IIB 
117TH CONGRESS 
1ST SESSION H. R. 1833 
IN THE SENATE OF THE UNITED STATES 
JULY 21, 2021 
Received; read twice and referred to the Committee on Homeland Security and 
Governmental Affairs 
AN ACT 
To amend the Homeland Security Act of 2002 to provide 
for the responsibility of the Cybersecurity and Infrastruc-
ture Security Agency to maintain capabilities to identify 
threats to industrial control systems, and for other pur-
poses. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
VerDate Sep 11 2014 
01:27 Jul 22, 2021
Jkt 019200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H1833.RFS
H1833
pbinns on DSKJLVW7X2PROD with BILLS
HR 1833 RFS
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘DHS Industrial Con-
trol Systems Capabilities Enhancement Act of 2021’’. 
SEC. 2. CAPABILITIES OF THE CYBERSECURITY AND INFRA-
STRUCTURE SECURITY AGENCY TO IDENTIFY 
THREATS TO INDUSTRIAL CONTROL SYS-
TEMS. 
(a) IN GENERAL.—Section 2209 of the Homeland 
Security Act of 2002 (6 U.S.C. 659) is amended— 
(1) in subsection (e)(1)— 
(A) in subparagraph (G), by striking 
‘‘and’’ after the semicolon; 
(B) in subparagraph (H), by inserting 
‘‘and’’ after the semicolon; and 
(C) by adding at the end the following new 
subparagraph: 
‘‘(I) activities of the Center address the se-
curity of both information technology and oper-
ational technology, including industrial control 
systems;’’; and 
(2) by adding at the end the following new sub-
section: 
‘‘(p) INDUSTRIAL CONTROL SYSTEMS.—The Director 
shall maintain capabilities to identify and address threats 
and vulnerabilities to products and technologies intended 
for use in the automated control of critical infrastructure 
VerDate Sep 11 2014 
01:27 Jul 22, 2021
Jkt 019200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H1833.RFS
H1833
pbinns on DSKJLVW7X2PROD with BILLS
HR 1833 RFS
processes. In carrying out this subsection, the Director 
shall— 
‘‘(1) lead Federal Government efforts, in con-
sultation with Sector Risk Management Agencies, as 
appropriate, to identify and mitigate cybersecurity 
threats to industrial control systems, including su-
pervisory control and data acquisition systems; 
‘‘(2) maintain threat hunting and incident re-
sponse capabilities to respond to industrial control 
system cybersecurity risks and incidents; 
‘‘(3) provide cybersecurity technical assistance 
to industry end-users, product manufacturers, Sector 
Risk Management Agencies, other Federal agencies, 
and other industrial control system stakeholders to 
identify, 
evaluate, 
assess, 
and 
mitigate 
vulnerabilities; 
‘‘(4) collect, coordinate, and provide vulner-
ability information to the industrial control systems 
community by, as appropriate, working closely with 
security researchers, industry end-users, product 
manufacturers, Sector Risk Management Agencies, 
other Federal agencies, and other industrial control 
systems stakeholders; and 
‘‘(5) conduct such other efforts and assistance 
as the Secretary determines appropriate.’’. 
VerDate Sep 11 2014 
01:27 Jul 22, 2021
Jkt 019200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H1833.RFS
H1833
pbinns on DSKJLVW7X2PROD with BILLS
HR 1833 RFS
(b) REPORT TO CONGRESS.—Not later than 180 days 
after the date of the enactment of this Act and every six 
months thereafter during the subsequent 4-year period, 
the Director of the Cybersecurity and Infrastructure Secu-
rity Agency of the Department of Homeland Security shall 
provide to the Committee on Homeland Security of the 
House of Representatives and the Committee on Home-
land Security and Governmental Affairs of the Senate a 
briefing on the industrial control systems capabilities of 
the Agency under section 2209 of the Homeland Security 
Act of 2002 (6 U.S.C. 659), as amended by subsection 
(a). 
(c) GAO REVIEW.—Not later than 2 years after the 
date of the enactment of this Act, the Comptroller General 
of the United States shall review implementation of the 
requirements of subsections (e)(1)(I) and (p) of section 
2209 of the Homeland Security Act of 2002 (6 U.S.C. 
659), as amended by subsection (a), and submit to the 
Committee on Homeland Security in the House of Rep-
resentatives and the Committee on Homeland Security 
and Government Affairs of the Senate a report containing 
findings and recommendations relating to such implemen-
tation. Such report shall include information on the fol-
lowing: 
VerDate Sep 11 2014 
01:27 Jul 22, 2021
Jkt 019200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H1833.RFS
H1833
pbinns on DSKJLVW7X2PROD with BILLS
HR 1833 RFS
(1) Any interagency coordination challenges to 
the ability of the Director of the Cybersecurity and 
Infrastructure Agency of the Department of Home-
land Security to lead Federal efforts to identify and 
mitigate cybersecurity threats to industrial control 
systems pursuant to subsection (p)(1) of such sec-
tion. 
(2) The degree to which the Agency has ade-
quate capacity, expertise, and resources to carry out 
threat hunting and incident response capabilities to 
mitigate cybersecurity threats to industrial control 
systems pursuant to subsection (p)(2) of such sec-
tion, as well as additional resources that would be 
needed to close any operational gaps in such capa-
bilities. 
(3) The extent to which industrial control sys-
tem stakeholders sought cybersecurity technical as-
sistance from the Agency pursuant to subsection 
(p)(3) of such section, and the utility and effective-
ness of such technical assistance. 
(4) The degree to which the Agency works with 
security researchers and other industrial control sys-
tems stakeholders, pursuant to subsection (p)(4) of 
VerDate Sep 11 2014 
01:27 Jul 22, 2021
Jkt 019200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H1833.RFS
H1833
pbinns on DSKJLVW7X2PROD with BILLS
HR 1833 RFS
such section, to provide vulnerability information to 
the industrial control systems community. 
Passed the House of Representatives July 20, 2021. 
Attest: 
CHERYL L. JOHNSON, 
Clerk. 
VerDate Sep 11 2014 
01:27 Jul 22, 2021
Jkt 019200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H1833.RFS
H1833
pbinns on DSKJLVW7X2PROD with BILLS