Port Crane Security and Inspection Act of 2023

To require the inspection of certain foreign cranes before use at a United States port, and for other purposes. 1. Short title This Act may be cited as the Port Crane Security and Inspection Act of 2023 2. Foreign crane inspection transportation and port security and maritime security enhancement (a) In general With respect to newly constructed foreign cranes procured for use at a United States port determined by the Secretary to be of high risk to port security or maritime transportation security and that connect to the internet, the Secretary of Homeland Security shall, acting through the Cybersecurity and Infrastructure Security Agency, before such crane is placed into service at such port, inspect such crane for potential security risks or threats. (b) Security risks or threats assessments Not later than 180 days after the date of enactment of this Act, the Secretary shall— (1) assess the threat posed by security risks or threats of any existing or newly constructed foreign cranes in use at a United States port; and (2) take any crane that poses a security risk or threat offline until such crane can be certified as no longer being a risk or threat. (c) Report to Congress Not later than 1 year after the date of enactment of this Act, the Secretary shall brief the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate regarding foreign crane security risks or threats posed by existing or newly constructed foreign cranes within United States ports. (d) Definitions In this section: (1) Covered foreign country The term covered foreign country (A) the intelligence community has identified as a foreign adversary in its most recent Annual Threat Assessment; or (B) the Secretary of Homeland Security, in coordination with the Director of National Intelligence, has identified as a foreign adversary that is not included in such Annual Threat Assessment. (2) Foreign crane The term foreign crane 3. Foreign crane prohibition (a) In general Notwithstanding any other provision of law, a foreign crane— (1) for which a contract was entered into on or after the date of enactment of this Act may not be operated at a port located in the United States; and (2) operated at a port located in the United States may not operate foreign software on any date after the date which is 5 years after the date of enactment of this Act. (b) Definitions In this section: (1) Covered foreign country The term covered foreign country (A) the intelligence community has identified as a foreign adversary in its most recent Annual Threat Assessment; or (B) the Secretary of Homeland Security, in coordination with the Director of National Intelligence, has identified as a foreign adversary that is not included in such Annual Threat Assessment. (2) Foreign crane The term foreign crane (3) Foreign software The term foreign software

Summary: Port Crane Security and Inspection Act of 2023 This bill limits the operation of foreign cranes at U.S. ports. Foreign cranes are those that have information technology and operational technology components that (1) were manufactured by companies that are subject to the control or influence of a country designated as a foreign adversary, and (2) connect to ports' cyber infrastructure.Foreign cranes that are contracted for on or after the date of the bill's enactment may not operate at a U.S. port. The bill also prohibits, effective five years after the date of the bill's enactment, foreign cranes at U.S. ports if the cranes use software or other technology manufactured by a company owned by a country designated as a foreign adversary. Additionally, the Cybersecurity and Infrastructure Security Agency (CISA) must (1) inspect foreign cranes for potential security risks or threats before they are placed into operation, (2) assess the threat posed by security risks or threats of existing or newly constructed foreign cranes, and (3) take any crane that poses a security risk or threat offline until the crane can be certified as no longer being a risk or threat.CISA must also report to Congress about security risks or threats posed by foreign cranes at U.S. ports.