H. R. 302—439 
(1) When, where, why, how many, and for how long the 
National Deployment Force was deployed throughout the 12- 
month period covered by such report and the costs associated 
with such deployment. 
(2) A description of collaboration between the National 
Deployment Office and other components of the Department, 
other Federal agencies, and State and local transportation secu-
rity stakeholders. 
(3) The size of the National Deployment Force, including 
information on the staffing model of the National Deployment 
Force and adherence to such model as established by the 
Administrator. 
(4) Information on recruitment, appointment, and training 
activities, including processes utilized to attract, recruit, 
appoint, and train officers to serve on the National Deployment 
Force. 
SEC. 1989. INFORMATION SHARING AND CYBERSECURITY. 
(a) FEDERAL SECURITY DIRECTORS.—Section 44933 is amended 
by adding at the end the following: 
‘‘(c) INFORMATION SHARING.—Not later than 1 year after the 
date of the enactment of the TSA Modernization Act, the Adminis-
trator shall— 
‘‘(1) require each Federal Security Director of an airport 
to meet at least quarterly with the airport director, airport 
security coordinator, and law enforcement agencies serving each 
such airport to discuss incident management protocols, 
including the resolution of screening anomalies at passenger 
screening checkpoints; and 
‘‘(2) require each Federal Security Director at an airport 
to inform, consult, and coordinate, as appropriate, with the 
respective airport security coordinator in a timely manner on 
security matters impacting airport operations and to establish 
and maintain operational protocols with such airport operators 
to ensure coordinated responses to security matters.’’. 
(b) PLAN TO IMPROVE INFORMATION SHARING.— 
(1) IN GENERAL.—Not later than 180 days after the date 
of enactment of this Act, the Administrator shall develop a 
plan to improve intelligence information sharing with State 
and local transportation entities that includes best practices 
to ensure that the information shared is actionable, useful, 
and not redundant. 
(2) CONTENTS.—The plan required under paragraph (1) 
shall include the following: 
(A) The incorporation of best practices for information 
sharing. 
(B) The identification of areas of overlap and redun-
dancy. 
(C) An evaluation and incorporation of stakeholder 
input in the development of such plan. 
(D) The integration of any recommendations of the 
Comptroller General of the United States on information 
sharing. 
(3) SOLICITATION.—The Administrator shall solicit on an 
annual basis input from appropriate stakeholders, including 
State and local transportation entities, on the quality and
H. R. 302—440 
quantity of intelligence received by such stakeholders relating 
to information sharing. 
(c) BEST PRACTICES SHARING.— 
(1) IN GENERAL.—Not later than 180 days after the date 
of enactment of this Act, the Administrator shall establish 
a mechanism to share with State and local transportation enti-
ties best practices from across the law enforcement spectrum, 
including Federal, State, local, and tribal entities, that relate 
to employee training, employee professional development, tech-
nology development and deployment, hardening tactics, and 
passenger and employee awareness programs. 
(2) CONSULTATION.—The Administrator shall solicit and 
incorporate stakeholder input— 
(A) in developing the mechanism for sharing best prac-
tices as required under paragraph (1); and 
(B) not less frequently than annually on the quality 
and quantity of information such stakeholders receive 
through the mechanism established under such paragraph. 
(d) CYBERSECURITY.— 
(1) IN GENERAL.—The Administrator, in consultation with 
the Secretary, shall— 
(A) not later than 120 days after the date of enactment 
of this Act, implement the Framework for Improving Crit-
ical Infrastructure Cybersecurity (referred to in this section 
as the ‘‘Framework’’ developed by the National Institute 
of Standards and Technology, and any update to such 
Framework under section 2 of the National Institute of 
Standards and Technology Act (15 U.S.C. 272), to manage 
the agency’s cybersecurity risks; and 
(B) evaluate, on a periodic basis, but not less often 
than biennially, the use of the Framework under subpara-
graph (A). 
(2) CYBERSECURITY ENHANCEMENTS TO AVIATION SECURITY 
ACTIVITIES.—The Secretary, in consultation with the Secretary 
of Transportation, shall, upon request, conduct cybersecurity 
vulnerability assessments for airports and air carriers. 
(3) TSA TRUSTED TRAVELER AND CREDENTIALING PROGRAM 
CYBER EVALUATION.— 
(A) EVALUATION REQUIRED.—Not later than 120 days 
after the date of enactment of this Act, the Secretary 
shall— 
(i) evaluate the cybersecurity of TSA trusted trav-
eler and credentialing programs that contain personal 
information of specific individuals or information that 
identifies specific individuals, including the Transpor-
tation Worker Identification Credential and PreCheck 
programs; 
(ii) identify any cybersecurity risks under the pro-
grams described in clause (i); and 
(iii) develop remediation plans to address the 
cybersecurity risks identified under clause (ii). 
(B) SUBMISSION TO CONGRESS.—Not later than 30 days 
after the date the evaluation under subparagraph (A) is 
complete, the Secretary shall submit to the appropriate 
committees of Congress information relating to such 
evaluation, including any cybersecurity vulnerabilities 
identified 
and 
remediation 
plans 
to 
address 
such
H. R. 302—441 
vulnerabilities. Such submission shall be provided in a 
classified form. 
(4) DEFINITIONS.—In this subsection, the terms ‘‘cybersecu-
rity risk’’ and ‘‘incident’’ have the meanings given the terms 
in section 227 of the Homeland Security Act of 2002 (6 U.S.C. 
148). 
SEC. 1990. SECURITY TECHNOLOGIES TIED TO FOREIGN THREAT 
COUNTRIES. 
Not later than 180 days after the date of enactment of this 
Act, the Secretary shall submit to the appropriate committees of 
Congress an assessment of terrorist and other threats to the 
transportation sector, including surface transportation assets, posed 
by the use of security technologies, including software and 
networked technologies, developed or manufactured by firms that 
are owned or closely linked to the governments of countries that 
are known to pose a cyber or homeland security threat. 
Subtitle I—Conforming and Miscellaneous 
Amendments 
SEC. 1991. TITLE 49 AMENDMENTS. 
(a) DELETION OF DUTIES RELATED TO AVIATION SECURITY.— 
Section 106(g) is amended to read as follows: 
‘‘(g) DUTIES AND POWERS OF ADMINISTRATOR.—The Adminis-
trator shall carry out the following: 
‘‘(1) Duties and powers of the Secretary of Transportation 
under subsection (f) of this section related to aviation safety 
(except those related to transportation, packaging, marking, 
or description of hazardous material) and stated in the fol-
lowing: 
‘‘(A) Section 308(b). 
‘‘(B) Subsections (c) and (d) of section 1132. 
‘‘(C) Sections 40101(c), 40103(b), 40106(a), 40108, 
40109(b), 40113(a), 40113(c), 40113(d), 40113(e), and 
40114(a). 
‘‘(D) Chapter 445, except sections 44501(b), 44502(a)(2), 
44502(a)(3), 44502(a)(4), 44503, 44506, 44509, 44510, 
44514, and 44515. 
‘‘(E) Chapter 447, except sections 44717, 44718(a), 
44718(b), 44719, 44720, 44721(b), 44722, and 44723. 
‘‘(F) Chapter 451. 
‘‘(G) Chapter 453. 
‘‘(H) Section 46104. 
‘‘(I) Subsections (d) and (h)(2) of section 46301 and 
sections 46303(c), 46304 through 46308, 46310, 46311, and 
46313 through 46316. 
‘‘(J) Chapter 465. 
‘‘(K) Sections 47504(b) (related to flight procedures), 
47508(a), and 48107. 
‘‘(2) Additional duties and powers prescribed by the Sec-
retary of Transportation.’’. 
(b) TRANSPORTATION SECURITY OVERSIGHT BOARD.—Section 115 
is amended—
H. R. 302—442 
(1) in subsection (c)(1), by striking ‘‘Under Secretary of 
Transportation for security’’ and inserting ‘‘Administrator of 
the Transportation Security Administration’’; and 
(2) in subsection (c)(6), by striking ‘‘Under Secretary’’ and 
inserting ‘‘Administrator’’. 
(c) CHAPTER 401 AMENDMENTS.—Chapter 401 is amended— 
(1) in section 40109— 
(A) in subsection (b), by striking ‘‘, 40119, 44901, 44903, 
44906, and 44935–44937’’; and 
(B) in subsection (c), by striking ‘‘sections 44909 and’’ 
and inserting ‘‘sections 44909(a), 44909(b), and’’; 
(2) in section 40113— 
(A) in subsection (a)— 
(i) by striking ‘‘the Under Secretary of Transpor-
tation for Security with respect to security duties and 
powers designated to be carried out by the Under 
Secretary or’’ and inserting ‘‘the Administrator of the 
Transportation Security Administration with respect 
to security duties and powers designated to be carried 
out by that Administrator or’’; 
(ii) by striking ‘‘carried out by the Administrator’’ 
and inserting ‘‘carried out by that Administrator’’; and 
(iii) by striking ‘‘, Under Secretary, or Adminis-
trator,’’ and inserting ‘‘, Administrator of the Transpor-
tation Security Administration, or Administrator of the 
Federal Aviation Administration,’’; and 
(B) in subsection (d)— 
(i) by striking ‘‘Under Secretary of Transportation 
for Security or the’’; 
(ii) by striking ‘‘Transportation Security Adminis-
tration or Federal Aviation Administration, as the case 
may be,’’ and inserting ‘‘Federal Aviation Administra-
tion’’; and 
(iii) by striking ‘‘Under Secretary or Administrator, 
as the case may be,’’ and inserting ‘‘Administrator’’; 
(3) by striking section 40119; and 
(4) in the table of contents, by striking the item relating 
to section 40119 and inserting the following: 
‘‘40119. [Reserved].’’. 
(d) CHAPTER 449 AMENDMENTS.—Chapter 449 is amended— 
(1) in section 44901— 
(A) in subsection (a)— 
(i) by striking ‘‘Under Secretary of Transportation 
for Security’’ and inserting ‘‘Administrator of the 
Transportation Security Administration’’; and 
(ii) by striking ‘‘, United States Code’’; 
(B) in subsection (c), by striking ‘‘but not later than 
the 60th day following the date of enactment of the Aviation 
and Transportation Security Act’’; 
(C) in subsection (d)— 
(i) in paragraph (1)— 
(I) in the matter preceding subparagraph (A), 
by striking ‘‘Under Secretary of Transportation for 
Security’’ and inserting ‘‘Administrator of the 
Transportation Security Administration’’; and
H. R. 302—443 
(II) in subparagraph (A), by striking ‘‘no later 
than December 31, 2002’’; 
(ii) by striking paragraphs (2) and (3); 
(iii) by redesignating paragraph (4) as paragraph 
(2); and 
(iv) in paragraph (2), as redesignated— 
(I) in subparagraph (A), by striking ‘‘Assistant 
Secretary (Transportation Security Administra-
tion)’’ 
and 
inserting 
‘‘Administrator 
of 
the 
Transportation Security Administration’’; 
(II) in subparagraph (B), by striking ‘‘Assistant 
Secretary’’ and inserting ‘‘Administrator of the 
Transportation Security Administration’’; and 
(III) in subparagraph (D)— 
(aa) by striking ‘‘Assistant Secretary’’ the 
first place it appears and inserting ‘‘Adminis-
trator of the Transportation Security Adminis-
tration’’; and 
(bb) by striking ‘‘Assistant Secretary’’ the 
second 
place 
it 
appears 
and 
inserting 
‘‘Administrator’’; 
(D) in subsection (e)— 
(i) in that matter preceding paragraph (1)— 
(I) by striking ‘‘but not later than the 60th 
day following the date of enactment of the Aviation 
and Transportation Security Act’’; and 
(II) 
by 
striking 
‘‘Under 
Secretary’’ 
and 
inserting ‘‘Administrator of the Transportation 
Security Administration’’; and 
(ii) in paragraph (4), by striking ‘‘Under Secretary’’ 
and inserting ‘‘Administrator’’; 
(E) in subsection (f), by striking ‘‘after the date of 
enactment of the Aviation and Transportation Security 
Act’’; 
(F) in subsection (g)— 
(i) in paragraph (1), by striking ‘‘Not later than 
3 years after the date of enactment of the Imple-
menting Recommendations of the 9/11 Commission Act 
of 2007, the’’ and inserting ‘‘The’’; 
(ii) in paragraph (2), by striking ‘‘as follows:’’ and 
all that follows and inserting a period; 
(iii) by amending paragraph (3) to read as follows: 
‘‘(3) REGULATIONS.—The Secretary of Homeland Security 
shall issue a final rule as a permanent regulation to implement 
this subsection in accordance with the provisions of chapter 
5 of title 5.’’; 
(iv) by striking paragraph (4); and 
(v) by redesignating paragraph (5) as paragraph 
(4); 
(G) in subsection (h)— 
(i) in paragraph (1), by striking ‘‘Under Secretary’’ 
and inserting ‘‘Administrator of the Transportation 
Security Administration’’; and 
(ii) in paragraph (2)— 
(I) by striking ‘‘Under Secretary’’ the first place 
it appears and inserting ‘‘Administrator of the 
Transportation Security Administration’’; and