nology, other Federal agencies, and energy sector 
stakeholders, in order to provide recommendations 
for additional research, development, demonstration, 
and commercial application activities, shall— 
‘‘(A) analyze physical and cyber attacks on 
energy sector infrastructure and information 
systems and identify cost-effective opportunities 
to improve physical and cyber security; and 
‘‘(B) examine the risks associated with in-
creasing penetration of digital technologies in 
grid networks, particularly on the distribution 
grid. 
‘‘(2) CONTENT.—The study shall— 
‘‘(A) analyze processes, operational proce-
dures, and other factors common among cyber 
attacks; 
‘‘(B) identify areas where human behavior 
plays a critical role in maintaining or compro-
mising the security of a system; 
‘‘(C) recommend— 
‘‘(i) changes to the design of devices, 
human-machine interfaces, technologies, 
tools, processes, or procedures to optimize 
security that do not require a change in 
human behavior; and 
VerDate Sep 11 2014 
22:32 Feb 06, 2020
Jkt 099200
PO 00000
Frm 00024
Fmt 6652
Sfmt 6201
E:\BILLS\H5760.IH
H5760
kjohnson on DSK79L0C42PROD with BILLS
‘‘(ii) training techniques to increase 
the capacity of employees to actively iden-
tify, prevent, or neutralize the impact of 
cyber attacks; 
‘‘(D) evaluate existing engineering and 
technical design criteria and guidelines that in-
corporate human factors research findings, and 
recommend criteria and guidelines for cyberse-
curity tools that can be used to develop display 
systems for cybersecurity monitoring, such as 
alarms, user-friendly displays, and layouts; 
‘‘(E) evaluate the cybersecurity risks and 
benefits of various design and architecture op-
tions for energy sector systems, networked grid 
systems and components, and automation sys-
tems, including consideration of— 
‘‘(i) designs that include both digital 
and analog control devices and tech-
nologies; 
‘‘(ii) different communication tech-
nologies used to transfer information and 
data between control system devices, tech-
nologies, and system operators; 
‘‘(iii) automated and human-in-the- 
loop devices and technologies; 
VerDate Sep 11 2014 
22:32 Feb 06, 2020
Jkt 099200
PO 00000
Frm 00025
Fmt 6652
Sfmt 6201
E:\BILLS\H5760.IH
H5760
kjohnson on DSK79L0C42PROD with BILLS
‘‘(iv) 
programmable 
versus 
non-
programmable devices and technologies; 
‘‘(v) increased redundancy using dis-
similar cybersecurity technologies; and 
‘‘(vi) grid architectures that use au-
tonomous 
functions 
to 
limit 
control 
vulnerabilities; and 
‘‘(F) recommend methods or metrics to 
document changes in risks associated with sys-
tem designs and architectures. 
‘‘(3) CONSULTATION.—In conducting the study, 
the Secretary shall consult with energy sector stake-
holders, academic and private sector researchers, the 
private sector, and other relevant stakeholders. 
‘‘(4) REPORT.—Not later than 24 months after 
the date of enactment of the Grid Security Research 
and Development Act, the Secretary shall submit the 
study to the Committee on Science, Space, and 
Technology of the House of Representatives and the 
Committee on Energy and Natural Resources of the 
Senate. 
‘‘SEC. 1317. DEFINITIONS. 
‘‘In this title: 
VerDate Sep 11 2014 
22:32 Feb 06, 2020
Jkt 099200
PO 00000
Frm 00026
Fmt 6652
Sfmt 6201
E:\BILLS\H5760.IH
H5760
kjohnson on DSK79L0C42PROD with BILLS
‘‘(1) BIG DATA.—The term ‘big data’ means 
datasets that require advanced analytical methods 
for their transformation into useful information. 
‘‘(2) CYBERSECURITY.—The term ‘cybersecu-
rity’ means protecting an information system or in-
formation that is stored on, processed by, or 
transiting an information system from a cybersecu-
rity threat or security vulnerability. 
‘‘(3) CYBERSECURITY THREAT.—The term ‘cy-
bersecurity threat’ has the meaning given the term 
in section 102 of the Cybersecurity Information 
Sharing Act of 2015 (6 U.S.C. 1501). 
‘‘(4) ELECTRICITY SUBSECTOR COORDINATING 
COUNCIL.—The term ‘Electricity Subsector Coordi-
nating Council’ means the self-organized, self-gov-
erned council consisting of senior industry represent-
atives to serve as the principal liaison between the 
Federal Government and the electric power sector 
and to carry out the role of the Sector Coordinating 
Council as established in the National Infrastructure 
Protection Plan for the electricity subsector. 
‘‘(5) ENERGY
SECTOR
GOVERNMENT
COORDI-
NATING COUNCIL.—The term ‘Energy Sector Gov-
ernment Coordinating Council’ means the council 
consisting of representatives from relevant Federal 
VerDate Sep 11 2014 
22:32 Feb 06, 2020
Jkt 099200
PO 00000
Frm 00027
Fmt 6652
Sfmt 6201
E:\BILLS\H5760.IH
H5760
kjohnson on DSK79L0C42PROD with BILLS
Government agencies to provide effective coordina-
tion of energy sector efforts to ensure a secure, reli-
able, and resilient energy infrastructure and to carry 
out the role of the Government Coordinating Council 
as established in the National Infrastructure Protec-
tion Plan for the energy sector. 
‘‘(6) HUMAN FACTORS RESEARCH.—The term 
‘human factors research’ means research on human 
performance in social and physical environments, 
and on the integration and interaction of humans 
with physical systems and computer hardware and 
software. 
‘‘(7) HUMAN-MACHINE INTERFACES.—The term 
‘human-machine interfaces’ means technologies that 
present information to an operator or user about the 
state of a process or system, or accept human in-
structions to implement an action, including visual-
ization displays such as a graphical user interface. 
‘‘(8) INFORMATION SYSTEM.—The term ‘infor-
mation system’— 
‘‘(A) has the meaning given the term in 
section 102 of the Cybersecurity Information 
Sharing Act of 2015 (6 U.S.C. 1501); and 
‘‘(B) includes operational technology, infor-
mation technology, and communications. 
VerDate Sep 11 2014 
22:32 Feb 06, 2020
Jkt 099200
PO 00000
Frm 00028
Fmt 6652
Sfmt 6201
E:\BILLS\H5760.IH
H5760
kjohnson on DSK79L0C42PROD with BILLS
‘‘(9) NATIONAL LABORATORY.—The term ‘na-
tional laboratory’ has the meaning given the term in 
section 2 of the Energy Policy Act of 2005 (42 
U.S.C. 15801). 
‘‘(10) SECURITY
VULNERABILITY.—The term 
‘security vulnerability’ has the meaning given the 
term in section 102 of the Cybersecurity Information 
Sharing Act of 2015 (6 U.S.C. 1501). 
‘‘(11) TRANSIENT DEVICES.—The term ‘tran-
sient devices’ means removable media, including 
floppy disks, compact disks, USB flash drives, exter-
nal hard drives, mobile devices, and other devices 
that utilize wireless connections. 
‘‘SEC. 1318. AUTHORIZATION OF APPROPRIATIONS. 
‘‘There are authorized to be appropriated to the Sec-
retary to carry out this title— 
‘‘(1) $150,000,000 for fiscal year 2021; 
‘‘(2) $157,500,000 for fiscal year 2022; 
‘‘(3) $165,375,000 for fiscal year 2023; 
‘‘(4) $173,645,000 for fiscal year 2024; and 
‘‘(5) $182,325,000 for fiscal year 2025.’’. 
Æ 
VerDate Sep 11 2014 
22:32 Feb 06, 2020
Jkt 099200
PO 00000
Frm 00029
Fmt 6652
Sfmt 6301
E:\BILLS\H5760.IH
H5760
kjohnson on DSK79L0C42PROD with BILLS