IIB 
115TH CONGRESS 
2D SESSION 
H. R. 5733 
IN THE SENATE OF THE UNITED STATES 
JUNE 26, 2018 
Received; read twice and referred to the Committee on Homeland Security and 
Governmental Affairs 
AN ACT 
To amend the Homeland Security Act of 2002 to provide 
for the responsibility of the National Cybersecurity and 
Communications Integration Center to maintain capabili-
ties to identify threats to industrial control systems, and 
for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
VerDate Sep 11 2014 
00:18 Jun 27, 2018
Jkt 079200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H5733.RFS
H5733
pbinns on DSK79D2C42PROD with BILLS
HR 5733 RFS
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘DHS Industrial Con-
trol Systems Capabilities Enhancement Act of 2018’’. 
SEC. 2. CAPABILITIES OF NATIONAL CYBERSECURITY AND 
COMMUNICATIONS INTEGRATION CENTER TO 
IDENTIFY THREATS TO INDUSTRIAL CON-
TROL SYSTEMS. 
(a) IN GENERAL.—Section 227 of the Homeland Se-
curity Act of 2002 (6 U.S.C. 148) is amended— 
(1) in subsection (e)(1)— 
(A) in subparagraph (G), by striking 
‘‘and’’ after the semicolon; 
(B) in subparagraph (H), by inserting 
‘‘and’’ after the semicolon; and 
(C) by adding at the end the following new 
subparagraph: 
‘‘(I) activities of the Center address the se-
curity of both information technology and oper-
ational technology, including industrial control 
systems;’’; 
(2) by redesignating subsections (f) through 
(m) as subsections (g) through (n), respectively; and 
(3) by inserting after subsection (d) the fol-
lowing new subsection: 
‘‘(f) INDUSTRIAL CONTROL SYSTEMS.—The Center 
shall maintain capabilities to identify and address threats 
VerDate Sep 11 2014 
00:18 Jun 27, 2018
Jkt 079200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H5733.RFS
H5733
pbinns on DSK79D2C42PROD with BILLS
HR 5733 RFS
and vulnerabilities to products and technologies intended 
for use in the automated control of critical infrastructure 
processes. In carrying out this subsection, the Center 
shall— 
‘‘(1) lead, in coordination with relevant sector 
specific agencies, Federal Government efforts to 
identify and mitigate cybersecurity threats to indus-
trial control systems, including supervisory control 
and data acquisition systems; 
‘‘(2) maintain cross-sector incident response ca-
pabilities to respond to industrial control system cy-
bersecurity incidents; 
‘‘(3) provide cybersecurity technical assistance 
to industry end-users, product manufacturers, and 
other industrial control system stakeholders to iden-
tify and mitigate vulnerabilities; 
‘‘(4) collect, coordinate, and provide vulner-
ability information to the industrial control systems 
community by, as appropriate, working closely with 
security researchers, industry end-users, product 
manufacturers, and other industrial control systems 
stakeholders; and 
‘‘(5) conduct such other efforts and assistance 
as the Secretary determines appropriate.’’. 
VerDate Sep 11 2014 
00:18 Jun 27, 2018
Jkt 079200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H5733.RFS
H5733
pbinns on DSK79D2C42PROD with BILLS
HR 5733 RFS
(b) REPORT TO CONGRESS.—Not later than 180 days 
after the date of the enactment of this Act, and every 6 
months thereafter during the subsequent 4-year period, 
the National Cybersecurity and Communications Integra-
tion Center shall provide to the Committee on Homeland 
Security of the House of Representatives and the Com-
mittee on Homeland Security and Governmental Affairs 
of the Senate a briefing on the industrial control systems 
capabilities of the Center under subsection (f) of section 
227 of the Homeland Security Act of 2002 (6 U.S.C. 
148), as added by subsection (a). 
Passed the House of Representatives June 25, 2018. 
Attest: 
KAREN L. HAAS, 
Clerk. 
VerDate Sep 11 2014 
00:18 Jun 27, 2018
Jkt 079200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H5733.RFS
H5733
pbinns on DSK79D2C42PROD with BILLS