analysis on terrorism incidents, threats, and emerging 
risks. Such function shall include establishment by the 
Secretary of 2 national centers to accomplish the fol-
lowing: 
(1) Implement a capability to collate, assess, 
and integrate vulnerability and consequence informa-
tion with threat streams and hazard information 
to— 
(A) aid in prioritizing assets and managing 
risks to critical infrastructure; 
(B) determine the staffing and professional 
need for cyber security critical infrastructure 
protection; 
(C) determine the agency staffing needed 
and to support cyber security critical infrastruc-
ture protection and report the findings to Con-
gress; 
(D) research and report findings regarding 
the feasibility of exploring terrorist incident cor-
relations between critical infrastructure dam-
age, destruction, and diminished capacity, and 
what occurs during certain natural disasters; 
(E) anticipate interdependencies and cas-
cading impacts related to cyber telecommuni-
cations failures; 
VerDate Sep 11 2014 
04:39 Feb 16, 2017
Jkt 069200
PO 00000
Frm 00014
Fmt 6652
Sfmt 6201
E:\BILLS\H945.IH
H945
SSpencer on DSK4SPTVN1PROD with BILLS
(F) recommend security and resilience 
measures for critical infrastructure prior to, 
during, and after a terrorism event or incident; 
(G) support post-terrorism incident man-
agement and restoration efforts related to crit-
ical infrastructure; and 
(H) make recommendations on preventing 
the collapse or serious degrading of the tele-
communication capability in an area impacted 
by a terrorism event. 
(2) Support the Department of Homeland Secu-
rity’s ability to maintain and share, as a common 
Federal service, a near real-time situational aware-
ness capability for critical infrastructure that in-
cludes actionable information about imminent ter-
rorist threats, significant trends, and awareness of 
incidents that may affect critical infrastructure. 
SEC. 6. PROTECTION OF PRIVACY AND CIVIL LIBERTIES. 
(a) IN GENERAL.—The Secretary of Homeland Secu-
rity shall support greater terrorism cyber security infor-
mation sharing by civilian Federal agencies with the pri-
vate sector that protects constitutional privacy and civil 
liberties rights. The heads of Federal departments and 
agencies shall ensure that all existing privacy principles, 
policies, and procedures are implemented consistent with 
VerDate Sep 11 2014 
04:39 Feb 16, 2017
Jkt 069200
PO 00000
Frm 00015
Fmt 6652
Sfmt 6201
E:\BILLS\H945.IH
H945
SSpencer on DSK4SPTVN1PROD with BILLS
applicable law and policy and shall include senior agency 
officials for privacy in their efforts to govern and oversee 
terrorism program information sharing properly. 
(b) ENSURING INDEPENDENCE OF PRIVACY OFFI-
CER.— 
(1) IN GENERAL.—Section 222 of the Home-
land Security Act of 2002 (6 U.S.C. 142) is amend-
ed— 
(A) in subsection (a), by striking so much 
as precedes paragraph (1) and inserting the fol-
lowing: 
‘‘(a) IN GENERAL.—There shall be in the Depart-
ment a Privacy Officer who shall be appointed by the 
President, by and with the advice and consent of the Sen-
ate. The Privacy Officer shall report directly to the Sec-
retary, and shall have primary responsibility in the De-
partment for privacy policy, including—’’; 
(B) by striking ‘‘senior official appointed 
under subsection (a)’’ each place it appears and 
inserting ‘‘Privacy Officer’’; 
(C) in subsection (b)(1)(A), by striking 
‘‘senior official’’ and inserting ‘‘Privacy Offi-
cer’’; 
VerDate Sep 11 2014 
04:39 Feb 16, 2017
Jkt 069200
PO 00000
Frm 00016
Fmt 6652
Sfmt 6201
E:\BILLS\H945.IH
H945
SSpencer on DSK4SPTVN1PROD with BILLS
(D) in subsection (b)(1)(B), by striking 
‘‘senior official’s’’ and inserting ‘‘Privacy Offi-
cer’s’’; 
(E) in subsection (b)(1)(C), by striking 
‘‘senior official’’ and inserting ‘‘Privacy Offi-
cer’’; 
(F) in subsection (b)(1)(D), by striking 
‘‘senior official’’ and inserting ‘‘Privacy Offi-
cer’’; 
(G) in subsection (c)(2)(B), by striking 
‘‘senior official’’ each place it appears and in-
serting ‘‘Privacy Officer’’; 
(H) 
in 
the 
heading 
for 
subsection 
(c)(2)(B)(iii), by striking ‘‘BY
SENIOR
OFFI-
CIAL’’; 
(I) in subsection (d), by striking ‘‘the sen-
ior official appointed under subsection (a) or 
transfers that senior official to another position 
or location within the Department’’ and insert-
ing ‘‘individual appointed as Privacy Officer’’; 
(J) in the heading for subsection (e), by 
striking ‘‘BY SENIOR OFFICIAL’’; and 
(K) in subsection (e)— 
(i) by striking ‘‘senior official’’ and in-
serting ‘‘Privacy Officer’’; and 
VerDate Sep 11 2014 
04:39 Feb 16, 2017
Jkt 069200
PO 00000
Frm 00017
Fmt 6652
Sfmt 6201
E:\BILLS\H945.IH
H945
SSpencer on DSK4SPTVN1PROD with BILLS
(ii) by striking ‘‘senior official’s’’ each 
place it appears and inserting ‘‘Privacy Of-
ficer’’. 
(2) CONTINUED SERVICE.—The senior official 
serving as the Privacy Officer of the Department of 
Homeland Security immediately before the enact-
ment of this Act may continue to act as the Privacy 
Officer until a successor is appointed in accordance 
with the amendments made by this subsection. 
SEC. 7. INNOVATION AND RESEARCH AND DEVELOPMENT. 
The Secretary of Homeland Security may consult 
with other Federal departments and agencies to produce 
and submit to congressional oversight committees a report 
on how best to align federally funded research and devel-
opment activities that seek to strengthen the security and 
resilience of the Nation’s critical infrastructure, includ-
ing— 
(1) promoting research and development to en-
able the secure and resilient design and construction 
of critical infrastructure and more secure accom-
panying cyber technology; 
(2) enhancing modeling capabilities to deter-
mine potential impacts on critical infrastructure of 
an incident or threat scenario, and cascading effects 
on other sectors; 
VerDate Sep 11 2014 
04:39 Feb 16, 2017
Jkt 069200
PO 00000
Frm 00018
Fmt 6652
Sfmt 6201
E:\BILLS\H945.IH
H945
SSpencer on DSK4SPTVN1PROD with BILLS
(3) facilitating initiatives to incentivize cyber 
security investments and the adoption of critical in-
frastructure design features that strengthen all-haz-
ards security and resilience; and 
(4) prioritizing efforts to support the strategic 
guidance issued by the Secretary of Homeland Secu-
rity. 
SEC. 8. IMPLEMENTATION BY DEPARTMENT OF HOMELAND 
SECURITY. 
(a) CRITICAL INFRASTRUCTURE TERRORISM PRE-
VENTION SECURITY AND COMPUTER NETWORK RESIL-
IENCE FUNCTIONAL RELATIONSHIPS.— 
(1) IN GENERAL.—Within 120 days after the 
date of the enactment of this Act, the Secretary of 
Homeland Security shall conduct research and de-
velop a description of the functional relationships 
within the Department of Homeland Security and 
across the Federal Government related to critical in-
frastructure security and resilience. The description 
shall— 
(A) include the roles and functions of the 
2 national critical infrastructure centers and a 
discussion of the analysis and integration func-
tion; 
VerDate Sep 11 2014 
04:39 Feb 16, 2017
Jkt 069200
PO 00000
Frm 00019
Fmt 6652
Sfmt 6201
E:\BILLS\H945.IH
H945
SSpencer on DSK4SPTVN1PROD with BILLS
(B) serve as a roadmap for critical infra-
structure owners and operators and SLTTs to 
navigate the Federal Government’s functions 
and primary points of contact assigned to those 
functions for critical infrastructure security and 
resilience against both physical and cyber 
threats; and 
(C) include identification of every contact 
within the Federal Government for critical in-
frastructure protection security and resilience, 
by company and industry. 
(2) COORDINATION.—The Secretary shall pre-
pare a report on efforts to coordinate this effort with 
the SSAs and other relevant Federal departments 
and agencies. 
(3) PROVISION TO PRESIDENT.—The Secretary 
shall provide the description, supported by agency- 
conducted research, to the President through the As-
sistant to the President for Homeland Security and 
Counterterrorism, and to the relevant congressional 
homeland security oversight committees. 
(b) EVALUATION OF THE EXISTING PUBLIC-PRIVATE 
PARTNERSHIP MODEL.— 
(1) IN GENERAL.—Within 150 days after the 
date of the enactment of this Act, the Secretary of 
VerDate Sep 11 2014 
04:39 Feb 16, 2017
Jkt 069200
PO 00000
Frm 00020
Fmt 6652
Sfmt 6201
E:\BILLS\H945.IH
H945
SSpencer on DSK4SPTVN1PROD with BILLS
Homeland Security, in coordination with the SSAs, 
other relevant Federal departments and agencies, 
SLTTs, and critical infrastructure owners and oper-
ators, shall conduct an analysis of the existing pub-
lic-private partnership model, evaluate its effective-
ness, and recommend options for improving the ef-
fectiveness of the partnership in both the physical 
and cyber space. 
(2) 
CONTENTS.—The 
research 
and 
rec-
ommendations shall— 
(A) consider options to streamline or auto-
mate (or both) processes for collaboration and 
exchange of terrorism-related information and 
to minimize duplication of effort; 
(B) consider how the model for terrorism 
information exchange can be flexible and adapt-
able to meet the unique needs of individual crit-
ical infrastructure sectors while providing a fo-
cused, disciplined, and effective approach for 
the Federal Government to coordinate with the 
critical infrastructure owners and operators and 
with SLTTs governments; and 
(C) result in recommendations to enhance 
partnerships to be approved for implementation 
by the President. 
VerDate Sep 11 2014 
04:39 Feb 16, 2017
Jkt 069200
PO 00000
Frm 00021
Fmt 6652
Sfmt 6201
E:\BILLS\H945.IH
H945
SSpencer on DSK4SPTVN1PROD with BILLS
(c) IDENTIFICATION OF BASELINE DATA AND SYS-
TEMS REQUIREMENTS FOR THE FEDERAL GOVERNMENT 
TO ENABLE EFFICIENT INFORMATION EXCHANGE.— 
(1) IN GENERAL.—Within 18 months after the 
date of the enactment of this Act, the Secretary of 
Homeland Security, in coordination with the SSAs 
and other Federal departments and agencies, shall 
convene a team of researchers to identify baseline 
data and systems requirements— 
(A) to enable the efficient exchange of ter-
rorism information and intelligence relevant to 
strengthening the security and resilience of crit-
ical infrastructure; and 
(B) for sharing of data and interoperability 
of systems to enable the timely exchange of ter-
rorism or terrorist threat data and information 
to secure critical infrastructure and make it 
more resilient. 
(2) EXPERTS INCLUDED.—The experts shall in-
clude representatives from— 
(A) those entities that routinely possess in-
formation important to critical infrastructure 
security and resilience; 
VerDate Sep 11 2014 
04:39 Feb 16, 2017
Jkt 069200
PO 00000
Frm 00022
Fmt 6652
Sfmt 6201
E:\BILLS\H945.IH
H945
SSpencer on DSK4SPTVN1PROD with BILLS
(B) those entities that determine and man-
age information technology systems used to ex-
change information; and 
(C) those entities responsible for the secu-
rity of information being exchanged. 
(3) ANALYSIS.—Analysis by such team of ex-
perts shall include— 
(A) interoperability with critical infrastruc-
ture partners; 
(B) identification of key data and the in-
formation requirements of key Federal, SLTT, 
and private sector entities; 
(C) availability, accessibility, and formats 
of data; 
(D) the ability to exchange various classi-
fications of information; 
(E) the security of those systems to be 
used; and 
(F) appropriate protections for individual 
privacy and civil liberties. 
(4) PROVISION TO PRESIDENT.—The Secretary 
shall provide such analysis to the President through 
the Assistant to the President for Homeland Secu-
rity and Counterterrorism, and to congressional 
homeland security oversight committees. 
VerDate Sep 11 2014 
04:39 Feb 16, 2017
Jkt 069200
PO 00000
Frm 00023
Fmt 6652
Sfmt 6201
E:\BILLS\H945.IH
H945
SSpencer on DSK4SPTVN1PROD with BILLS