I 
111TH CONGRESS 
2D SESSION 
H. R. 6351 
To establish the Executive Cyber Director in the Executive Office of the 
President, to clarify the authority of the Secretary of Homeland Security 
and the Executive Cyber Director with respect to critical information 
infrastructure policy creation, verification, and enforcement measures, 
and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
SEPTEMBER 29, 2010 
Mr. LANGEVIN (for himself, Mr. RUPPERSBERGER, and Mr. BARTLETT) intro-
duced the following bill; which was referred to the Committee on Home-
land Security, and in addition to the Committee on Oversight and Gov-
ernment Reform, for a period to be subsequently determined by the 
Speaker, in each case for consideration of such provisions as fall within 
the jurisdiction of the committee concerned 
A BILL 
To establish the Executive Cyber Director in the Executive 
Office of the President, to clarify the authority of the 
Secretary of Homeland Security and the Executive Cyber 
Director with respect to critical information infrastruc-
ture policy creation, verification, and enforcement meas-
ures, and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
VerDate Mar 15 2010 
23:15 Oct 13, 2010
Jkt 099200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H6351.IH
H6351
emcdonald on DSK2BSOYB1PROD with BILLS
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Strengthening Cyber-
security for Critical Infrastructure Act’’. 
SEC. 2. DEFINITIONS. 
In this Act— 
(1) the term ‘‘critical information infrastruc-
ture’’ means the electronic information and commu-
nications systems, software, and assets that control, 
protect, process, transmit, receive, program, or store 
information in any form, including data, voice, and 
video, relied upon by critical infrastructure, indus-
trial control systems such as, but not limited to, su-
pervisory control and data acquisition systems, and 
programmable logic controllers. This shall also in-
clude such systems of the Federal Government; 
(2) the term ‘‘critical infrastructure’’ has the 
meaning given that term in section 2 of the Home-
land Security Act of 2002 (6 U.S.C. 101); and 
(3) the term ‘‘Secretary’’ means the Secretary 
of Homeland Security. 
SEC. 3. AUTHORITY OF SECRETARY. 
(a) IN GENERAL.—The Secretary shall have primary 
authority in the executive branch of the Federal Govern-
ment in creation, verification, and enforcement of meas-
ures with respect to the protection of critical information 
infrastructure, including promulgating risk-informed in-
VerDate Mar 15 2010 
23:15 Oct 13, 2010
Jkt 099200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H6351.IH
H6351
emcdonald on DSK2BSOYB1PROD with BILLS
formation security practices and standards applicable to 
critical information infrastructures that are not owned by 
or under the direct control of the Federal Government. 
These efforts shall be carried out with the consultation 
of appropriate private sector bodies, including private 
owners and operators of the infrastructure affected by 
these measures. 
(b) OTHER FEDERAL AGENCIES.—In establishing 
measures with respect to the protection of critical informa-
tion infrastructure the Secretary shall— 
(1) consult with the Secretary of Commerce, the 
Secretary of Defense, the National Institute of 
Standards and Technology, and other sector specific 
Federal regulatory agencies in exercising the author-
ity referred to in subsection (a); and 
(2) coordinate, through the Executive Office of 
the President, with sector specific Federal regulatory 
agencies, including the Federal Energy Regulatory 
Commission, in establishing enforcement mecha-
nisms under the authority referred to in subsection 
(a). 
(c) AUDITING AUTHORITY.—The Secretary may— 
(1) conduct such audits as are necessary to en-
sure that appropriate measures are taken to secure 
critical information infrastructure; 
VerDate Mar 15 2010 
23:15 Oct 13, 2010
Jkt 099200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H6351.IH
H6351
emcdonald on DSK2BSOYB1PROD with BILLS
(2) issue such subpoenas as are necessary to 
determine compliance with Federal regulatory re-
quirements for securing critical information infra-
structure; and 
(3) authorize sector specific Federal regulatory 
agencies to undertake such audits. 
SEC. 4. ESTABLISHMENT AND AUTHORITY OF EXECUTIVE 
CYBER DIRECTOR. 
(a) ESTABLISHMENT.—There is established within 
the Executive Office of the President an office to be known 
as the National Office for Cyberspace. There shall be at 
the head of the Office the Executive Cyber Director, who 
shall be appointed by the President by and with the advice 
and consent of the Senate. 
(b) AUTHORITY.—The Executive Cyber Director 
shall have primary authority in the executive branch of 
the Federal Government in leading interagency coordina-
tion on security policies relating to the creation, 
verification, and enforcement of measures to protect crit-
ical information infrastructure. 
Æ 
VerDate Mar 15 2010 
23:15 Oct 13, 2010
Jkt 099200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6301
E:\BILLS\H6351.IH
H6351
emcdonald on DSK2BSOYB1PROD with BILLS