II 

118TH CONGRESS 

2D SESSION S. 5471 

To amend title 46, United States Code, to require applicants for grants 

that propose to use digital infrastructure or a software component to 

certify the applicant has an approved security plan that addresses the 

cybersecurity risks of such digital infrastructure or software component, 

and for other purposes. 

IN THE SENATE OF THE UNITED STATES 

DECEMBER 10, 2024 

Mr. CORNYN (for himself and Mr. PETERS) introduced the following bill; 

which was read twice and referred to the Committee on Commerce, 

Science, and Transportation 

A BILL 

To amend title 46, United States Code, to require applicants 

for grants that propose to use digital infrastructure or 

a software component to certify the applicant has an 

approved security plan that addresses the cybersecurity 

risks of such digital infrastructure or software component, and for other purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘Protecting Investments 

5 in Our Ports Act’’. 


ssavage on LAPJG3WLY3PROD with BILLS
2 

•S 5471 IS

1 SEC. 2. PORT INFRASTRUCTURE DEVELOPMENT PROGRAM 

2 APPLICATION PROCESS. 

3 Section 54301(a)(5)(A) of title 46, United States 

4 Code, is amended— 

5 (1) by striking ‘‘To be eligible’’ and inserting 

6 the following: 

7 ‘‘(i) IN GENERAL.—To be eligible’’; 

8 and 

9 (2) by adding at the end the following: 

10 ‘‘(ii) ENSURING CYBERSECURITY.—If 

11 a covered applicant for a grant under this 

12 subsection is applying to use the grant to 

13 acquire digital infrastructure or a software 

14 component, such applicant shall— 

15 ‘‘(I) certify the facility for which 

16 a covered applicant is applying for a 

17 grant, has an approved facility secu18 rity plan pursuant to section 70103(c) 

19 of this title that addresses the cyber20 security risks of such digital infra21 structure or software component; or 

22 ‘‘(II) if the approved facility se23 curity plan of a facility for which a 

24 covered applicant is applying for a 

25 grant does not address such cyberse26 curity risks, provide a brief descripVerDate Sep 11 2014 22:43 Jan 09, 2025 Jkt 059200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\S5471.IS S5471

ssavage on LAPJG3WLY3PROD with BILLS
3 

•S 5471 IS

1 tion in the application of how such ap2 plicant will address the cybersecurity 

3 risks of such digital infrastructure or 

4 software component. 

5 ‘‘(iii) UPDATE OF FACILITY SECURITY

6 PLAN.—If the approved facility security 

7 plan required under section 70103(c) of 

8 this title of a facility for which a covered 

9 applicant is applying for a grant under this 

10 subsection does not address the cybersecu11 rity risks of digital infrastructure or a soft12 ware component to be acquired by such 

13 grant and such applicant provides a brief 

14 description to address such cybersecurity 

15 risks under clause (ii)(II), the covered ap16 plicant shall ensure that such security plan 

17 is updated to address such cybersecurity 

18 risks described in clause (ii)(II) in the next 

19 update required under paragraph (3)(G) of 

20 such section. 

21 ‘‘(iv) COVERED APPLICANT DE22 FINED.—In this paragraph, the term ‘cov23 ered applicant’ means an applicant under 


ssavage on LAPJG3WLY3PROD with BILLS
4 

•S 5471 IS

1 this subsection that is not eligible for a 

2 grant under subsection (b).’’. 

Æ 


ssavage on LAPJG3WLY3PROD with BILLS