SEC. 3. POLICY. 
(a) SECURITY AND RESILIENCE.—The Secretary of 
Homeland Security shall work with critical infrastructure 
owners and operators and SLTTs to take proactive steps 
to manage risk and strengthen the security and resilience 
of the Nation’s critical infrastructure against terrorist at-
tacks that could have a debilitating impact on national se-
curity, economic stability, public health and safety, or any 
combination thereof. Such efforts shall seek to reduce 
vulnerabilities, minimize consequences, identify and dis-
rupt terrorism threats, and hasten response and recovery 
efforts related to critical infrastructure. 
(b) INTERNATIONAL
PARTNERS.—The Secretary 
shall, in consultation with appropriate Federal agencies, 
establish terrorism prevention policy to engage with inter-
national partners to strengthen the security and resilience 
of domestic critical infrastructure and critical infrastruc-
ture located outside of the United States on which the Na-
tion depends. 
(c) INTEGRATED, HOLISTIC APPROACH.— 
(1) RESEARCH
TASK
FORCE.—The Secretary 
shall establish a research task force to conduct re-
search into the best means and methods to address 
the security and resilience of critical infrastructure 
in an integrated, holistic manner to reflect critical 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
infrastructure’s interconnectedness and interdepend-
ency. 
(2) DUTIES OF THE RESEARCH TASK FORCE.— 
The research task force shall provide the Secretary 
with— 
(A) a list of critical infrastructure; 
(B) the degree the critical infrastructure is 
reliant upon other infrastructure; 
(C) the cyber preparedness of suppliers, 
contractors, or service providers of critical in-
frastructure; 
(D) programs, projects, or professional de-
velopment for persons responsible for the secu-
rity and operation of critical infrastructure; and 
(E) vulnerabilities and threats that are 
found in software systems, firewalls, applica-
tions, and methods of accessing systems. 
(3) MEMBERSHIP.—The research task force 
shall consist of 19 members appointed by the Sec-
retary. The Secretary shall appoint one member to 
represent each of— 
(A) the National Institutes of Standards 
and Technology; 
(B) the Association of Computing Machin-
ery; 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(C) IEEE (formerly the Institute of Elec-
trical and Electronic Engineers); 
(D) Carnegie Mellon Cylabs; 
(E) the Edison Electric Institute; 
(F) the National Telecommunication and 
Information Administration; 
(G) the Utilities Telecom Council; 
(H) the US Oil and Gas Association; 
(I) the American Chemistry Council; 
(J) the American Fuel and Petrochemical 
Manufacturers; 
(K) the Pharmaceutical Research Manu-
facturers of America; and 
(L) the National Oceanic and Atmospheric 
Administration. 
(4) REPORT.—The research task force shall 
provide a research report to the Secretary on its 
findings and recommendations 180 days after its es-
tablishment. 
(5) CRITICAL INFRASTRUCTURE DEFINED.—In 
this subsection, the term ‘‘critical infrastructure’’ 
means infrastructure of— 
(A) energy capture, refining, manufac-
turing, and delivery systems; 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(B) transportation and transportation sys-
tems; 
(C) water and sewer capture, processing, 
and delivery systems; 
(D) healthcare systems, with respect to 
preventing threats to the quality and safety of 
medicines, medical devices, and delivery of life- 
saving health care services; 
(E) food production, processing, and deliv-
ery systems; 
(F) virtual and physical communication 
systems; 
(G) financial systems; and 
(H) the electricity grid. 
(d) STRATEGIC IMPERATIVES.— 
(1) IN GENERAL.—The Secretary shall establish 
the Strategic Research Imperatives Program, which 
shall have the responsibility of leading the Depart-
ment of Homeland Security’s Federal civilian agency 
approach to strengthen critical infrastructure secu-
rity and resilience. 
(2) DUTIES.—The duties of the program are 
the following: 
(A) Collect data, refine and clarify func-
tional relationships across the Federal Govern-
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
ment to advance the national unity of effort to 
strengthen critical infrastructure, terrorism pre-
vention, security, and resilience. 
(B) Investigate effective measures that 
support information exchange by identifying 
baseline data and systems requirements for the 
Federal Government. 
(C) Recommend methods to implement an 
integration and analysis function to inform 
planning and operations decisions regarding the 
protection of critical infrastructure from ter-
rorist threats. 
(e) GUIDANCE.—The Secretary of Homeland Secu-
rity shall make available research findings and guidance 
to Federal civilian department and agency heads (or their 
designees) for the identification, prioritization, assess-
ment, remediation, and security of their respective internal 
critical infrastructure to assist in the prevention, medi-
ation, and recovery from terrorism events. 
SEC. 4. ROLES AND RESPONSIBILITIES. 
(a) UNITY OF EFFORT.— 
(1) IN GENERAL.—The Secretary shall establish 
and appoint a research working group that shall— 
(A) study and make recommendations on 
how best to achieve and implement national 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
unity of effort to protect against terrorism 
threats, through investigation of strategic guid-
ance from existing laws, Presidential policy di-
rectives, and Executive orders; and 
(B) investigate the security and resilience 
of the Nation’s information assurance compo-
nents that provide protection against terrorism 
threats. 
(2) IN-DEPTH APPROACH.—The research work-
ing group shall also consider research by subject- 
matter experts on cyber security in-depth approaches 
that study the following, and make recommendations 
thereon to the Secretary: 
(A) The program of the Department of 
Homeland Security to secure Federal agencies 
and critical infrastructure to create resilient se-
cure computer systems and networks. 
(B) Cyber security preparedness of ven-
dors, contractors, or nongovernment agency en-
tities that provide computer-related support or 
services to critical infrastructure owners and 
operators as well as government agencies 
charged with securing them. 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(C) Investigation of the feasibility of devel-
oping industry- or sector-specific computer 
emergency rapid response teams. 
(D) The feasibility of the agency devel-
oping a guest visiting security researchers pro-
gram to provide instruction to private sector 
and civilian agency personnel responsible for 
cyber security. 
(3) 
MEMBERSHIP.—The 
research 
working 
group shall be comprised of individuals with exper-
tise and day-to-day engagement from the sector-spe-
cific agency terrorism prevention, remediation, and 
response experts, as well as the specialized or sup-
port terrorism prevention capabilities of other Fed-
eral departments and agencies, as well as experts 
who engage in strong collaboration with critical in-
frastructure owners and operators and SLTTs, and 
academic researchers with in-depth knowledge in 
computing security. 
(b) SECRETARY OF HOMELAND SECURITY.— 
(1) IN GENERAL.—The Secretary of Homeland 
Security shall establish a research program to pro-
vide strategic guidance, promote a national unity of 
effort, and coordinate the overall Federal effort to 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
promote the security and resilience of the Nation’s 
critical infrastructure from terrorist threats. 
(2) ADDITIONAL
ROLES
AND
RESPONSIBIL-
ITIES.—Additional roles and responsibilities for the 
Secretary of Homeland Security include the fol-
lowing: 
(A) Identify and prioritize critical infra-
structure, 
considering 
physical 
and 
cyber 
threats, vulnerabilities, and consequences of ter-
rorist attacks, in coordination with SSAs and 
other Federal departments and agencies. 
(B) Maintain national terrorism critical in-
frastructure centers that shall provide a situa-
tional awareness capability that includes inte-
grated, actionable information about potential 
terrorist trends, imminent terrorist threats, and 
the status of terrorist incidents that may im-
pact critical infrastructure. 
(C) In coordination with SSAs and other 
Federal departments and agencies, provide 
analysis, expertise, and other technical assist-
ance to critical infrastructure owners and oper-
ators on terrorism prevention security protocols 
and facilitate access to and exchange of infor-
mation and intelligence necessary to strengthen 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
the security and resilience of critical infrastruc-
ture. 
(D) Conduct comprehensive assessments of 
the vulnerabilities of the Nation’s critical infra-
structure in coordination with the SSAs and in 
collaboration with SLTTs and critical infra-
structure owners and operators. 
(E) Coordinate Federal Government re-
sponses to cyber or physical terrorism incidents 
affecting critical infrastructure consistent with 
statutory authorities. 
(F) Support the Attorney General and law 
enforcement agencies with their responsibilities 
to investigate and prosecute threats to and ter-
rorist attacks against critical infrastructure. 
(G) Coordinate with and utilize the exper-
tise of SSAs and other appropriate Federal de-
partments and agencies to map geospatially, 
image, analyze, and sort critical infrastructure 
by employing commercial satellite and airborne 
systems, as well as existing capabilities within 
other departments and agencies. 
(H) Report annually to Congress on the 
status of national critical infrastructure efforts 
to meet the objectives of this section. 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00011
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(c) SECTOR-SPECIFIC AGENCIES.—Recognizing exist-
ing statutory or regulatory authorities of specific Federal 
departments and agencies, and leveraging existing sector 
familiarity and relationships, the head of each SSA shall 
carry out the following roles and responsibilities for their 
respective sectors: 
(1) Serve as a day-to-day Federal interface for 
the dynamic prioritization and coordination of sec-
tor-specific activities related to cyber security critical 
infrastructure protection from terrorism. 
(2) Carry out terrorism incident management 
responsibilities consistent with statutory authority 
and other appropriate policies, directives, or regula-
tions. 
(3) Provide, support, or facilitate technical as-
sistance and consultations for such sectors to iden-
tify vulnerabilities and help mitigate terrorism inci-
dents, as appropriate. 
(d) RESEARCH AND REPORT ON BEST PRACTICES 
FOR COORDINATING.—The Secretary shall conduct re-
search and submit a report to Congress not later than 180 
days after the date of the enactment of this Act on the 
best practices for coordinating with civilian agencies, pri-
vate sector critical infrastructure owners, local, State, trib-
al, and territorial agencies, other relevant Federal depart-
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00012
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
ments and agencies, where appropriate with independent 
regulatory agencies, and SLTTs, as appropriate, to imple-
ment this Act. 
SEC. 5. STRATEGIC IMPERATIVES. 
(a) RESEARCH AND REPORT ON THE MOST EFFI-
CIENT MEANS FOR INFORMATION EXCHANGE BY IDENTI-
FYING BASELINE DATA AND SYSTEMS REQUIREMENTS 
FOR THE FEDERAL GOVERNMENT.—The Secretary shall 
facilitate the timely exchange of terrorism threat and vul-
nerability information as well as information that allows 
for the development of a situational awareness capability 
for Federal civilian agencies during terrorist incidents. 
The goal of such facilitation is to enable efficient informa-
tion exchange through the identification of requirements 
for data and information formats and accessibility, system 
interoperability, and redundant systems and alternate ca-
pabilities should there be a disruption in the primary sys-
tems. 
(b) IMPLEMENTATION
OF
AN INTEGRATION
AND 
ANALYSIS FUNCTION TO INFORM PLANNING AND OPER-
ATIONAL DECISIONS REGARDING THE PROTECTION OF 
CRITICAL
INFRASTRUCTURE
FROM
TERRORISM 
EVENTS.—The Secretary of Homeland Security shall im-
plement an integration and analysis function for critical 
infrastructure that includes operational and strategic 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00013
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
analysis on terrorism incidents, threats, and emerging 
risks. Such function shall include establishment by the 
Secretary of 2 national centers to accomplish the fol-
lowing: 
(1) Implement a capability to collate, assess, 
and integrate vulnerability and consequence informa-
tion with threat streams and hazard information 
to— 
(A) aid in prioritizing assets and managing 
risks to critical infrastructure; 
(B) determine the staffing and professional 
need for cyber security critical infrastructure 
protection; 
(C) determine the agency staffing needed 
and to support cyber security critical infrastruc-
ture protection and report the findings to Con-
gress; 
(D) research and report findings regarding 
the feasibility of exploring terrorist incident cor-
relations between critical infrastructure dam-
age, destruction, and diminished capacity, and 
what occurs during certain natural disasters; 
(E) anticipate interdependencies and cas-
cading impacts related to cyber telecommuni-
cations failures; 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00014
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(F) recommend security and resilience 
measures for critical infrastructure prior to, 
during, and after a terrorism event or incident; 
(G) support post-terrorism incident man-
agement and restoration efforts related to crit-
ical infrastructure; and 
(H) make recommendations on preventing 
the collapse or serious degrading of the tele-
communication capability in an area impacted 
by a terrorism event. 
(2) Support the Department of Homeland Secu-
rity’s ability to maintain and share, as a common 
Federal service, a near real-time situational aware-
ness capability for critical infrastructure that in-
cludes actionable information about imminent ter-
rorist threats, significant trends, and awareness of 
incidents that may affect critical infrastructure. 
SEC. 6. PROTECTION OF PRIVACY AND CIVIL LIBERTIES. 
(a) IN GENERAL.—The Secretary of Homeland Secu-
rity shall support greater terrorism cyber security infor-
mation sharing by civilian Federal agencies with the pri-
vate sector that protects constitutional privacy and civil 
liberties rights. The heads of Federal departments and 
agencies shall ensure that all existing privacy principles, 
policies, and procedures are implemented consistent with 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00015
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
applicable law and policy and shall include senior agency 
officials for privacy in their efforts to govern and oversee 
terrorism program information sharing properly. 
(b) ENSURING INDEPENDENCE OF PRIVACY OFFI-
CER.— 
(1) IN GENERAL.—Section 222 of the Home-
land Security Act of 2002 (6 U.S.C. 142) is amend-
ed— 
(A) in subsection (a), by striking so much 
as precedes paragraph (1) and inserting the fol-
lowing: 
‘‘(a) IN GENERAL.—There shall be in the Depart-
ment a Privacy Officer who shall be appointed by the 
President, by and with the advice and consent of the Sen-
ate. The Privacy Officer shall report directly to the Sec-
retary, and shall have primary responsibility in the De-
partment for privacy policy, including—’’; 
(B) by striking ‘‘senior official appointed 
under subsection (a)’’ each place it appears and 
inserting ‘‘Privacy Officer’’; 
(C) in subsection (b)(1)(A), by striking 
‘‘senior official’’ and inserting ‘‘Privacy Offi-
cer’’; 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00016
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(D) in subsection (b)(1)(B), by striking 
‘‘senior official’s’’ and inserting ‘‘Privacy Offi-
cer’s’’; 
(E) in subsection (b)(1)(C), by striking 
‘‘senior official’’ and inserting ‘‘Privacy Offi-
cer’’; 
(F) in subsection (b)(1)(D), by striking 
‘‘senior official’’ and inserting ‘‘Privacy Offi-
cer’’; 
(G) in subsection (c)(2)(B), by striking 
‘‘senior official’’ each place it appears and in-
serting ‘‘Privacy Officer’’; 
(H) 
in 
the 
heading 
for 
subsection 
(c)(2)(B)(iii), by striking ‘‘BY
SENIOR
OFFI-
CIAL’’; 
(I) in subsection (d), by striking ‘‘the sen-
ior official appointed under subsection (a) or 
transfers that senior official to another position 
or location within the Department’’ and insert-
ing ‘‘individual appointed as Privacy Officer’’; 
(J) in the heading for subsection (e), by 
striking ‘‘BY SENIOR OFFICIAL’’; and 
(K) in subsection (e)— 
(i) by striking ‘‘senior official’’ and in-
serting ‘‘Privacy Officer’’; and 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00017
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(ii) by striking ‘‘senior official’s’’ each 
place it appears and inserting ‘‘Privacy Of-
ficer’’. 
(2) CONTINUED SERVICE.—The senior official 
serving as the Privacy Officer of the Department of 
Homeland Security immediately before the enact-
ment of this Act may continue to act as the Privacy 
Officer until a successor is appointed in accordance 
with the amendments made by this subsection. 
SEC. 7. INNOVATION AND RESEARCH AND DEVELOPMENT. 
The Secretary of Homeland Security may consult 
with other Federal departments and agencies to produce 
and submit to congressional oversight committees a report 
on how best to align federally funded research and devel-
opment activities that seek to strengthen the security and 
resilience of the Nation’s critical infrastructure, includ-
ing— 
(1) promoting research and development to en-
able the secure and resilient design and construction 
of critical infrastructure and more secure accom-
panying cyber technology; 
(2) enhancing modeling capabilities to deter-
mine potential impacts on critical infrastructure of 
an incident or threat scenario, and cascading effects 
on other sectors; 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00018
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(3) facilitating initiatives to incentivize cyber 
security investments and the adoption of critical in-
frastructure design features that strengthen all-haz-
ards security and resilience; and 
(4) prioritizing efforts to support the strategic 
guidance issued by the Secretary of Homeland Secu-
rity. 
SEC. 8. IMPLEMENTATION BY DEPARTMENT OF HOMELAND 
SECURITY. 
(a) CRITICAL INFRASTRUCTURE TERRORISM PRE-
VENTION SECURITY AND COMPUTER NETWORK RESIL-
IENCE FUNCTIONAL RELATIONSHIPS.— 
(1) IN GENERAL.—Within 120 days after the 
date of the enactment of this Act, the Secretary of 
Homeland Security shall conduct research and de-
velop a description of the functional relationships 
within the Department of Homeland Security and 
across the Federal Government related to critical in-
frastructure security and resilience. The description 
shall— 
(A) include the roles and functions of the 
2 national critical infrastructure centers and a 
discussion of the analysis and integration func-
tion; 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00019
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(B) serve as a roadmap for critical infra-
structure owners and operators and SLTTs to 
navigate the Federal Government’s functions 
and primary points of contact assigned to those 
functions for critical infrastructure security and 
resilience against both physical and cyber 
threats; and 
(C) include identification of every contact 
within the Federal Government for critical in-
frastructure protection security and resilience, 
by company and industry. 
(2) COORDINATION.—The Secretary shall pre-
pare a report on efforts to coordinate this effort with 
the SSAs and other relevant Federal departments 
and agencies. 
(3) PROVISION TO PRESIDENT.—The Secretary 
shall provide the description, supported by agency- 
conducted research, to the President through the As-
sistant to the President for Homeland Security and 
Counterterrorism, and to the relevant congressional 
homeland security oversight committees. 
(b) EVALUATION OF THE EXISTING PUBLIC-PRIVATE 
PARTNERSHIP MODEL.— 
(1) IN GENERAL.—Within 150 days after the 
date of the enactment of this Act, the Secretary of 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00020
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
Homeland Security, in coordination with the SSAs, 
other relevant Federal departments and agencies, 
SLTTs, and critical infrastructure owners and oper-
ators, shall conduct an analysis of the existing pub-
lic-private partnership model, evaluate its effective-
ness, and recommend options for improving the ef-
fectiveness of the partnership in both the physical 
and cyber space. 
(2) 
CONTENTS.—The 
research 
and 
rec-
ommendations shall— 
(A) consider options to streamline or auto-
mate (or both) processes for collaboration and 
exchange of terrorism-related information and 
to minimize duplication of effort; 
(B) consider how the model for terrorism 
information exchange can be flexible and adapt-
able to meet the unique needs of individual crit-
ical infrastructure sectors while providing a fo-
cused, disciplined, and effective approach for 
the Federal Government to coordinate with the 
critical infrastructure owners and operators and 
with SLTTs governments; and 
(C) result in recommendations to enhance 
partnerships to be approved for implementation 
by the President. 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00021
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(c) IDENTIFICATION OF BASELINE DATA AND SYS-
TEMS REQUIREMENTS FOR THE FEDERAL GOVERNMENT 
TO ENABLE EFFICIENT INFORMATION EXCHANGE.— 
(1) IN GENERAL.—Within 18 months after the 
date of the enactment of this Act, the Secretary of 
Homeland Security, in coordination with the SSAs 
and other Federal departments and agencies, shall 
convene a team of researchers to identify baseline 
data and systems requirements— 
(A) to enable the efficient exchange of ter-
rorism information and intelligence relevant to 
strengthening the security and resilience of crit-
ical infrastructure; and 
(B) for sharing of data and interoperability 
of systems to enable the timely exchange of ter-
rorism or terrorist threat data and information 
to secure critical infrastructure and make it 
more resilient. 
(2) EXPERTS INCLUDED.—The experts shall in-
clude representatives from— 
(A) those entities that routinely possess in-
formation important to critical infrastructure 
security and resilience; 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00022
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(B) those entities that determine and man-
age information technology systems used to ex-
change information; and 
(C) those entities responsible for the secu-
rity of information being exchanged. 
(3) ANALYSIS.—Analysis by such team of ex-
perts shall include— 
(A) interoperability with critical infrastruc-
ture partners; 
(B) identification of key data and the in-
formation requirements of key Federal, SLTT, 
and private sector entities; 
(C) availability, accessibility, and formats 
of data; 
(D) the ability to exchange various classi-
fications of information; 
(E) the security of those systems to be 
used; and 
(F) appropriate protections for individual 
privacy and civil liberties. 
(4) PROVISION TO PRESIDENT.—The Secretary 
shall provide such analysis to the President through 
the Assistant to the President for Homeland Secu-
rity and Counterterrorism, and to congressional 
homeland security oversight committees. 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00023
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(d) DEVELOP A RESEARCH PROGRAM TO INFORM 
THE AGENCY
OF
A SITUATIONAL AWARENESS CAPA-
BILITY FOR CRITICAL INFRASTRUCTURE.—Within 2 years 
after the date of the enactment of this Act, the Secretary 
of Homeland Security shall demonstrate a near real-time 
situational awareness, research-based pilot project for crit-
ical infrastructure that— 
(1) includes threat streams and all-hazards in-
formation as well as vulnerabilities; 
(2) provides the status of critical infrastructure 
and potential cascading effects; 
(3) supports decisionmaking; 
(4) disseminates critical information that may 
be needed to save or sustain lives, mitigate damage, 
or reduce further degradation of a critical infra-
structure capability throughout an incident; and 
(5) is available for and covers physical and 
cyber elements of critical infrastructure, and enables 
an integration of information as necessitated by an 
incident. 
(e) UPDATE TO NATIONAL INFRASTRUCTURE PRO-
TECTION PLAN.— 
(1) IN GENERAL.—Within 18 months after the 
date of the enactment of this Act, the Secretary of 
Homeland Security shall provide to the President, 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00024
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
through the Assistant to the President for Home-
land Security and Counterterrorism and the congres-
sional homeland security oversight committees, a re-
search report that outlines the National Infrastruc-
ture Protection Plan to address the implementation 
of this Act, the requirements of title II of the Home-
land Security Act of 2002 (6 U.S.C. 121 et seq.), 
and alignment with the National Preparedness Goal 
and System required by Presidential Policy Directive 
8. 
(2) CONTENTS.—The plan shall include— 
(A) identification of a risk management 
framework to be used to strengthen the security 
and resilience of critical infrastructure against 
terrorist threats; 
(B) the methods to be used to prioritize 
critical infrastructure in the event of a ter-
rorism event that impacts multiple infrastruc-
ture systems; 
(C) the protocols to be used to synchronize 
communication and actions within the Federal 
Government to effectively respond to critical in-
frastructure terrorist threats or events; and 
(D) a metrics and analysis process to be 
used to measure the Nation’s ability to manage 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00025
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
and reduce terrorism risks to critical infrastruc-
ture. 
(3) RELATIONSHIP
TO
OTHER
PROVISIONS.— 
The plan shall reflect the terrorism threat identifica-
tion, prevention, mediation, and recovery relation-
ships within the Department of Homeland Security 
and across the Federal Government identified under 
this Act and the updates to the public-private part-
nership model under this Act. 
(4) ENERGY AND COMMUNICATION SYSTEMS.— 
The plan shall consider sector dependencies on en-
ergy and communications systems during a ter-
rorism event, and identify pre-event and mitigation 
measures or alternate capabilities during disruptions 
to those systems. 
(5) COORDINATION.—The Secretary shall co-
ordinate activities under this subsection with the 
SSAs, other relevant Federal departments and agen-
cies, SLTTs, and critical infrastructure owners and 
operators. 
(6) RESPONSE PLANS.—The plan shall include 
an analysis of the feasibility of developing terrorism 
response plans, based on research conducted on the 
resilience of critical infrastructure when faced with 
terrorism threats, that focus on action plans to 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00026
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
achieve a level of function and eventual recovery of 
full operability of critical infrastructure post-cyber 
attack. 
(f) NATIONAL CRITICAL INFRASTRUCTURE SECURITY 
AND RESILIENCE R&D PLAN.—Within 2 years after the 
date of the enactment of this Act, the Secretary of Home-
land Security, in coordination with the Office of Science 
and Technology Policy, the SSAs, the Department of 
Commerce, and other Federal departments and agencies, 
shall provide to the President, through the Assistant to 
the President for Homeland Security and Counter-
terrorism, a National Critical Infrastructure Security and 
Resilience Research and Development Plan that takes into 
account the evolving threat landscape, annual metrics, and 
other relevant information to identify priorities and guide 
research and development requirements and investments. 
The Secretary shall reissue the plan every 4 years after 
its initial issuance, and make interim updates as needed. 
(g) CONSISTENCY IN PPD–1.—Policy coordination, 
dispute resolution, and periodic in-progress reviews for the 
implementation of this Act shall be carried out consistent 
with Presidential Policy Directive 1, including the use of 
interagency policy committees coordinated by the national 
security staff. 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00027
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(h) RELATIONSHIP TO OTHER AUTHORITIES.—Noth-
ing in this Act alters, supersedes, or impedes the authori-
ties of Federal departments and agencies, including inde-
pendent regulatory agencies, to carry out their functions 
and duties consistent with applicable legal authorities and 
other Presidential guidance and directives, including the 
designation of critical infrastructure under such authori-
ties. 
SEC. 9. DESIGNATION OF CRITICAL INFRASTRUCTURE SEC-
TORS AND SECTOR-SPECIFIC AGENCIES. 
(a) DESIGNATION.— 
(1) IN GENERAL.—For purposes of this Act, 
the Secretary of Homeland Security shall determine 
which critical infrastructure sectors and sector spe-
cific agencies for such sectors should be engaged in 
efforts to detect, deter, mitigate, and lead recovery 
efforts related to terrorist incidents. 
(2) CULTIVATION
OF
RELATIONSHIPS.—The 
Secretary shall evaluate the appropriate relation-
ships among Federal agencies, SSAs, SLTTs, and 
critical infrastructure owners and operators to estab-
lish the most effective defense against terrorist at-
tacks. 
(b) FUNCTION.—The Secretary shall provide institu-
tional knowledge and specialized expertise to lead, facili-
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00028
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
tate, or support security and resilience programs and asso-
ciated terrorism prevention activities with respect to sec-
tors designated under subsection (a)(1). 
(c) CHANGES.—The Secretary of Homeland Security 
shall periodically evaluate the need for and make changes 
to plans and evaluations made under this section. The Sec-
retary shall consult with the Assistant to the President 
for Homeland Security and Counterterrorism and congres-
sional homeland security oversight committees before 
changing the designation of a critical infrastructure sector 
or SSA for a sector. 
(d) REPORTS.—The Secretary of Homeland Security 
shall seek periodic research reports on critical infrastruc-
ture protection from Federal agencies as considered nec-
essary by the Secretary. 
SEC. 10. EVALUATION OF ACHIEVEMENT OF OBJECTIVES. 
(a) IN GENERAL.—The National Research Council, 
beginning 12 months after the date of enactment of this 
Act, shall evaluate how well the Department of Homeland 
Security is meeting the objectives of this Act. 
(b) INCLUDED SUBJECTS.—The review shall include 
evaluation of— 
(1) cyber security threats to critical infrastruc-
ture; 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00029
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(2) the success of Department programs in im-
plementing section 8; and 
(3) the long-term vulnerabilities faced by the 
Department, other Federal agencies, and critical in-
frastructure managers and owners. 
(c) COMPLETION.—The Council shall complete the 
review by not later than the end of the 18-month period 
beginning on the date of enactment of this Act, except that 
the Secretary of Homeland Security may extend such pe-
riod. 
(d) REPORT.—Upon the completion of the review, the 
Council shall submit to the Secretary a report on the find-
ings of the review, including recommendations based on 
such findings. 
SEC. 11. DEFINITIONS. 
For purposes of this Act: 
(1) ALL
HAZARDS.—The term ‘‘all hazards’’ 
means a threat or an incident, natural or manmade, 
that warrants action to protect life, property, the en-
vironment, and public health or safety, and to mini-
mize disruptions of government, social, or economic 
activities. The term includes natural disasters, cyber 
incidents, industrial accidents, pandemics, acts of 
terrorism, sabotage, and destructive criminal activity 
targeting critical infrastructure. 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00030
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
(2) COLLABORATION.—The term ‘‘collabora-
tion’’ means the process of working together to 
achieve shared goals. 
(3) CRITICAL
INFRASTRUCTURE.—The term 
‘‘critical infrastructure’’ means systems and assets, 
whether physical or virtual, so vital to the United 
States that the incapacity or destruction of such sys-
tems and assets would have a debilitating impact on 
security, national economic security, national public 
health or safety, or any combination of those mat-
ters. 
(4) FEDERAL DEPARTMENTS AND AGENCIES.— 
The term ‘‘Federal departments and agencies’’ 
means any authority of the United States that is an 
‘‘agency’’ under section 3502(1) of title 44, United 
States Code, other than those considered to be inde-
pendent regulatory agencies as defined in section 
3502(5) of such title. 
(5) NATIONAL
ESSENTIAL
FUNCTIONS.—The 
term ‘‘national essential functions’’ means that sub-
set of Government functions that are necessary to 
lead and sustain the Nation during a catastrophic 
emergency. 
(6) 
PRIMARY
MISSION
ESSENTIAL
FUNC-
TIONS.—The term ‘‘primary mission essential func-
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00031
Fmt 6652
Sfmt 6201
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS
tions’’ means those Government functions that must 
be performed in order to support or implement the 
performance of the national essential functions be-
fore, during, and in the aftermath of an emergency. 
(7) RESILIENCE.—The term ‘‘resilience’’ means 
the ability to prepare for and adapt to changing con-
ditions and withstand and recover rapidly from dis-
ruptions. The term includes the ability to withstand 
and recover from deliberate attacks, accidents, or 
naturally occurring threats or incidents. 
(8) 
SECTOR-SPECIFIC
AGENCY; 
SSA.—The 
terms ‘‘sector-specific agency’’ and ‘‘SSA’’ mean the 
Federal department or agency designated under this 
Act for a critical infrastructure sector. 
(9) SECURE; SECURITY.—The terms ‘‘secure’’ 
and ‘‘security’’ mean reducing the risk to critical in-
frastructure by physical means or defense cyber 
measures to intrusions, attacks, or the effects of 
natural or manmade disasters. 
(10) SLTT.—The term ‘‘SLTT’’ means State, 
local, tribal, and territorial entities. 
Æ 
VerDate Sep 11 2014 
20:16 Jan 10, 2015
Jkt 049200
PO 00000
Frm 00032
Fmt 6652
Sfmt 6301
E:\BILLS\H85.IH
H85
tkelley on DSK3SPTVN1PROD with BILLS