IB 
Union Calendar No. 288 
114TH CONGRESS 
1ST SESSION H. R. 3878 
[Report No. 114–379, Part I] 
To enhance cybersecurity information sharing and coordination at ports in 
the United States, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
NOVEMBER 2, 2015 
Mrs. TORRES introduced the following bill; which was referred to the Com-
mittee on Homeland Security, and in addition to the Committee on 
Transportation and Infrastructure, for a period to be subsequently deter-
mined by the Speaker, in each case for consideration of such provisions 
as fall within the jurisdiction of the committee concerned 
DECEMBER 15, 2015 
Additional sponsors: Mrs. MILLER of Michigan, Mr. RICHMOND, and Mr. 
LOWENTHAL 
DECEMBER 15, 2015 
Reported from the Committee on Homeland Security with an amendment 
[Strike out all after the enacting clause and insert the part printed in italic] 
DECEMBER 15, 2015 
The Committee on Transportation and Infrastructure discharged; committed 
to the Committee of the Whole House on the State of the Union and or-
dered to be printed 
[For text of introduced bill, see copy of bill as introduced on November 2, 2015] 
VerDate Sep 11 2014 
21:06 Dec 15, 2015
Jkt 059200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6652
E:\BILLS\H3878.RH
H3878
asabaliauskas on DSK5VPTVN1PROD with BILLS
A BILL 
To enhance cybersecurity information sharing and coordina-
tion at ports in the United States, and for other pur-
poses. 
VerDate Sep 11 2014 
20:30 Dec 15, 2015
Jkt 059200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6652
E:\BILLS\H3878.RH
H3878
asabaliauskas on DSK5VPTVN1PROD with BILLS
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Strengthening Cyberse-
curity Information Sharing and Coordination in Our Ports 
Act of 2015’’. 
SEC. 2. IMPROVING CYBERSECURITY RISK ASSESSMENTS, 
INFORMATION 
SHARING, 
AND 
COORDINA-
TION. 
The Secretary of Homeland Security shall— 
(1) develop and implement a maritime cyberse-
curity risk assessment model within 120 days after 
the date of the enactment of this Act, consistent with 
the National Institute of Standards and Technology 
Framework for Improving Critical Infrastructure Cy-
bersecurity and any update to that document pursu-
ant to Public Law 113–274, to evaluate current and 
future cybersecurity risks (as that term is defined in 
the second section 226 of the Homeland Security Act 
of 2002 (6 U.S.C. 148)); 
(2) evaluate, on a periodic basis but not less 
than once every two years, the effectiveness of the cy-
bersecurity risk assessment model established under 
paragraph (1); 
VerDate Sep 11 2014 
20:30 Dec 15, 2015
Jkt 059200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6203
E:\BILLS\H3878.RH
H3878
asabaliauskas on DSK5VPTVN1PROD with BILLS
(3) seek to ensure participation of at least one 
information sharing and analysis organization (as 
that term is defined in section 212 of the Homeland 
Security Act of 2002 (6 U.S.C. 131)) representing the 
maritime community in the National Cybersecurity 
and Communications Integration Center, pursuant to 
subsection (d)(1)(B) of the second section 226 of the 
Homeland Security Act of 2002 (6 U.S.C. 148); 
(4) establish guidelines for voluntary reporting of 
maritime-related cybersecurity risks and incidents (as 
such terms are defined in the second section 226 of the 
Homeland Security Act of 2002 (6 U.S.C. 148)) to the 
Center (as that term is defined subsection (b) of the 
second section 226 of the Homeland Security Act of 
2002 (6 U.S.C. 148)), and other appropriate Federal 
agencies; and 
(5) request the National Maritime Security Ad-
visory Committee established under section 70112 of 
title 46, United States Code, to report and make rec-
ommendations to the Secretary on enhancing the 
sharing of information related to cybersecurity risks 
and incidents between relevant Federal agencies and 
State, local, and tribal governments and consistent 
with the responsibilities of the Center (as that term 
is defined subsection (b) of the second section 226 of 
VerDate Sep 11 2014 
20:30 Dec 15, 2015
Jkt 059200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6203
E:\BILLS\H3878.RH
H3878
asabaliauskas on DSK5VPTVN1PROD with BILLS
the Homeland Security Act of 2002 (6 U.S.C. 148)); 
relevant public safety and emergency response agen-
cies; relevant law enforcement and security organiza-
tions; maritime industry; port owners and operators; 
and terminal owners and operators. 
SEC. 3. CYBERSECURITY ENHANCEMENTS TO MARITIME SE-
CURITY ACTIVITIES. 
The Secretary of Homeland Security, acting through 
the Commandant of the Coast Guard, shall direct— 
(1) each Area Maritime Security Advisory Com-
mittee established under section 70112 of title 46, 
United States Code, to facilitate the sharing of cyber-
security risks and incidents to address port-specific 
cybersecurity risks, which may include the establish-
ment of a working group of members of Area Mari-
time Security Advisory Committees to address port- 
specific cybersecurity vulnerabilities; and 
(2) that any area maritime security plan and 
facility security plan required under section 70103 of 
title 46, United States Code approved after the devel-
opment of the cybersecurity risk assessment model re-
quired by paragraph (1) of section 2 include a miti-
gation plan to prevent, manage, and respond to cy-
bersecurity risks. 
VerDate Sep 11 2014 
20:30 Dec 15, 2015
Jkt 059200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6203
E:\BILLS\H3878.RH
H3878
asabaliauskas on DSK5VPTVN1PROD with BILLS
SEC. 4. VULNERABILITY ASSESSMENTS AND SECURITY 
PLANS. 
Title 46, United States Code, is amended— 
(1) in section 70102(b)(1)(C), by inserting ‘‘cy-
bersecurity,’’ after ‘‘physical security,’’; and 
(2) in section 70103(c)(3)(C), by striking ‘‘and’’ 
after the semicolon at the end of clause (iv), by redes-
ignating clause (v) as clause (vi), and by inserting 
after clause (iv) the following: 
‘‘(v) cybersecurity; and’’. 
VerDate Sep 11 2014 
20:30 Dec 15, 2015
Jkt 059200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6203
E:\BILLS\H3878.RH
H3878
asabaliauskas on DSK5VPTVN1PROD with BILLS
Union Calendar No. 288 
114TH CONGRESS 
1ST SESSION 
H. R. 3878 
[Report No. 114–379, Part I] 
A BILL 
To enhance cybersecurity information sharing and 
coordination at ports in the United States, and 
for other purposes. 
DECEMBER 15, 2015 
Reported from the Committee on Homeland Security 
with an amendment 
DECEMBER 15, 2015 
The Committee on Transportation and Infrastructure 
discharged; committed to the Committee of the Whole 
House on the State of the Union and ordered to be 
printed 
VerDate Sep 11 2014 
21:06 Dec 15, 2015
Jkt 059200
PO 00000
Frm 00008
Fmt 6651
Sfmt 6651
E:\BILLS\H3878.RH
H3878
asabaliauskas on DSK5VPTVN1PROD with BILLS