guidance documents for research, development, and dem-
onstration activities to improve the cybersecurity capabili-
ties of the energy sector through participating agencies. 
As part of these activities, the Secretary, in consultation 
with relevant Federal agencies, shall— 
‘‘(1) facilitate stakeholder involvement to up-
date— 
‘‘(A) the Roadmap to Achieve Energy De-
livery Systems Cybersecurity; 
‘‘(B) the Cybersecurity Procurement Lan-
guage for Energy Delivery Systems, including 
developing guidance for— 
‘‘(i) contracting with third parties to 
conduct vulnerability testing for informa-
tion systems used across the energy pro-
duction, delivery, storage, and end use sys-
tems; 
‘‘(ii) contracting with third parties 
that utilize transient devices to access in-
formation systems; and 
‘‘(iii) managing supply chain risks; 
and 
‘‘(C) the Electricity Subsector Cybersecu-
rity Capability Maturity Model, including the 
VerDate Sep 11 2014 
23:39 Aug 18, 2021
Jkt 019200
PO 00000
Frm 00017
Fmt 6652
Sfmt 6201
E:\BILLS\H4939.IH
H4939
ctelli on DSK11ZRN23PROD with BILLS
development of metrics to measure changes in 
cybersecurity readiness; and 
‘‘(2) develop voluntary guidance to improve dig-
ital forensic analysis capabilities, including— 
‘‘(A) developing standardized terminology 
and monitoring processes; and 
‘‘(B) utilizing human factors research to 
develop more effective procedures for logging 
incident events; and 
‘‘(3) work with the National Science Founda-
tion, Department of Homeland Security, and stake-
holders to develop a mechanism to anonymize, ag-
gregate, and share the testing results from cyberse-
curity test beds to facilitate technology improve-
ments by public and private sector researchers. 
‘‘(b) BEST PRACTICES.—The Secretary, in collabora-
tion with the Director of the National Institute of Stand-
ards and Technology, the Director of the Cybersecurity 
and Infrastructure Security Agency, and other appropriate 
Federal agencies, shall convene relevant stakeholders and 
facilitate the development of— 
‘‘(1) consensus-based best practices to improve 
cybersecurity for— 
‘‘(A) emerging energy technologies; 
VerDate Sep 11 2014 
23:39 Aug 18, 2021
Jkt 019200
PO 00000
Frm 00018
Fmt 6652
Sfmt 6201
E:\BILLS\H4939.IH
H4939
ctelli on DSK11ZRN23PROD with BILLS
‘‘(B) distributed generation and storage 
technologies, and other distributed energy re-
sources; 
‘‘(C) electric vehicles and electric vehicle 
charging stations; and 
‘‘(D) other technologies and devices that 
connect to the electric grid; 
‘‘(2) recommended cybersecurity designs and 
technical requirements that can be used by the pri-
vate sector to design and build interoperable cyber-
security features into technologies that connect to 
the electric grid, including networked devices and 
components on distribution systems; and 
‘‘(3) technical analysis that can be used by the 
private sector in developing best practices for test 
beds and test bed methodologies that will enable re-
producible testing of cybersecurity protections for in-
formation systems, electronic devices, and other rel-
evant components, software, and hardware across 
test beds. 
‘‘(c) REGULATORY AUTHORITY.—None of the activi-
ties authorized in this section shall be construed to author-
ize regulatory actions. Additionally, the voluntary stand-
ards developed under this section shall not duplicate or 
conflict with mandatory reliability standards. 
VerDate Sep 11 2014 
23:39 Aug 18, 2021
Jkt 019200
PO 00000
Frm 00019
Fmt 6652
Sfmt 6201
E:\BILLS\H4939.IH
H4939
ctelli on DSK11ZRN23PROD with BILLS
‘‘SEC. 8016. VULNERABILITY TESTING AND TECHNICAL AS-
SISTANCE TO IMPROVE CYBERSECURITY. 
‘‘The Secretary shall— 
‘‘(1) coordinate with appropriate Federal agen-
cies and energy sector asset owners and operators, 
leveraging the research facilities and expertise of the 
National Laboratories, to assist entities in devel-
oping testing capabilities by— 
‘‘(A) utilizing a range of methods to iden-
tify vulnerabilities in physical and cyber sys-
tems; 
‘‘(B) developing cybersecurity risk assess-
ment tools and providing analyses and rec-
ommendations to participating stakeholders; 
and 
‘‘(C) working with appropriate Federal 
agencies and stakeholders to develop methods to 
share anonymized and aggregated test results 
to assist relevant stakeholders in the energy 
sector, researchers, and the private sector to 
advance cybersecurity efforts, technologies, and 
tools; 
‘‘(2) collaborate with relevant stakeholders, in-
cluding public utility commissions, to— 
‘‘(A) identify information, research, staff 
training, and analytical tools needed to evaluate 
VerDate Sep 11 2014 
23:39 Aug 18, 2021
Jkt 019200
PO 00000
Frm 00020
Fmt 6652
Sfmt 6201
E:\BILLS\H4939.IH
H4939
ctelli on DSK11ZRN23PROD with BILLS
cybersecurity issues and challenges in the en-
ergy sector; and 
‘‘(B) facilitate the sharing of information 
and the development of tools identified under 
subparagraph (A); 
‘‘(3) coordinate with tribal governments to iden-
tify information, research, and analysis tools needed 
by tribal governments to increase the cybersecurity 
of energy assets within their jurisdiction. 
‘‘SEC. 8017. CYBERSECURITY EDUCATION AND WORKFORCE 
TRAINING RESEARCH AND STANDARDS. 
‘‘(a) IN GENERAL.—The Secretary shall support the 
development of a cybersecurity workforce through a pro-
gram that— 
‘‘(1) facilitates collaboration between under-
graduate and graduate students, researchers at the 
National Laboratories, and the private sector; 
‘‘(2) prioritizes science and technology in areas 
relevant to the mission of the Department of Energy 
through the design and application of cybersecurity 
technologies for the energy sector; 
‘‘(3) develops, or facilitates private sector devel-
opment of, voluntary cybersecurity training and re-
training standards, lessons, and recommendations 
VerDate Sep 11 2014 
23:39 Aug 18, 2021
Jkt 019200
PO 00000
Frm 00021
Fmt 6652
Sfmt 6201
E:\BILLS\H4939.IH
H4939
ctelli on DSK11ZRN23PROD with BILLS