IB 
Union Calendar No. 615 
115TH CONGRESS 
2D SESSION 
H. R. 5240 
[Report No. 115–795] 
To provide for certain programs and developments in the Department of 
Energy concerning the cybersecurity and vulnerabilities of, and physical 
threats to, the electric grid, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
MARCH 9, 2018 
Mr. MCNERNEY (for himself and Mr. LATTA) introduced the following bill; 
which was referred to the Committee on Energy and Commerce 
JUNE 28, 2018 
Additional sponsor: Ms. ROSEN 
JUNE 28, 2018 
Reported with an amendment, committed to the Committee of the Whole 
House on the State of the Union, and ordered to be printed 
[Strike out all after the enacting clause and insert the part printed in italic] 
[For text of introduced bill, see copy of bill as introduced on March 9, 2018] 
VerDate Sep 11 2014 
20:49 Jun 28, 2018
Jkt 079200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6652
E:\BILLS\H5240.RH
H5240
amozie on DSK3GDR082PROD with BILLS
A BILL 
To provide for certain programs and developments in the 
Department of Energy concerning the cybersecurity and 
vulnerabilities of, and physical threats to, the electric 
grid, and for other purposes. 
VerDate Sep 11 2014 
20:49 Jun 28, 2018
Jkt 079200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6652
E:\BILLS\H5240.RH
H5240
amozie on DSK3GDR082PROD with BILLS
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Enhancing Grid Secu-
rity through Public-Private Partnerships Act’’. 
SEC. 2. PROGRAM TO PROMOTE AND ADVANCE PHYSICAL 
SECURITY AND CYBERSECURITY OF ELEC-
TRIC UTILITIES. 
(a) ESTABLISHMENT.—The Secretary of Energy, in 
consultation with State regulatory authorities, industry 
stakeholders, the Electric Reliability Organization, and 
other Federal agencies the Secretary determines appro-
priate, shall carry out a program to— 
(1) develop, and provide for voluntary imple-
mentation of, maturity models, self-assessments, and 
auditing methods for assessing the physical security 
and cybersecurity of electric utilities; 
(2) provide training to electric utilities to ad-
dress and mitigate cybersecurity supply chain man-
agement risks; 
(3) increase opportunities for sharing best prac-
tices and data collection within the electric sector; 
(4) assist with cybersecurity training for electric 
utilities; 
VerDate Sep 11 2014 
20:49 Jun 28, 2018
Jkt 079200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6203
E:\BILLS\H5240.RH
H5240
amozie on DSK3GDR082PROD with BILLS
(5) advance the cybersecurity of third-party ven-
dors that work in partnerships with electric utilities; 
and 
(6) provide technical assistance for electric utili-
ties subject to the program. 
(b) SCOPE.—In carrying out the program under sub-
section (a), the Secretary of Energy shall— 
(1) take into consideration different sizes of elec-
tric utilities and the regions that such electric utilities 
serve; 
(2) prioritize electric utilities with fewer avail-
able resources due to size or region; and 
(3) to the extent practicable, utilize and leverage 
existing Department of Energy programs. 
(c) PROTECTION OF INFORMATION.—Information pro-
vided to, or collected by, the Federal Government pursuant 
to this section— 
(1) shall be exempt from disclosure under section 
552(b)(3) of title 5, United States Code; and 
(2) shall not be made available by any Federal, 
State, political subdivision or tribal authority pursu-
ant to any Federal, State, political subdivision, or 
tribal law requiring public disclosure of information 
or records. 
VerDate Sep 11 2014 
20:49 Jun 28, 2018
Jkt 079200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6203
E:\BILLS\H5240.RH
H5240
amozie on DSK3GDR082PROD with BILLS