I 
116TH CONGRESS 
1ST SESSION H. R. 5394 
To amend the Homeland Security Act of 2002 to require certain coordination 
between the Department of Homeland Security and Federal and non- 
Federal entities relating to cybersecurity risks and incidents, and for 
other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
DECEMBER 11, 2019 
Mr. TAYLOR (for himself, Mr. ROGERS of Alabama, Mr. HURD of Texas, Mr. 
PANETTA, Mr. GREEN of Texas, Mr. GUEST, and Ms. SLOTKIN) intro-
duced the following bill; which was referred to the Committee on Home-
land Security, and in addition to the Committee on Oversight and Re-
form, for a period to be subsequently determined by the Speaker, in each 
case for consideration of such provisions as fall within the jurisdiction of 
the committee concerned 
A BILL 
To amend the Homeland Security Act of 2002 to require 
certain coordination between the Department of Home-
land Security and Federal and non-Federal entities relat-
ing to cybersecurity risks and incidents, and for other 
purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Strengthening State 
and Local Cybersecurity Defenses Act’’. 
VerDate Sep 11 2014 
04:13 Dec 20, 2019
Jkt 099200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H5394.IH
H5394
kjohnson on DSK79L0C42 with BILLS
SEC. 2. COOPERATION RELATING TO CYBERSECURITY 
RISKS AND INCIDENTS. 
Subtitle A of title XXII of the Homeland Security 
Act of 2002 (6 U.S.C. 652 et seq.) is amended— 
(1) in section 2201 (6 U.S.C. 651)— 
(A) by redesignating paragraphs (4), (5), 
and (6) as paragraphs (5), (6), and (7), respec-
tively; and 
(B) by inserting after paragraph (3) the 
following new paragraph: 
‘‘(4) ENTITY.—The term ‘entity’ includes— 
‘‘(A) an association, corporation, whether 
for-profit or nonprofit, partnership, proprietor-
ship, organization, institution, establishment, or 
individual, whether domestic or foreign; 
‘‘(B) a government agency or other govern-
mental entity, whether domestic or foreign, in-
cluding State, local, Tribal, and territorial gov-
ernment entities; and 
‘‘(C) the general public.’’; 
(2) in section 2209 of the Homeland Security 
Act of 2002 (6 U.S.C. 659), by adding at the end 
the following new subsection: 
‘‘(n) COORDINATION.—The Director shall, to the ex-
tent practicable, and in coordination as appropriate with 
VerDate Sep 11 2014 
04:13 Dec 20, 2019
Jkt 099200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H5394.IH
H5394
kjohnson on DSK79L0C42 with BILLS
Federal and non-Federal entities, such as the Multi-State 
Information Sharing and Analysis Center— 
‘‘(1) conduct exercises with Federal and non- 
Federal entities; 
‘‘(2) provide operational and technical cyberse-
curity training related to cyber threat indicators, de-
fensive measures, cybersecurity risks, and incidents 
to Federal and non-Federal entities to address cy-
bersecurity risks or incidents, with or without reim-
bursement; 
‘‘(3) assist Federal and non-Federal entities, 
upon request, in sharing cyber threat indicators, de-
fensive measures, cybersecurity risks, and incidents 
from and to the Federal Government as well as 
among Federal and non-Federal entities, in order to 
increase situational awareness and help prevent inci-
dents; 
‘‘(4) provide Federal and non-Federal entities 
timely notifications containing specific incident and 
malware information that may affect such entities or 
individuals with respect to whom such entities have 
a relationship; 
‘‘(5) provide and periodically update via a web 
portal and other means tools, products, resources, 
policies, guidelines, controls, procedures, and other 
VerDate Sep 11 2014 
04:13 Dec 20, 2019
Jkt 099200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H5394.IH
H5394
kjohnson on DSK79L0C42 with BILLS
cybersecurity standards and best practices and pro-
cedures related to information security; 
‘‘(6) work with senior Federal and non-Federal 
officials, including State and local Chief Information 
Officers, senior election officials, and through na-
tional associations, to coordinate a nationwide effort 
to ensure effective implementation of tools, products, 
resources, policies, guidelines, controls, procedures, 
and other cybersecurity standards and best practices 
and procedures related to information security to se-
cure and ensure the resiliency of Federal and non- 
Federal information systems, including election sys-
tems; 
‘‘(7) provide, upon request, operational and 
technical assistance to Federal and non-Federal enti-
ties to implement tools, products, resources, policies, 
guidelines, controls, procedures, and other cyberse-
curity standards and best practices and procedures 
related to information security, including by, as ap-
propriate, deploying and sustaining cybersecurity 
technologies, such as an intrusion detection capa-
bility, to assist such Federal and non-Federal enti-
ties in detecting cybersecurity risks and incidents; 
‘‘(8) assist Federal and non-Federal entities in 
developing policies and procedures for coordinating 
VerDate Sep 11 2014 
04:13 Dec 20, 2019
Jkt 099200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H5394.IH
H5394
kjohnson on DSK79L0C42 with BILLS
vulnerability disclosures, to the extent practicable, 
consistent with international and national standards 
in the information technology industry; 
‘‘(9) ensure that Federal and non-Federal enti-
ties, as appropriate, are made aware of the tools, 
products, resources, policies, guidelines, controls, 
procedures, and other cybersecurity standards and 
best practices and procedures related to information 
security developed by the Department and other ap-
propriate Federal entities for ensuring the security 
and resiliency of civilian information systems; and 
‘‘(10) promote cybersecurity education and 
awareness through engagements with Federal and 
non-Federal entities.’’. 
Æ 
VerDate Sep 11 2014 
04:13 Dec 20, 2019
Jkt 099200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6301
E:\BILLS\H5394.IH
H5394
kjohnson on DSK79L0C42 with BILLS