]security ?reat pos$
 by ,/ate-sponsor$ cyb] actors1 includ+ 
,volt ,typhoon1 ( ! ,p's ,republic (    
,*9a4  7g7 ,task =ce reports2 brief+    
7#a7 ,initial report ,n lat] ?an #edj   
days aft] ! e/abli%m5t ( ! task =ce1 !  
task =ce %all submit to ! appropriate   

congressional committees ! fir/ report  
conta9+ ! initial f9d+s1 conclusions1 & 
recomm5dations ( ! task =ce4  7#b7      
,annual report ,n lat] ?an #a ye> aft] !
 date ( ! submission ( ! initial report 
"u p>agraph 7#a71 & annually !reaft] =  
#e ye>s1 ! task =ce %all submit to !    
appropriate congressional committees an 
annual report conta9+ ! f9d+s1          
conclusions1 & recomm5dations ( ! task  
=ce4  7#c7 ,cont5ts ,! reports "u ?is   
subsection %all include ! foll[+3 7,a7  
,an assessm5t at ! l[e/ classification  
feasible ( ! sector-specific risks1     
tr5ds relat+ to incid5ts impact+        
sectors1 & tactics1 te*niques1 &        
proc$ures utiliz$ by or relat+ to       
,/ate-sponsor$ cyb] actors1 includ+     
,volt ,typhoon1 ( ! ,p's ,republic (    
,*9a4  7,b7 ,an assessm5t ( additional  
res\rces & au?orities ne$$ by ,f$]al    
dep>tm5ts & ag5cies to bett] c\nt] !    
cyb]security ?reat pos$ by              
,/ate-sponsor$ cyb] actors1 includ+     
,volt ,typhoon1 ( ! ,p's ,republic (    

,*9a4  7,c7 ,a classifi$ assessm5t ( !  
ext5t ( pot5tial de/ruction1 compromise1
 or disruption to ,unit$ ,/ates critical
 infra/ructure by ,/ate-sponsor$ cyb]   
actors1 includ+ ,volt ,typhoon1 ( ! ,p's
 ,republic ( ,*9a 9 ! ev5t ( a major    
crisis or future conflict betwe5 ! ,p's 
,republic ( ,*9a & ! ,unit$ ,/ates4     
7,d7 ,a classifi$ assessm5t ( ! ability 
( ! ,unit$ ,/ates to c\nt] !            
cyb]security ?reat pos$ by              
,/ate-sponsor$ cyb] actors1 includ+     
,volt ,typhoon1 ( ! ,p's ,republic (    
,*9a 9 ! ev5t ( a major crisis or future
 conflict betwe5 ! ,p's ,republic ( ,*9a
 & ! ,unit$ ,/ates1 includ+ ) respect to
 diff]5t cyb]security measures &        
recomm5dations t c\ld mitigate su* a    
?reat4  7,e7 ,a classifi$ assessm5t ( ! 
ability ( ,/ate-sponsor$ cyb] actors1   
includ+ ,volt ,typhoon1 ( ! ,p's        
,republic ( ,*9a to disrupt op]ations ( 
! ,unit$ ,/ates ,arm$ ,=ces by h9d]+    
mobility across critical infra/ructure  
su* z rail1 aviation1 & ports1 includ+  

h[ su* disruption w\ld impair ! ability 
( ! ,unit$ ,/ates ,arm$ ,=ces to deploy 
& maneuv] =ces effectively4  7,f7 ,a    
classifi$ assessm5t ( ! economic &      
social ramifications ( a disruption to  
#a or multiple ,unit$ ,/ates critical   
infra/ructure sectors by ,/ate-sponsor$ 
cyb] actors1 includ+ ,volt ,typhoon1 ( !
 ,p's ,republic ( ,*9a 9 ! ev5t ( a     
major crisis or future conflict betwe5 !
 ,p's ,republic ( ,*9a & ! ,unit$       
,/ates4  7,g7 ,su* recomm5dations z !   
task =ce may h = ! ,homel& ,security    
,ent]prise1 ! intellig5ce community1 or 
critical infra/ructure own]s & op]ators 
to improve ! detection & mitigation ( ! 
cyb]security ?reat pos$ by              
,/ate-sponsor$ cyb] actors1 includ+     
,volt ,typhoon1 ( ! ,p's ,republic (    
,*9a4  7,h7 ,a "o-"t plan = an aw>5ess  
campaign to famili>ize critical         
infra/ructure own]s & op]ators )        
security res\rces & support (f]$ by     
,f$]al dep>tm5ts & ag5cies to mitigate !
 cyb]security ?reat pos$ by             

,/ate-sponsor$ cyb] actors1 includ+     
,volt ,typhoon1 ( ! ,p's ,republic (    
,*9a4  7#d7 ,brief+ ,n lat] ?an #cj days
 aft] ! date ( ! submission ( ea* report
 "u ?is subsection1 ! task =ce %all     
provide to ! appropriate congressional  
committees a classifi$ brief+ on !      
f9d+s1 conclusions1 & recomm5dations ( !
 task =ce4  7#e7 ,=m ,ea* report "u ?is 
subsection %all be submitt$ 9 classifi$ 
=m1 consi/5t ) ! protection (           
intellig5ce s\rces & me?ods1 b may      
include an unclassifi$ executive summ>y4
  7#f7 ,publication ,! unclassifi$      
executive summ>y ( ea* report requir$ "u
 ?is subsection %all be publi%$ on a    
publicly accessible website ( !         
,dep>tm5t ( ,homel& ,security4  7h7     
,access to in=mation  7#a7 ,9 g5]al ,!  
,secret>y1 ! ,director1 ! ,attorney     
,g5]al1 ! ,director ( ! ,f$]al ,bureau (
 ,inve/igation1 & ! heads ( appropriate 
,sector ,risk ,managem5t ,ag5cies1 z    
det]m9$ by ! ,director1 %all provide to 
! task =ce su* in=mation1 docum5ts1     

analysis1 assessm5ts1 f9d+s1            
evaluations1 inspections1 audits1 or    
reviews relat+ to ef=ts to c\nt] !      
cyb]security ?reat pos$ by              
,/ate-sponsor$ cyb] actors1 includ+     
,volt ,typhoon1 ( ! ,p's ,republic (    
,*9a z ! task =ce consid]s necess>y to  
c>ry out ?is section4  7#b7 ,receipt1   
h&l+1 /orage1 & dissem9ation ,in=mation1
 docum5ts1 analysis1 assessm5ts1 f9d+s1 
evaluations1 inspections1 audits1 &     
reviews describ$ 9 ?is subsection %all  
be receiv$1 h&l$1 /or$1 & dissem9at$    
only by memb]s ( ! task =ce consi/5t )  
all applicable /atutes1 regulations1 &  
,executive ord]s4  7#c7 ,security       
cle>ances = task =ce memb]s ,no memb] ( 
! task =ce may be provid$ ) access to   
classifi$ in=mation "u ?is section )\t !
 appropriate security cle>ances4  7i7   
,t]m9ation ,! task =ce1 & all !         
au?orities ( ?is section1 %all t]m9ate  
on ! date t is #fj days aft] ! f9al     
brief+ requir$ "u subsection 7g77#d74   
7j7 ,exemption f ,,faca ,*apt] #aj (    

title #e1 ,unit$ ,/ates ,code1 %all n   
apply to ! task =ce4  7k7 ,exemption f  
,pap]work ,r$uction ,act ,*apt] #ce (   
title #dd1 ,unit$ ,/ates ,code 7commonly
 kn[n z ! ,pap]work ,r$uction ,act71    
%all n apply to ! task =ce4