I 

115TH CONGRESS 

2D SESSION H. R. 5733 

To amend the Homeland Security Act of 2002 to provide for the responsibility 

of the National Cybersecurity and Communications Integration Center 

to maintain capabilities to identify threats to industrial control systems, 

and for other purposes. 

IN THE HOUSE OF REPRESENTATIVES 

MAY 9, 2018 

Mr. BACON (for himself, Mr. MCCAUL, and Mr. RATCLIFFE) introduced the 

following bill; which was referred to the Committee on Homeland Security 

A BILL 

To amend the Homeland Security Act of 2002 to provide 

for the responsibility of the National Cybersecurity and 

Communications Integration Center to maintain capabilities to identify threats to industrial control systems, and 

for other purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘DHS Industrial Con5 trol Systems Capabilities Enhancement Act of 2018’’. 


pbinns on DSK79D2C42PROD with BILLS
2 

•HR 5733 IH

1 SEC. 2. CAPABILITIES OF NATIONAL CYBERSECURITY AND 

2 COMMUNICATIONS INTEGRATION CENTER TO 

3 IDENTIFY THREATS TO INDUSTRIAL CON4 TROL SYSTEMS. 

5 (a) IN GENERAL.—Section 227 of the Homeland Se6 curity Act of 2002 (6 U.S.C. 148) is amended— 

7 (1) in subsection (e)(1)— 

8 (A) in subparagraph (G), by striking 

9 ‘‘and’’ after the semicolon; 

10 (B) in subparagraph (H), by inserting 

11 ‘‘and’’ after the semicolon; and 

12 (C) by adding at the end the following new 

13 subparagraph: 

14 ‘‘(I) activities of the Center address the se15 curity of both information technology and oper16 ational technology, including industrial control 

17 systems;’’; 

18 (2) by redesignating subsections (f) through 

19 (m) as subsections (g) through (n), respectively; and 

20 (3) by inserting after subsection (d) the fol21 lowing new subsection: 

22 ‘‘(f) INDUSTRIAL CONTROL SYSTEMS.—The Center 

23 shall maintain capabilities to identify and address threats 

24 and vulnerabilities to products and technologies intended 

25 for use in the automated control of critical infrastructure 


pbinns on DSK79D2C42PROD with BILLS
3 

•HR 5733 IH

1 processes. In carrying out this subsection, the Center 

2 shall— 

3 ‘‘(1) lead, in coordination with relevant sector 

4 specific agencies, Federal Government efforts to 

5 identify and mitigate cybersecurity threats to indus6 trial control systems, including supervisory control 

7 and data acquisition systems; 

8 ‘‘(2) maintain cross-sector incident response ca9 pabilities to respond to industrial control system cy10 bersecurity incidents; 

11 ‘‘(3) provide cybersecurity technical assistance 

12 to industry end-users, product manufacturers, and 

13 other industrial control system stakeholders to iden14 tify and mitigate vulnerabilities; and 

15 ‘‘(4) conduct such other efforts and assistance 

16 as the Secretary determines appropriate.’’. 

17 (b) REPORT TO CONGRESS.—Not later than 180 days 

18 after the date of the enactment of this Act, and every 6 

19 months thereafter during the subsequent four-year period, 

20 the National Cybersecurity and Communications Integra21 tion Center shall provide to the Committee on Homeland 

22 Security of the House of Representatives and the Com23 mittee on Homeland Security and Governmental Affairs 

24 of the Senate a briefing on the industrial control systems 

25 capabilities of the Center under subsection (f) of section 


pbinns on DSK79D2C42PROD with BILLS
4 

•HR 5733 IH

1 227 of the Homeland Security Act of 2002 (6 U.S.C. 

2 148), as added by subsection (a). 

Æ 


pbinns on DSK79D2C42PROD with BILLS