Pipeline Security Act

To codify the Transportation Security Administration’s responsibility relating to securing pipelines against cybersecurity threats, acts of terrorism, and other nefarious acts that jeopardize the physical security or cybersecurity of pipelines, and for other purposes. 1. Short title This Act may be cited as the Pipeline Security Act 2. Pipeline security responsibilities Subsection (f) of section 114 of title 49, United States Code, is amended— (1) in paragraph (15), by striking and (2) by redesignating paragraph (16) as paragraph (17); and (3) by inserting after paragraph (15) the following new paragraph: (16) maintain responsibility, in coordination with the Director of the Cybersecurity and Infrastructure Security Agency, as appropriate, relating to securing pipeline transportation and pipeline facilities (as such terms are defined in section 60101 of this title) against cybersecurity threats (as such term is defined in section 102 of the Cybersecurity Information Sharing Act of 2015 ( Public Law 114–113 6 U.S.C. 1501 . 3. Pipeline security section Pipeline security division (a) In general Title XVI of the Homeland Security Act of 2002 ( 6 U.S.C. 561 et seq. D Pipeline Security 1631. Pipeline security section Pipeline security division (a) Establishment There is within the Administration a pipeline security section pipeline security division (b) Mission The mission of the section division Public Law 114–113 6 U.S.C. 1501 (c) Leadership; staffing The Administrator shall appoint as the head of the section division an individual in the executive service of the Administration section division (d) Responsibilities The section division section division (1) Developing, in consultation with relevant Federal, State, local, Tribal, and territorial entities and public and private sector stakeholders, guidelines for improving the security of pipeline transportation and pipeline facilities against cybersecurity threats, an act of terrorism, and other nefarious acts that jeopardize the physical security or cybersecurity of such transportation or facilities, consistent with the National Institute of Standards and Technology Framework for Improvement of Critical Infrastructure Cybersecurity and any update to such guidelines pursuant to section 2(c)(15) of the National Institute for Standards and Technology Act ( 15 U.S.C. 272(c)(15) (2) Updating such guidelines as necessary based on intelligence and risk assessments, but not less frequently than every three years , unless such guidelines are superseded by directives or regulations (3) Sharing of such guidelines and, as appropriate, intelligence and information regarding such security threats to pipeline transportation and pipeline facilities, as appropriate, with relevant Federal, State, local, Tribal, and territorial entities and public and private sector stakeholders. (4) Conducting voluntary security assessments based on such guidelines to provide recommendations , or mandatory security assessments if required by superseding directives or regulations, to provide recommendations or requirements (5) Carrying out a program through which the Administrator identifies and ranks the relative risk of pipelines and inspects pipeline facilities designated by owners and operators of such facilities as critical based on such guidelines or superseding directives or regulations (6) Preparing notice and comment regulations for publication, if determined necessary by the Administrator. (6) Supporting the development and implementation of a security directive or regulation when the Administrator issues such a directive or regulation. (e) Details In furtherance of the section’s division’s . (b) Updated guidelines Not later than one year after the date of the enactment of this Act, the pipeline security section pipeline security division , except to the extent such guidelines have been superseded by directives or regulations (c) Clerical amendments The table of contents in section 1(b) of the Homeland Security Act of 2002 is amended by— (1) striking the item relating to section 1617 and inserting the following new item: Sec. 1617. Diversified security technology industry marketplace. ; (2) by striking the item relating to section 1621 and inserting the following new item: Sec. 1621. Maintenance validation and oversight. ; (3) inserting after the item relating to section 1621 the following: Subtitle D—Pipeline Security Sec. 1631. Pipeline security section Pipeline security division . 4. Personnel strategy (a) In general Not later than 180 days after the date of the enactment of this Act, the Administrator of the Transportation Security Administration, in coordination with the Director of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security, shall develop a personnel strategy for enhancing operations within the pipeline security section pipeline security division (b) Contents The strategy required under subsection (a) shall take into consideration the most recently published versions of each of the following documents: (1) The Transportation Security Administration National Strategy for Transportation Security. (2) The Department of Homeland Security Cybersecurity Strategy. (3) The Transportation Security Administration Cybersecurity Roadmap. (4) The Department of Homeland Security Balanced Workforce Strategy. (5) The Department of Homeland Security Quadrennial Homeland Security Review. (c) Cybersecurity expertise The strategy shall include an assessment of the cybersecurity expertise determined necessary by the Administrator of the Transportation Security Administration and a plan for developing such expertise within the Administration. (c) (d) Resources The strategy shall include an assessment of resources determined necessary by the Administrator of the Transportation Security Administration to carry out such strategy. (d) (e) Submission to Congress Upon development of the strategy, the Administrator of the Transportation Security Administration shall provide to the Committee on Homeland Security of the House of Representatives and the Committee on Commerce, Science, and Transportation of the Senate a copy of such strategy. 5. Oversight (a) Report to Congress The Administrator of the Transportation Security Administration shall report to the Committee on Homeland Security of the House of Representatives and the Committee on Commerce, Science, and Transportation of the Senate not less than annually on activities of the pipeline security section pipeline security division directives, regulations, (b) GAO review Not later than two years after the date of the enactment of this Act, the Comptroller General of the United States shall conduct a review of the implementation of this Act and the amendments made by this Act. 6. Stakeholder engagement Not later than one year after the date of the enactment of this Act, the Administrator of the Transportation Security Administration shall convene not less than two industry days to engage with relevant pipeline transportation and pipeline facilities stakeholders on matters related to the security of pipeline transportation and pipeline facilities (as such terms are defined in section 60101 of title 49, United States Code). July 13, 2021 Reported with amendments, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed

Summary: Pipeline Security Act This bill revises the duties of the Transportation Security Administration (TSA) to include securing pipelines and pipeline facilities against cybersecurity threats, acts of terrorism, and other acts that jeopardize the physical security or cybersecurity of the pipelines or facilities. Specifically, the bill (1) establishes a pipeline security section within the TSA, (2) directs the TSA to develop a personnel strategy for enhancing operations within such section, and (3) requires the TSA to publish updated pipeline security guidelines. The TSA must also convene not less than two industry days to engage with relevant pipeline transportation and pipeline facilities stakeholders on matters related to the security of pipeline transportation and pipeline facilities.