I 
116TH CONGRESS 
2D SESSION 
H. R. 5667 
To enhance stakeholder outreach to and operational engagement with owners 
and operators of critical infrastructure and other relevant stakeholders 
by the Cybersecurity and Infrastructure Security Agency to bolster secu-
rity against acts of terrorism and other homeland security threats, includ-
ing by maintaining a clearinghouse of security guidance, best practices, 
and other voluntary content developed by the Agency or aggregated 
from trusted sources, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
JANUARY 24, 2020 
Ms. UNDERWOOD (for herself and Mr. KATKO) introduced the following bill; 
which was referred to the Committee on Homeland Security, and in addi-
tion to the Committee on Energy and Commerce, for a period to be sub-
sequently determined by the Speaker, in each case for consideration of 
such provisions as fall within the jurisdiction of the committee concerned 
A BILL 
To enhance stakeholder outreach to and operational engage-
ment with owners and operators of critical infrastructure 
and other relevant stakeholders by the Cybersecurity and 
Infrastructure Security Agency to bolster security against 
acts of terrorism and other homeland security threats, 
including by maintaining a clearinghouse of security 
guidance, best practices, and other voluntary content de-
veloped by the Agency or aggregated from trusted 
sources, and for other purposes. 
VerDate Sep 11 2014 
01:35 Jan 25, 2020
Jkt 099200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6652
E:\BILLS\H5667.IH
H5667
kjohnson on DSK79L0C42PROD with BILLS
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Safe Communities 
Act’’. 
SEC. 2. RESPONSIBILITIES OF CISA DIRECTOR RELATING 
TO SECURITY RESOURCES CLEARINGHOUSE. 
Subsection (c) of section 2202 of the Homeland Secu-
rity Act of 2002 (6 U.S.C. 652) is amended— 
(1) by redesignating paragraphs (6) through 
(11) as paragraphs (7) through (12), respectively; 
and 
(2) by inserting after paragraph (5) the fol-
lowing new paragraph: 
‘‘(6) maintain a clearinghouse for owners and 
operators of critical infrastructure and other rel-
evant stakeholders to access security guidance, best 
practices, and other voluntary content developed by 
the Agency in a manner consistent with the require-
ments of section 508 of the Rehabilitation Act of 
1973 (29 U.S.C. 794d) and the Plain Writing Act 
of 2010 (5 U.S.C. note) or aggregated from trusted 
sources;’’. 
VerDate Sep 11 2014 
01:35 Jan 25, 2020
Jkt 099200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H5667.IH
H5667
kjohnson on DSK79L0C42PROD with BILLS
SEC. 3. STAKEHOLDER OUTREACH AND OPERATIONAL EN-
GAGEMENT STRATEGY. 
(a) STRATEGY.—Not later than 180 days after the 
date of the enactment of this Act, the Director of the Cy-
bersecurity and Infrastructure Security Agency of the De-
partment of Homeland Security shall issue a strategy to 
improve stakeholder outreach and operational engagement 
that includes the Agency’s strategic and operational goals 
and priorities for carrying out the stakeholder engagement 
activities described in paragraphs (6) and (11) of section 
2202(c) of the Homeland Security Act of 2002 (6 U.S.C. 
652(c)), as added and redesignated, respectively, by sec-
tion 2 of this Act. 
(b) CONTENTS.—The stakeholder outreach and oper-
ational engagement strategy issued under subsection (a) 
shall include the following: 
(1) A catalogue of the stakeholder engagement 
activities and services delivered by protective security 
advisors and cybersecurity advisors of the Cyberse-
curity and Infrastructure Security Agency of the De-
partment of Homeland Security, including the loca-
tions of the stakeholder engagement and services de-
livered and the critical infrastructure sectors (as 
such term is defined in section 2001(3) of the 
Homeland Security Act of 2002 (6 U.S.C. 601(3)) 
involved. 
VerDate Sep 11 2014 
01:35 Jan 25, 2020
Jkt 099200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H5667.IH
H5667
kjohnson on DSK79L0C42PROD with BILLS
(2) An assessment of the capacity of programs 
of the Agency to deploy protective security advisors 
and cybersecurity advisors, including the adequacy 
of such advisors to meet service requests and the 
ability of such advisors to engage with and deliver 
services to stakeholders in urban, suburban, and 
rural areas. 
(3) Long-term objectives of the protective secu-
rity advisor and cybersecurity advisor programs, in-
cluding cross-training of the protective security advi-
sor and cybersecurity advisor workforce to optimize 
the capabilities of such programs and capacity goals. 
(4) A description of programs, policies, and ac-
tivities used to carry out such stakeholder engage-
ment activities and services under paragraph (1). 
(5) Resources and personnel necessary to effec-
tively support critical infrastructure owners and op-
erators and other entities, as appropriate, based on 
current and projected demand for Agency services. 
(6) Guidance on how outreach to critical infra-
structure owners and operators in a region should be 
prioritized. 
(7) Plans to ensure that stakeholder engage-
ment field personnel of the Agency have a clear un-
derstanding of expectations for engagement within 
VerDate Sep 11 2014 
01:35 Jan 25, 2020
Jkt 099200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H5667.IH
H5667
kjohnson on DSK79L0C42PROD with BILLS
each critical infrastructure sector and subsector, 
whether during steady state or surge capacity. 
(8) Metrics for measuring the effectiveness of 
stakeholder engagement activities and services under 
paragraph (1), including mechanisms to track re-
gional engagement of field personnel of the Agency 
with critical infrastructure owners and operators, 
and how frequently such engagement takes place. 
(9) Plans for awareness campaigns to famil-
iarize owners and operators of critical infrastructure 
with security resources and support offered by the 
Cybersecurity and Infrastructure Security Agency, 
including the clearinghouse maintained pursuant to 
paragraph (6) of section 2202(c) of the Homeland 
Security Act of 2002 (6 U.S.C. 652(c)), as added by 
section 2. 
(c) STAKEHOLDER INPUT.—In issuing the stake-
holder outreach and operational engagement strategy re-
quired under subsection (a), the Director of the Cyberse-
curity and Infrastructure Security Agency of the Depart-
ment of Homeland Security shall, to the extent prac-
ticable, solicit input from stakeholders representing the 
following: 
(1) Each of the critical infrastructure sectors. 
VerDate Sep 11 2014 
20:20 Jan 27, 2020
Jkt 099200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H5667.IH
H5667
kjohnson on DSK79L0C42PROD with BILLS
(2) Critical infrastructure owners and operators 
located in each region in which the Agency main-
tains a field office. 
(d) IMPLEMENTATION PLAN.—Not later than 90 
days after issuing the stakeholder outreach and oper-
ational engagement strategy required under subsection 
(a), the Director of the Cybersecurity and Infrastructure 
Security Agency of the Department of Homeland Security 
shall issue an implementation plan for the strategy that 
includes the following: 
(1) Strategic objectives and corresponding tasks 
for protective security advisor and cybersecurity ad-
visor workforce development, training, and retention 
plans. 
(2) Projected timelines, benchmarks, and re-
source requirements for such tasks. 
(3) Metrics to evaluate the performance of such 
tasks. 
(e) CONGRESSIONAL OVERSIGHT.—Upon issuance of 
the implementation plan required under subsection (d), 
the Director of the Cybersecurity and Infrastructure Secu-
rity Agency of the Department of Homeland Security, 
shall submit to the Committee on Homeland Security of 
the House of Representatives and the Committee on 
Homeland Security and Governmental Affairs of the Sen-
VerDate Sep 11 2014 
01:35 Jan 25, 2020
Jkt 099200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H5667.IH
H5667
kjohnson on DSK79L0C42PROD with BILLS
ate the stakeholder outreach and operational engagement 
strategy required under subsection (a) and the implemen-
tation plan required under subsection (b), together with 
any other associated legislative or budgetary proposals re-
lating thereto. 
SEC. 4. INFORMATION PROVIDED BY PROTECTIVE SECU-
RITY ADVISORS. 
The Director of the Cybersecurity and Infrastructure 
Security Agency of the Department of Homeland Security 
shall ensure, to the greatest extent practicable, protective 
security advisors of the Agency are disseminating home-
land security information on voluntary programs and serv-
ices of the Department of Homeland Security, including 
regarding the Nonprofit Security Grant Program, to bol-
ster security and terrorism resilience. 
SEC. 5. PROTECTIVE SECURITY ADVISOR FORCE MULTI-
PLIER PILOT PROGRAM. 
(a) IN GENERAL.—Not later than one year after the 
date of the enactment of this Act, the Director of the Cy-
bersecurity and Infrastructure Security Agency of the De-
partment of Homeland Security shall establish a one-year 
pilot program for State, local, Tribal, and territorial law 
enforcement agencies and appropriate government officials 
to be trained by protective security advisors of the Agency 
VerDate Sep 11 2014 
01:35 Jan 25, 2020
Jkt 099200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H5667.IH
H5667
kjohnson on DSK79L0C42PROD with BILLS
regarding carrying out security vulnerability or terrorism 
risk assessments of facilities. 
(b) REPORT.—Not later than 90 days after the com-
pletion of the pilot program under subsection (a), the Di-
rector of the Cybersecurity and Infrastructure Security 
Agency of the Department of Homeland Security shall re-
port on such pilot program to the Committee on Homeland 
Security of the House of Representatives and the Com-
mittee on Homeland Security and Governmental Affairs 
of the Senate. 
Æ 
VerDate Sep 11 2014 
01:35 Jan 25, 2020
Jkt 099200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6301
E:\BILLS\H5667.IH
H5667
kjohnson on DSK79L0C42PROD with BILLS