IB 
Union Calendar No. 60 
117TH CONGRESS 
1ST SESSION H. R. 3243 
[Report No. 117–85] 
To codify the Transportation Security Administration’s responsibility relating 
to securing pipelines against cybersecurity threats, acts of terrorism, 
and other nefarious acts that jeopardize the physical security or cyberse-
curity of pipelines, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
MAY 14, 2021 
Mr. CLEAVER (for himself, Mr. THOMPSON of Mississippi, Mr. KATKO, Mrs. 
WATSON COLEMAN, Ms. CLARKE of New York, Ms. JACKSON LEE, Mr. 
LANGEVIN, Mr. CORREA, Mr. GREEN of Texas, Mr. SWALWELL, Ms. 
TITUS, Ms. BARRAGA´N, Mrs. LURIA, Mr. TORRES of New York, and Mr. 
GIMENEZ) introduced the following bill; which was referred to the Com-
mittee on Homeland Security 
JULY 13, 2021 
Additional sponsors: Mr. VAN DREW and Mrs. AXNE 
JULY 13, 2021 
Reported with amendments, committed to the Committee of the Whole House 
on the State of the Union, and ordered to be printed 
VerDate Sep 11 2014 
20:39 Jul 13, 2021
Jkt 019200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6652
E:\BILLS\H3243.RH
H3243
pamtmann on DSKBC07HB2PROD with BILLS
A BILL 
To codify the Transportation Security Administration’s re-
sponsibility relating to securing pipelines against cyberse-
curity threats, acts of terrorism, and other nefarious 
acts that jeopardize the physical security or cybersecurity 
of pipelines, and for other purposes. 
VerDate Sep 11 2014 
20:39 Jul 13, 2021
Jkt 019200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6652
E:\BILLS\H3243.RH
H3243
pamtmann on DSKBC07HB2PROD with BILLS
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Pipeline Security Act’’. 
SEC. 2. PIPELINE SECURITY RESPONSIBILITIES. 
Subsection (f) of section 114 of title 49, United 
States Code, is amended— 
(1) in paragraph (15), by striking ‘‘and’’ after 
the semicolon at the end; 
(2) by redesignating paragraph (16) as para-
graph (17); and 
(3) by inserting after paragraph (15) the fol-
lowing new paragraph: 
‘‘(16) maintain responsibility, in coordination 
with the Director of the Cybersecurity and Infra-
structure Security Agency, as appropriate, relating 
to securing pipeline transportation and pipeline fa-
cilities (as such terms are defined in section 60101 
of this title) against cybersecurity threats (as such 
term is defined in section 102 of the Cybersecurity 
Information Sharing Act of 2015 (Public Law 114– 
113; 6 U.S.C. 1501)), an act of terrorism (as such 
term is defined in section 3077 of title 18), and 
other nefarious acts that jeopardize the physical se-
VerDate Sep 11 2014 
20:39 Jul 13, 2021
Jkt 019200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H3243.RH
H3243
pamtmann on DSKBC07HB2PROD with BILLS
curity or cybersecurity of such transportation or fa-
cilities; and’’. 
SEC. 3. PIPELINE SECURITY SECTION PIPELINE SECURITY 
DIVISION. 
(a) IN GENERAL.—Title XVI of the Homeland Secu-
rity Act of 2002 (6 U.S.C. 561 et seq.) is amended by 
adding at the end the following: 
‘‘Subtitle D—Pipeline Security 
‘‘SEC. 1631. PIPELINE SECURITY SECTION PIPELINE SECU-
RITY DIVISION. 
‘‘(a) ESTABLISHMENT.—There is within the Admin-
istration a pipeline security section pipeline security divi-
sion to carry out pipeline security programs in furtherance 
of section 114(f)(16) of title 49, United States Code. 
‘‘(b) MISSION.—The mission of the section division 
referred to in subsection (a) is to oversee, in coordination 
with the Cybersecurity and Infrastructure Security Agen-
cy of the Department, the security of pipeline transpor-
tation and pipeline facilities (as such terms are defined 
in section 60101 of title 49, United States Code) against 
cybersecurity threats (as such term is defined in section 
102 of the Cybersecurity Information Sharing Act of 2015 
(Public Law 114–113; 6 U.S.C. 1501)), an act of ter-
rorism (as such term is defined in section 3077 of title 
18, United States Code), and other nefarious acts that 
VerDate Sep 11 2014 
20:39 Jul 13, 2021
Jkt 019200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H3243.RH
H3243
pamtmann on DSKBC07HB2PROD with BILLS
jeopardize the physical security or cybersecurity of such 
transportation or facilities. 
‘‘(c) LEADERSHIP; STAFFING.—The Administrator 
shall appoint as the head of the section division an indi-
vidual in the executive service of the Administration with 
knowledge of the pipeline industry and security best prac-
tices, as determined appropriate by the Administrator. 
The section division shall be staffed by a workforce that 
includes personnel with cybersecurity expertise. 
‘‘(d) RESPONSIBILITIES.—The section division shall 
be responsible for carrying out the duties of the section 
division as directed by the Administrator, acting through 
the head appointed pursuant to subsection (c). Such duties 
shall include the following: 
‘‘(1) Developing, in consultation with relevant 
Federal, State, local, Tribal, and territorial entities 
and public and private sector stakeholders, guide-
lines for improving the security of pipeline transpor-
tation and pipeline facilities against cybersecurity 
threats, an act of terrorism, and other nefarious acts 
that jeopardize the physical security or cybersecurity 
of such transportation or facilities, consistent with 
the National Institute of Standards and Technology 
Framework for Improvement of Critical Infrastruc-
ture Cybersecurity and any update to such guide-
VerDate Sep 11 2014 
20:39 Jul 13, 2021
Jkt 019200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H3243.RH
H3243
pamtmann on DSKBC07HB2PROD with BILLS
lines pursuant to section 2(c)(15) of the National 
Institute for Standards and Technology Act (15 
U.S.C. 272(c)(15)). 
‘‘(2) Updating such guidelines as necessary 
based on intelligence and risk assessments, but not 
less frequently than every three years, unless such 
guidelines are superseded by directives or regulations. 
‘‘(3) Sharing of such guidelines and, as appro-
priate, intelligence and information regarding such 
security threats to pipeline transportation and pipe-
line facilities, as appropriate, with relevant Federal, 
State, local, Tribal, and territorial entities and pub-
lic and private sector stakeholders. 
‘‘(4) Conducting voluntary security assessments 
based on such guidelines to provide recommenda-
tions, or mandatory security assessments if required 
by superseding directives or regulations, to provide 
recommendations or requirements for the improve-
ment of the security of pipeline transportation and 
pipeline facilities against cybersecurity threats, an 
act of terrorism, and other nefarious acts that jeop-
ardize the physical security or cybersecurity of such 
transportation or facilities, including the security 
policies, plans, practices, and training programs 
VerDate Sep 11 2014 
20:39 Jul 13, 2021
Jkt 019200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H3243.RH
H3243
pamtmann on DSKBC07HB2PROD with BILLS
maintained by owners and operators of pipeline fa-
cilities. 
‘‘(5) Carrying out a program through which the 
Administrator identifies and ranks the relative risk 
of pipelines and inspects pipeline facilities des-
ignated by owners and operators of such facilities as 
critical based on such guidelines or superseding di-
rectives or regulations. 
‘‘(6) Preparing notice and comment regulations 
for publication, if determined necessary by the Ad-
ministrator. 
‘‘(6) Supporting the development and implemen-
tation of a security directive or regulation when the 
Administrator issues such a directive or regulation. 
‘‘(e) DETAILS.—In furtherance of the section’s divi-
sion’s mission, as set forth in subsection (b), the Adminis-
trator and the Director of the Cybersecurity and Infra-
structure Security Agency may detail personnel between 
their components to leverage expertise. Personnel detailed 
from the Cybersecurity and Infrastructure Security Agen-
cy may be considered as fulfilling the cybersecurity exper-
tise requirements in referred to in subsection (c).’’. 
(b) UPDATED GUIDELINES.—Not later than one year 
after the date of the enactment of this Act, the pipeline 
security section pipeline security division of the Transpor-
VerDate Sep 11 2014 
20:39 Jul 13, 2021
Jkt 019200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H3243.RH
H3243
pamtmann on DSKBC07HB2PROD with BILLS
tation Security Administration established pursuant to 
section 1631 of the Homeland Security Act of 2002, as 
added by subsection (a), shall publish updated guidelines 
described in subsection (d) of such section, except to the 
extent such guidelines have been superseded by directives 
or regulations. 
(c) CLERICAL AMENDMENTS.—The table of contents 
in section 1(b) of the Homeland Security Act of 2002 is 
amended by— 
(1) striking the item relating to section 1617 
and inserting the following new item: 
‘‘Sec. 1617. Diversified security technology industry marketplace.’’; 
(2) by striking the item relating to section 1621 
and inserting the following new item: 
‘‘Sec. 1621. Maintenance validation and oversight.’’; 
(3) inserting after the item relating to section 
1621 the following: 
‘‘Subtitle D—Pipeline Security 
‘‘Sec. 1631.
Pipeline security section Pipeline security division.’’. 
SEC. 4. PERSONNEL STRATEGY. 
(a) IN GENERAL.—Not later than 180 days after the 
date of the enactment of this Act, the Administrator of 
the Transportation Security Administration, in coordina-
tion with the Director of the Cybersecurity and Infrastruc-
ture Security Agency of the Department of Homeland Se-
curity, shall develop a personnel strategy for enhancing 
VerDate Sep 11 2014 
20:39 Jul 13, 2021
Jkt 019200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H3243.RH
H3243
pamtmann on DSKBC07HB2PROD with BILLS
operations within the pipeline security section pipeline se-
curity division of the Transportation Security Administra-
tion established pursuant to section 1631 of the Homeland 
Security Act of 2002, as added by section 3. 
(b) CONTENTS.—The strategy required under sub-
section (a) shall take into consideration the most recently 
published versions of each of the following documents: 
(1) The Transportation Security Administration 
National Strategy for Transportation Security. 
(2) The Department of Homeland Security Cy-
bersecurity Strategy. 
(3) The Transportation Security Administration 
Cybersecurity Roadmap. 
(4) The Department of Homeland Security Bal-
anced Workforce Strategy. 
(5) The Department of Homeland Security 
Quadrennial Homeland Security Review. 
(c) CYBERSECURITY EXPERTISE.—The strategy shall 
include an assessment of the cybersecurity expertise deter-
mined necessary by the Administrator of the Transpor-
tation Security Administration and a plan for developing 
such expertise within the Administration. 
(c) (d) RESOURCES.—The strategy shall include an 
assessment of resources determined necessary by the Ad-
VerDate Sep 11 2014 
20:39 Jul 13, 2021
Jkt 019200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H3243.RH
H3243
pamtmann on DSKBC07HB2PROD with BILLS
ministrator of the Transportation Security Administration 
to carry out such strategy. 
(d) (e) SUBMISSION TO CONGRESS.—Upon develop-
ment of the strategy, the Administrator of the Transpor-
tation Security Administration shall provide to the Com-
mittee on Homeland Security of the House of Representa-
tives and the Committee on Commerce, Science, and 
Transportation of the Senate a copy of such strategy. 
SEC. 5. OVERSIGHT. 
(a) REPORT TO CONGRESS.—The Administrator of 
the Transportation Security Administration shall report to 
the Committee on Homeland Security of the House of 
Representatives and the Committee on Commerce, 
Science, and Transportation of the Senate not less than 
annually on activities of the pipeline security section pipe-
line security division of the Administration established 
pursuant to section 1631 of the Homeland Security Act 
of 2002, as added by section 3, including information with 
respect to guidelines, directives, regulations, security as-
sessments, and inspections under such section. Each such 
report shall include a determination by the Administrator 
regarding whether there is a need for new regulations or 
non-regulatory initiatives and the basis for such deter-
mination. 
VerDate Sep 11 2014 
20:39 Jul 13, 2021
Jkt 019200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6201
E:\BILLS\H3243.RH
H3243
pamtmann on DSKBC07HB2PROD with BILLS
(b) GAO REVIEW.—Not later than two years after 
the date of the enactment of this Act, the Comptroller 
General of the United States shall conduct a review of the 
implementation of this Act and the amendments made by 
this Act. 
SEC. 6. STAKEHOLDER ENGAGEMENT. 
Not later than one year after the date of the enact-
ment of this Act, the Administrator of the Transportation 
Security Administration shall convene not less than two 
industry days to engage with relevant pipeline transpor-
tation and pipeline facilities stakeholders on matters re-
lated to the security of pipeline transportation and pipeline 
facilities (as such terms are defined in section 60101 of 
title 49, United States Code). 
VerDate Sep 11 2014 
20:39 Jul 13, 2021
Jkt 019200
PO 00000
Frm 00011
Fmt 6652
Sfmt 6201
E:\BILLS\H3243.RH
H3243
pamtmann on DSKBC07HB2PROD with BILLS
Union Calendar No. 60 
117TH CONGRESS 
1ST SESSION 
H. R. 3243 
[Report No. 117–85] 
A BILL 
To codify the Transportation Security Administra-
tion’s responsibility relating to securing pipelines 
against cybersecurity threats, acts of terrorism, 
and other nefarious acts that jeopardize the 
physical security or cybersecurity of pipelines, 
and for other purposes. 
JULY 13, 2021 
Reported with amendments, committed to the Committee 
of the Whole House on the State of the Union, and or-
dered to be printed 
VerDate Sep 11 2014 
20:39 Jul 13, 2021
Jkt 019200
PO 00000
Frm 00012
Fmt 6651
Sfmt 6651
E:\BILLS\H3243.RH
H3243
pamtmann on DSKBC07HB2PROD with BILLS