IB 

Union Calendar No. 603 

115TH CONGRESS 

2D SESSION H. R. 5733 

[Report No. 115–777] 

To amend the Homeland Security Act of 2002 to provide for the responsibility 

of the National Cybersecurity and Communications Integration Center 

to maintain capabilities to identify threats to industrial control systems, 

and for other purposes. 

IN THE HOUSE OF REPRESENTATIVES 

MAY 9, 2018 

Mr. BACON (for himself, Mr. MCCAUL, and Mr. RATCLIFFE) introduced the 

following bill; which was referred to the Committee on Homeland Security 

JUNE 22, 2018 

Reported with an amendment, committed to the Committee of the Whole 

House on the State of the Union, and ordered to be printed 

[Strike out all after the enacting clause and insert the part printed in italic] 

[For text of introduced bill, see copy of bill as introduced on May 9, 2018] 


amozie on DSK3GDR082PROD with BILLS
2 

•HR 5733 RH

A BILL 

To amend the Homeland Security Act of 2002 to provide 

for the responsibility of the National Cybersecurity and 

Communications Integration Center to maintain capabilities to identify threats to industrial control systems, and 

for other purposes. 


amozie on DSK3GDR082PROD with BILLS
3 

•HR 5733 RH

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘DHS Industrial Control 

5 Systems Capabilities Enhancement Act of 2018’’. 

6 SEC. 2. CAPABILITIES OF NATIONAL CYBERSECURITY AND 

7 COMMUNICATIONS INTEGRATION CENTER TO 

8 IDENTIFY THREATS TO INDUSTRIAL CON9 TROL SYSTEMS. 

10 (a) IN GENERAL.—Section 227 of the Homeland Secu11 rity Act of 2002 (6 U.S.C. 148) is amended— 

12 (1) in subsection (e)(1)— 

13 (A) in subparagraph (G), by striking ‘‘and’’ 

14 after the semicolon; 

15 (B) in subparagraph (H), by inserting 

16 ‘‘and’’ after the semicolon; and 

17 (C) by adding at the end the following new 

18 subparagraph: 

19 ‘‘(I) activities of the Center address the se20 curity of both information technology and oper21 ational technology, including industrial control 

22 systems;’’; 

23 (2) by redesignating subsections (f) through (m) 

24 as subsections (g) through (n), respectively; and 


amozie on DSK3GDR082PROD with BILLS
4 

•HR 5733 RH

1 (3) by inserting after subsection (e) the following 

2 new subsection: 

3 ‘‘(f) INDUSTRIAL CONTROL SYSTEMS.—The Center 

4 shall maintain capabilities to identify and address threats 

5 and vulnerabilities to products and technologies intended 

6 for use in the automated control of critical infrastructure 

7 processes. In carrying out this subsection, the Center shall— 

8 ‘‘(1) lead, in coordination with relevant sector 

9 specific agencies, Federal Government efforts to iden10 tify and mitigate cybersecurity threats to industrial 

11 control systems, including supervisory control and 

12 data acquisition systems; 

13 ‘‘(2) maintain cross-sector incident response ca14 pabilities to respond to industrial control system cy15 bersecurity incidents; 

16 ‘‘(3) provide cybersecurity technical assistance to 

17 industry end-users, product manufacturers, and other 

18 industrial control system stakeholders to identify and 

19 mitigate vulnerabilities; 

20 ‘‘(4) collect, coordinate, and provide vulner21 ability information to the industrial control systems 

22 community by, as appropriate, working closely with 

23 security researchers, industry end-users, product man24 ufacturers, and other industrial control systems stake25 holders; and 


amozie on DSK3GDR082PROD with BILLS
5 

•HR 5733 RH

1 ‘‘(5) conduct such other efforts and assistance as 

2 the Secretary determines appropriate.’’. 

3 (b) REPORT TO CONGRESS.—Not later than 180 days 

4 after the date of the enactment of this Act, and every 6 

5 months thereafter during the subsequent four-year period, 

6 the National Cybersecurity and Communications Integra7 tion Center shall provide to the Committee on Homeland 

8 Security of the House of Representatives and the Committee 

9 on Homeland Security and Governmental Affairs of the 

10 Senate a briefing on the industrial control systems capabili11 ties of the Center under subsection (f) of section 227 of the 

12 Homeland Security Act of 2002 (6 U.S.C. 148), as added 

13 by subsection (a). 


amozie on DSK3GDR082PROD with BILLS
Union Calendar No. 603 

115TH CONGRESS 

2D SESSION H. R. 5733 

[Report No. 115–777] 

A BILL 

To amend the Homeland Security Act of 2002 to 

poses. to industrial control systems, and for other purCenter to maintain capabilities to identify threats bersecurity and Communications Integration provide for the responsibility of the National CyJUNE 22, 2018 

Reported with an amendment, committed to the Comand ordered to be printed mittee of the Whole House on the State of the Union, 


amozie on DSK3GDR082PROD with BILLS