Critical Infrastructure Protection Act of 2016

To amend the Homeland Security Act of 2002 to secure critical infrastructure against electromagnetic threats, and for other purposes. 1. Short title This Act may be cited as the Critical Infrastructure Protection Act of 2015 CIPA 2. EMP planning, research and development, and protection and preparedness (a) In general The Homeland Security Act of 2002 ( 6 U.S.C. 101 et seq. (1) in section 2 ( 6 U.S.C. 101 (A) by redesignating paragraphs (7) through (18) as paragraphs (8) through (19), respectively; and (B) by inserting after paragraph (6) the following: (7) EM threat The term EM threat (A) a nuclear device or nonnuclear device, including such a pulse caused by an act of terrorism; or (B) a geomagnetic disturbance caused by solar storms or other naturally occurring phenomena. ; (2) in section 201(d) ( 6 U.S.C. 121(d) (26) (A) Prepare and submit to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Homeland Security of the House of Representatives— (i) a recommended strategy to protect and prepare the critical infrastructure of the American homeland against EM threats, including from acts of terrorism; and (ii) not less frequently than every 2 years, updates of the recommended strategy. (B) The recommended strategy under subparagraph (A) shall— (i) be based on findings of the research and development conducted under section 318; (ii) be developed in consultation with the relevant Federal sector-specific agencies (as defined under Homeland Security Presidential Directive 7) for critical infrastructures; (iii) be developed in consultation with the relevant sector coordinating councils for critical infrastructures; and (iv) be submitted in unclassified form, but may include a classified annex. (C) The Secretary may, if appropriate, incorporate the recommended strategy into a broader recommendation developed by the Department to help protect and prepare critical infrastructure from terrorism and other threats if, as incorporated, the recommended strategy complies with subparagraph (B). ; (3) in title III ( 6 U.S.C. 181 et seq. 318. EM threat research and development (a) In general In furtherance of domestic preparedness and response, the Secretary, acting through the Under Secretary for Science and Technology, and in consultation with other relevant executive agencies and relevant owners and operators of critical infrastructure, shall, to the extent practicable, conduct research and development to mitigate the consequences of EM threats. (b) Scope The scope of the research and development under subsection (a) shall include the following: (1) An objective scientific analysis of the risks to critical infrastructures from a range of EM threats. (2) Determination of the critical national security assets and vital civic utilities and infrastructures that are at risk from EM threats. (3) An evaluation of emergency planning and response technologies that would address the findings and recommendations of experts, including those of the Commission to Assess the Threat to the United States from Electromagnetic Pulse Attack, which shall include a review of the feasibility of— (A) rapidly isolating one or more portions of the electrical grid from the main electrical grid; and (B) training utility and transmission operators to deactivate transmission lines within seconds of an event constituting an EM threat. (4) An analysis of technology options that are available to improve the resiliency of critical infrastructure to EM threats, which shall include an analysis of neutral current blocking devices that may protect high-voltage transmission lines. (5) The restoration and recovery capabilities of critical infrastructure under differing levels of damage and disruption from various EM threats. (6) An analysis of the feasibility of a real-time alert system to inform electric grid operators and other stakeholders within milliseconds of a high-altitude nuclear explosion. ; and (4) in title V ( 6 U.S.C. 311 et seq. 526. National planning frameworks and education The Secretary, acting through the Under Secretary for the National Protection and Programs Directorate, shall, to the extent practicable— (1) include EM threats in national planning frameworks; and (2) conduct outreach to educate owners and operators of critical infrastructure, emergency planners, and emergency response providers at all levels of government regarding EM threats. . (b) Technical and conforming amendments (1) The table of contents in section 1(b) of the Homeland Security Act of 2002 is amended— (A) by inserting after the item relating to section 317 the following: Sec. 318. EMP research and development. ; and (B) by inserting after the item relating to section 525 the following: Sec. 526. National planning frameworks and education. . (2) Section 501(13) of the Homeland Security Act of 2002 ( 6 U.S.C. 311(13) section 101(11)(B) section 101(12)(B) (3) Section 712(a) of title 14, United States Code, is amended by striking section 2(16) of the Homeland Security Act of 2002 ( 6 U.S.C. 101(16) section 2 of the Homeland Security Act of 2002 ( 6 U.S.C. 101 (c) Deadline for initial recommended strategy Not later than 1 year after the date of enactment of this Act, the Secretary of Homeland Security shall submit the recommended strategy required under paragraph (26) of section 201(d) of the Homeland Security Act of 2002 ( 6 U.S.C. 121(d) (d) Report Not later than 180 days after the date of enactment of this Act, the Secretary of Homeland Security shall submit to Congress a report describing the progress made in, and an estimated date by which the Department of Homeland Security will have completed— (1) including EM threats (as defined in section 2 of the Homeland Security Act of 2002, as amended by this Act) in national planning frameworks; (2) research and development described in section 318 of the Homeland Security Act of 2002, as added by this Act; (3) development of the recommended strategy required under paragraph (26) of section 201(d) of the Homeland Security Act of 2002 ( 6 U.S.C. 121(d) (4) beginning to conduct outreach to educate emergency planners and emergency response providers at all levels of government regarding EM threat events. 3. No regulatory authority Nothing in this Act, including the amendments made by this Act, shall be construed to grant any regulatory authority. 4. No new authorization of appropriations This Act, including the amendments made by this Act, may be carried out only by using funds appropriated under the authority of other laws. 1. Short title This Act may be cited as the Critical Infrastructure Protection Act of 2016 CIPA 2. EMP and GMD planning, research and development, and protection and preparedness (a) In general The Homeland Security Act of 2002 ( 6 U.S.C. 101 et seq. (1) in section 2 ( 6 U.S.C. 101 (A) by redesignating paragraphs (9) through (18) as paragraphs (11) through (20), respectively; (B) by redesignating paragraphs (7) and (8) as paragraphs (8) and (9), respectively; (C) by inserting after paragraph (6) the following: (7) The term EMP ; and (D) by inserting after paragraph (9), as so redesignated, the following: (10) The term GMD ; (2) in section 201(d) ( 6 U.S.C. 121(d) (26) (A) To conduct an intelligence-based review and comparison of the risk and consequence of threats and hazards, including GMD and EMP, facing critical infrastructures, and prepare and submit to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Homeland Security of the House of Representatives— (i) a recommended strategy to protect and prepare the critical infrastructure of the American homeland against threats of EMP and GMD, including from acts of terrorism; and (ii) not less frequently than every 2 years, updates of the recommended strategy. (B) The recommended strategy under subparagraph (A) shall— (i) be based on findings of the research and development conducted under section 319; (ii) be developed in consultation with the relevant Federal sector-specific agencies (as defined under Presidential Policy Directive–21) for critical infrastructures; (iii) be developed in consultation with the relevant sector coordinating councils for critical infrastructures; (iv) be informed, to the extent practicable, by the findings of the intelligence-based review and comparison of the risk and consequence of threats and hazards, including GMD and EMP, facing critical infrastructures conducted under subparagraph (A); and (v) be submitted in unclassified form, but may include a classified annex. (C) The Secretary may, if appropriate, incorporate the recommended strategy into a broader recommendation developed by the Department to help protect and prepare critical infrastructure from terrorism, cyber attacks, and other threats and hazards if, as incorporated, the recommended strategy complies with subparagraph (B). ; (3) in title III ( 6 U.S.C. 181 et seq. 319. GMD and EMP mitigation research and development (a) In general In furtherance of domestic preparedness and response, the Secretary, acting through the Under Secretary for Science and Technology, and in consultation with other relevant executive agencies and relevant owners and operators of critical infrastructure, shall, to the extent practicable, conduct research and development to mitigate the consequences of threats of EMP and GMD. (b) Scope The scope of the research and development under subsection (a) shall include the following: (1) An objective scientific analysis— (A) evaluating the risks to critical infrastructures from a range of threats of EMP and GMD; and (B) which shall— (i) be conducted in conjunction with the Office of Intelligence and Analysis; and (ii) include a review and comparison of the range of threats and hazards facing critical infrastructure of the electric grid. (2) Determination of the critical utilities and national security assets and infrastructures that are at risk from threats of EMP and GMD. (3) An evaluation of emergency planning and response technologies that would address the findings and recommendations of experts, including those of the Commission to Assess the Threat to the United States from Electromagnetic Pulse Attack, which shall include a review of the feasibility of— (A) rapidly isolating 1 or more portions of the electrical grid from the main electrical grid; and (B) training utility and transmission operators to deactivate transmission lines within seconds of an event constituting a threat of EMP or GMD. (4) An analysis of technology options that are available to improve the resiliency of critical infrastructure to threats of EMP and GMD, which shall include an analysis of neutral current blocking devices that may protect high-voltage transmission lines. (5) The restoration and recovery capabilities of critical infrastructure under differing levels of damage and disruption from various threats of EMP and GMD, as informed by the objective scientific analysis conducted under paragraph (1). (6) An analysis of the feasibility of a real-time alert system to inform electric grid operators and other stakeholders within milliseconds of a high-altitude nuclear explosion. ; and (4) in title V ( 6 U.S.C. 311 et seq. 527. National planning and education (a) In general The Secretary shall, to the extent practicable— (1) develop an incident annex or similar response and planning strategy that guides the response to a major GMD or EMP event; and (2) conduct outreach to educate owners and operators of critical infrastructure, emergency planners, and emergency response providers at all levels of government regarding threats of EMP and GMD. (b) Existing annexes and plans The incident annex or response and planning strategy developed under subsection (a)(1) may be incorporated into existing incident annexes or response plans. . (b) Technical and conforming amendments (1) The table of contents in section 1(b) of the Homeland Security Act of 2002 is amended— (A) by inserting after the item relating to section 317 the following: Sec. 319. GMD and EMP mitigation research and development. ; and (B) by inserting after the item relating to section 525 the following: Sec. 526. Integrated Public Alert and Warning System modernization. Sec. 527. National planning and education. . (2) Section 501(13) of the Homeland Security Act of 2002 ( 6 U.S.C. 311(13) section 2(11)(B) section 2(13)(B) (3) Section 712(a) of title 14, United States Code, is amended by striking section 2(16) of the Homeland Security Act of 2002 ( 6 U.S.C. 101(16) section 2 of the Homeland Security Act of 2002 ( 6 U.S.C. 101 (c) Deadline for initial recommended strategy Not later than 1 year after the date of enactment of this Act, the Secretary of Homeland Security shall submit the recommended strategy required under paragraph (26) of section 201(d) of the Homeland Security Act of 2002 ( 6 U.S.C. 121(d) (d) Report Not later than 180 days after the date of enactment of this Act, the Secretary of Homeland Security shall submit to Congress a report describing the progress made in, and an estimated date by which the Department of Homeland Security will have completed— (1) including threats of EMP and GMD (as those terms are defined in section 2 of the Homeland Security Act of 2002, as amended by this Act) in national planning, as described in section 527 of the Homeland Security Act of 2002, as added by this Act; (2) research and development described in section 319 of the Homeland Security Act of 2002, as added by this Act; (3) development of the recommended strategy required under paragraph (26) of section 201(d) of the Homeland Security Act of 2002 ( 6 U.S.C. 121(d) (4) beginning to conduct outreach to educate emergency planners and emergency response providers at all levels of government regarding threats of EMP and GMD events. 3. No regulatory authority Nothing in this Act, including the amendments made by this Act, shall be construed to grant any regulatory authority. 4. No new authorization of appropriations This Act, including the amendments made by this Act, may be carried out only by using funds appropriated under the authority of other laws. May 9, 2016 Reported with an amendment

Summary: Critical Infrastructure Protection Act of 2016 or the CIPA (Sec. 2) This bill amends the Homeland Security Act of 2002 to add as responsibilities of the Secretary of Homeland Security (DHS) relating to intelligence and analysis and infrastructure protection: (1) conducting an intelligence-based review and comparison of the risk and consequences to critical infrastructures of threats and hazards, including a geomagnetic disturbance (GMD) caused by a solar storm or another naturally occurring phenomenon and an electromagnetic pulse (EMP) caused by a nuclear device or non-nuclear device, including such a pulse caused by an act of terrorism; and (2) submitting and biennially updating a recommended strategy to protect and prepare the critical infrastructure of the American homeland against such threats. The strategy: (1) shall be developed in consultation with the relevant federal sector-specific agencies and coordinating councils for critical infrastructures, and (2) may be incorporated into a broader DHS recommendation to help protect and prepare critical infrastructure from terrorism, cyber attacks, and other threats and hazards. The Under Secretary for Science and Technology shall conduct research and development to mitigate the consequences of EMP and GMD threats, including: an objective scientific analysis of the risks to critical infrastructures from a range of such threats; determination of the critical utilities and national security assets and infrastructures that are at risk from such threats; an evaluation of emergency planning and response technologies that would address the findings and recommendations of experts, including those of the Commission to Assess the Threat to the United States from Electromagnetic Pulse Attack; an analysis of available technology options to improve the resiliency of critical infrastructure to such threats; research regarding the restoration and recovery capabilities of critical infrastructure under differing levels of damage and disruption from such threats; and an analysis of the feasibility of a real-time alert system to inform electric grid operators and other stakeholders within milliseconds of a high-altitude nuclear explosion. The bill requires the Secretary to: (1) develop an incident annex or similar response and planning strategy that guides the response to a major GMD or EMP event; and (2) conduct outreach to educate owners and operators of critical infrastructure, emergency planners, and emergency response providers at all levels of government regarding EMP and GMD threats. The Secretary shall submit a report to Congress within 180 days on the progress made in, and an estimated completion date for: (1) including threats of EMP and GMD in national planning; (2) conducting the research and development, and developing the strategy, required under this bill; and (3) beginning to conduct outreach to educate emergency planners and emergency response providers at all levels of government regarding EMP and GMD threats.