I 

116TH CONGRESS 

2D SESSION H. R. 5667 

To enhance stakeholder outreach to and operational engagement with owners 

and operators of critical infrastructure and other relevant stakeholders 

by the Cybersecurity and Infrastructure Security Agency to bolster security against acts of terrorism and other homeland security threats, including by maintaining a clearinghouse of security guidance, best practices, 

and other voluntary content developed by the Agency or aggregated 

from trusted sources, and for other purposes. 

IN THE HOUSE OF REPRESENTATIVES 

JANUARY 24, 2020 

Ms. UNDERWOOD (for herself and Mr. KATKO) introduced the following bill; 

which was referred to the Committee on Homeland Security, and in addition to the Committee on Energy and Commerce, for a period to be subsequently determined by the Speaker, in each case for consideration of 

such provisions as fall within the jurisdiction of the committee concerned 

A BILL 

To enhance stakeholder outreach to and operational engagement with owners and operators of critical infrastructure 

and other relevant stakeholders by the Cybersecurity and 

Infrastructure Security Agency to bolster security against 

acts of terrorism and other homeland security threats, 

including by maintaining a clearinghouse of security 

guidance, best practices, and other voluntary content developed by the Agency or aggregated from trusted 

sources, and for other purposes. 


kjohnson on DSK79L0C42PROD with BILLS
2 

•HR 5667 IH

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘Safe Communities 

5 Act’’. 

6 SEC. 2. RESPONSIBILITIES OF CISA DIRECTOR RELATING 

7 TO SECURITY RESOURCES CLEARINGHOUSE. 

8 Subsection (c) of section 2202 of the Homeland Secu9 rity Act of 2002 (6 U.S.C. 652) is amended— 

10 (1) by redesignating paragraphs (6) through 

11 (11) as paragraphs (7) through (12), respectively; 

12 and 

13 (2) by inserting after paragraph (5) the fol14 lowing new paragraph: 

15 ‘‘(6) maintain a clearinghouse for owners and 

16 operators of critical infrastructure and other rel17 evant stakeholders to access security guidance, best 

18 practices, and other voluntary content developed by 

19 the Agency in a manner consistent with the require20 ments of section 508 of the Rehabilitation Act of 

21 1973 (29 U.S.C. 794d) and the Plain Writing Act 

22 of 2010 (5 U.S.C. note) or aggregated from trusted 

23 sources;’’. 


kjohnson on DSK79L0C42PROD with BILLS
3 

•HR 5667 IH

1 SEC. 3. STAKEHOLDER OUTREACH AND OPERATIONAL EN2 GAGEMENT STRATEGY. 

3 (a) STRATEGY.—Not later than 180 days after the 

4 date of the enactment of this Act, the Director of the Cy5 bersecurity and Infrastructure Security Agency of the De6 partment of Homeland Security shall issue a strategy to 

7 improve stakeholder outreach and operational engagement 

8 that includes the Agency’s strategic and operational goals 

9 and priorities for carrying out the stakeholder engagement 

10 activities described in paragraphs (6) and (11) of section 

11 2202(c) of the Homeland Security Act of 2002 (6 U.S.C. 

12 652(c)), as added and redesignated, respectively, by sec13 tion 2 of this Act. 

14 (b) CONTENTS.—The stakeholder outreach and oper15 ational engagement strategy issued under subsection (a) 

16 shall include the following: 

17 (1) A catalogue of the stakeholder engagement 

18 activities and services delivered by protective security 

19 advisors and cybersecurity advisors of the Cyberse20 curity and Infrastructure Security Agency of the De21 partment of Homeland Security, including the loca22 tions of the stakeholder engagement and services de23 livered and the critical infrastructure sectors (as 

24 such term is defined in section 2001(3) of the 

25 Homeland Security Act of 2002 (6 U.S.C. 601(3)) 

26 involved. 


kjohnson on DSK79L0C42PROD with BILLS
4 

•HR 5667 IH

1 (2) An assessment of the capacity of programs 

2 of the Agency to deploy protective security advisors 

3 and cybersecurity advisors, including the adequacy 

4 of such advisors to meet service requests and the 

5 ability of such advisors to engage with and deliver 

6 services to stakeholders in urban, suburban, and 

7 rural areas. 

8 (3) Long-term objectives of the protective secu9 rity advisor and cybersecurity advisor programs, in10 cluding cross-training of the protective security advi11 sor and cybersecurity advisor workforce to optimize 

12 the capabilities of such programs and capacity goals. 

13 (4) A description of programs, policies, and ac14 tivities used to carry out such stakeholder engage15 ment activities and services under paragraph (1). 

16 (5) Resources and personnel necessary to effec17 tively support critical infrastructure owners and op18 erators and other entities, as appropriate, based on 

19 current and projected demand for Agency services. 

20 (6) Guidance on how outreach to critical infra21 structure owners and operators in a region should be 

22 prioritized. 

23 (7) Plans to ensure that stakeholder engage24 ment field personnel of the Agency have a clear un25 derstanding of expectations for engagement within 


kjohnson on DSK79L0C42PROD with BILLS
5 

•HR 5667 IH

1 each critical infrastructure sector and subsector, 

2 whether during steady state or surge capacity. 

3 (8) Metrics for measuring the effectiveness of 

4 stakeholder engagement activities and services under 

5 paragraph (1), including mechanisms to track re6 gional engagement of field personnel of the Agency 

7 with critical infrastructure owners and operators, 

8 and how frequently such engagement takes place. 

9 (9) Plans for awareness campaigns to famil10 iarize owners and operators of critical infrastructure 

11 with security resources and support offered by the 

12 Cybersecurity and Infrastructure Security Agency, 

13 including the clearinghouse maintained pursuant to 

14 paragraph (6) of section 2202(c) of the Homeland 

15 Security Act of 2002 (6 U.S.C. 652(c)), as added by 

16 section 2. 

17 (c) STAKEHOLDER INPUT.—In issuing the stake18 holder outreach and operational engagement strategy re19 quired under subsection (a), the Director of the Cyberse20 curity and Infrastructure Security Agency of the Depart21 ment of Homeland Security shall, to the extent prac22 ticable, solicit input from stakeholders representing the 

23 following: 

24 (1) Each of the critical infrastructure sectors. 


kjohnson on DSK79L0C42PROD with BILLS
6 

•HR 5667 IH

1 (2) Critical infrastructure owners and operators 

2 located in each region in which the Agency main3 tains a field office. 

4 (d) IMPLEMENTATION PLAN.—Not later than 90 

5 days after issuing the stakeholder outreach and oper6 ational engagement strategy required under subsection 

7 (a), the Director of the Cybersecurity and Infrastructure 

8 Security Agency of the Department of Homeland Security 

9 shall issue an implementation plan for the strategy that 

10 includes the following: 

11 (1) Strategic objectives and corresponding tasks 

12 for protective security advisor and cybersecurity ad13 visor workforce development, training, and retention 

14 plans. 

15 (2) Projected timelines, benchmarks, and re16 source requirements for such tasks. 

17 (3) Metrics to evaluate the performance of such 

18 tasks. 

19 (e) CONGRESSIONAL OVERSIGHT.—Upon issuance of 

20 the implementation plan required under subsection (d), 

21 the Director of the Cybersecurity and Infrastructure Secu22 rity Agency of the Department of Homeland Security, 

23 shall submit to the Committee on Homeland Security of 

24 the House of Representatives and the Committee on 

25 Homeland Security and Governmental Affairs of the SenVerDate Sep 11 2014 01:35 Jan 25, 2020 Jkt 099200 PO 00000 Frm 00006 Fmt 6652 Sfmt 6201 E:\BILLS\H5667.IH H5667

kjohnson on DSK79L0C42PROD with BILLS
7 

•HR 5667 IH

1 ate the stakeholder outreach and operational engagement 

2 strategy required under subsection (a) and the implemen3 tation plan required under subsection (b), together with 

4 any other associated legislative or budgetary proposals re5 lating thereto. 

6 SEC. 4. INFORMATION PROVIDED BY PROTECTIVE SECU7 RITY ADVISORS. 

8 The Director of the Cybersecurity and Infrastructure 

9 Security Agency of the Department of Homeland Security 

10 shall ensure, to the greatest extent practicable, protective 

11 security advisors of the Agency are disseminating home12 land security information on voluntary programs and serv13 ices of the Department of Homeland Security, including 

14 regarding the Nonprofit Security Grant Program, to bol15 ster security and terrorism resilience. 

16 SEC. 5. PROTECTIVE SECURITY ADVISOR FORCE MULTI17 PLIER PILOT PROGRAM. 

18 (a) IN GENERAL.—Not later than one year after the 

19 date of the enactment of this Act, the Director of the Cy20 bersecurity and Infrastructure Security Agency of the De21 partment of Homeland Security shall establish a one-year 

22 pilot program for State, local, Tribal, and territorial law 

23 enforcement agencies and appropriate government officials 

24 to be trained by protective security advisors of the Agency 


kjohnson on DSK79L0C42PROD with BILLS
8 

•HR 5667 IH

1 regarding carrying out security vulnerability or terrorism 

2 risk assessments of facilities. 

3 (b) REPORT.—Not later than 90 days after the com4 pletion of the pilot program under subsection (a), the Di5 rector of the Cybersecurity and Infrastructure Security 

6 Agency of the Department of Homeland Security shall re7 port on such pilot program to the Committee on Homeland 

8 Security of the House of Representatives and the Com9 mittee on Homeland Security and Governmental Affairs 

10 of the Senate. 

Æ 


kjohnson on DSK79L0C42PROD with BILLS