113 
HR 1560 RFS
universities, colleges, national laboratories, and pri-
vate industry; 
‘‘(3) the heads of other relevant Federal depart-
ments and agencies that conduct research and devel-
opment relating to critical infrastructure protection; 
and 
‘‘(4) State, local, and tribal governments, as ap-
propriate.’’. 
(b) CLERICAL AMENDMENT.—The table of contents 
of the Homeland Security Act of 2002 is amended by in-
serting after the item relating to section 317 the following 
new item: 
‘‘Sec. 318. Research and development strategy for critical infrastructure protec-
tion.’’. 
SEC. 209. REPORT ON REDUCING CYBERSECURITY RISKS IN 
DHS DATA CENTERS. 
Not later than 1 year after the date of the enactment 
of this title, the Secretary of Homeland Security shall sub-
mit to the Committee on Homeland Security of the House 
of Representatives and the Committee on Homeland Secu-
rity and Governmental Affairs of the Senate a report on 
the feasibility of the Department of Homeland Security 
creating an environment for the reduction in cybersecurity 
risks in Department data centers, including by increasing 
compartmentalization between systems, and providing a 
mix of security controls between such compartments. 
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00113
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS
114 
HR 1560 RFS
SEC. 210. ASSESSMENT. 
Not later than 2 years after the date of the enact-
ment of this title, the Comptroller General of the United 
States shall submit to the Committee on Homeland Secu-
rity of the House of Representatives and the Committee 
on Homeland Security and Governmental Affairs of the 
Senate a report that contains an assessment of the imple-
mentation by the Secretary of Homeland Security of this 
title and the amendments made by this title and, to the 
extent practicable, findings regarding increases in the 
sharing of cyber threat indicators, defensive measures, 
and information relating to cybersecurity risks and inci-
dents at the National Cybersecurity and Communications 
Integration Center and throughout the United States. 
SEC. 211. CONSULTATION. 
The Under Secretary for Cybersecurity and Infra-
structure Protection shall produce a report on the feasi-
bility of creating a risk-informed prioritization plan should 
multiple critical infrastructures experience cyber incidents 
simultaneously. 
SEC. 212. TECHNICAL ASSISTANCE. 
The Inspector General of the Department of Home-
land Security shall review the operations of the United 
States Computer Emergency Readiness Team (US– 
CERT) and the Industrial Control Systems Cyber Emer-
gency Response Team (ICS–CERT) to assess the capacity 
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00114
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS
115 
HR 1560 RFS
to provide technical assistance to non-Federal entities and 
to adequately respond to potential increases in requests 
for technical assistance. 
SEC. 213. PROHIBITION ON NEW REGULATORY AUTHORITY. 
Nothing in this title or the amendments made by this 
title may be construed to grant the Secretary of Homeland 
Security any authority to promulgate regulations or set 
standards relating to the cybersecurity of non-Federal en-
tities, not including State, local, and tribal governments, 
that was not in effect on the day before the date of the 
enactment of this title. 
SEC. 214. SUNSET. 
Any requirements for reports required by this title 
or the amendments made by this title shall terminate on 
the date that is 7 years after the date of the entitlement 
of this title. 
SEC. 215. PROHIBITION ON NEW FUNDING. 
No funds are authorized to be appropriated to carry 
out this title and the amendments made by this title. This 
title and such amendments shall be carried out using 
amounts appropriated or otherwise made available for 
such purposes. 
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00115
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS
116 
HR 1560 RFS
SEC. 216. PROTECTION OF FEDERAL INFORMATION SYS-
TEMS. 
(a) IN GENERAL.—Subtitle C of title II of the Home-
land Security Act of 2002 (6 U.S.C. 141 et seq.) is amend-
ed by adding at the end the following new section: 
‘‘SEC. 233. AVAILABLE PROTECTION OF FEDERAL INFORMA-
TION SYSTEMS. 
‘‘(a) IN GENERAL.—The Secretary shall deploy and 
operate, to make available for use by any Federal agency, 
with or without reimbursement, capabilities to protect 
Federal agency information and information systems, in-
cluding technologies to continuously diagnose, detect, pre-
vent, and mitigate against cybersecurity risks (as such 
term is defined in the second section 226) involving Fed-
eral agency information or information systems. 
‘‘(b) ACTIVITIES.—In carrying out this section, the 
Secretary may— 
‘‘(1) access, and Federal agency heads may dis-
close to the Secretary or a private entity providing 
assistance to the Secretary under paragraph (2), in-
formation traveling to or from or stored on a Fed-
eral agency information system, regardless of from 
where the Secretary or a private entity providing as-
sistance to the Secretary under paragraph (2) ac-
cesses such information, notwithstanding any other 
provision of law that would otherwise restrict or pre-
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00116
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS
117 
HR 1560 RFS
vent Federal agency heads from disclosing such in-
formation to the Secretary or a private entity pro-
viding assistance to the Secretary under paragraph 
(2); 
‘‘(2) enter into contracts or other agreements, 
or otherwise request and obtain the assistance of, 
private entities to deploy and operate technologies in 
accordance with subsection (a); and 
‘‘(3) retain, use, and disclose information ob-
tained through the conduct of activities authorized 
under this section only to protect Federal agency in-
formation and information systems from cybersecu-
rity risks, or, with the approval of the Attorney Gen-
eral and if disclosure of such information is not oth-
erwise prohibited by law, to law enforcement only to 
investigate, prosecute, disrupt, or otherwise respond 
to— 
‘‘(A) a violation of section 1030 of title 18, 
United States Code; 
‘‘(B) an imminent threat of death or seri-
ous bodily harm; 
‘‘(C) a serious threat to a minor, including 
sexual exploitation or threats to physical safety; 
or 
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00117
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS
119 
HR 1560 RFS
cybersecurity recruitment and retention) the following new 
item: 
‘‘Sec. 233. Available protection of Federal information systems.’’. 
SEC. 217. SUNSET. 
This title and the amendments made by this title 
shall terminate on the date that is 7 years after the date 
of the enactment of this title. 
SEC. 218. REPORT ON CYBERSECURITY VULNERABILITIES 
OF UNITED STATES PORTS. 
Not later than 180 days after the date of the enact-
ment of this title, the Secretary of Homeland Security 
shall submit to the Committee on Homeland Security and 
the Committee on Transportation and Infrastructure of 
the House of Representatives and the Committee on 
Homeland Security and Governmental Affairs and the 
Committee on Commerce, Science and Transportation of 
the Senate a report on cybersecurity vulnerabilities for the 
ten United States ports that the Secretary determines are 
at greatest risk of a cybersecurity incident and provide 
recommendations to mitigate such vulnerabilities. 
SEC. 219. REPORT ON CYBERSECURITY AND CRITICAL IN-
FRASTRUCTURE. 
The Secretary of Homeland Security may consult 
with sector specific agencies, businesses, and stakeholders 
to produce and submit to the Committee on Homeland Se-
curity of the House of Representatives and the Committee 
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00119
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS
120 
HR 1560 RFS
on Homeland Security and Governmental Affairs of the 
Senate a report on how best to align federally funded cy-
bersecurity research and development activities with pri-
vate sector efforts to protect privacy and civil liberties 
while assuring security and resilience of the Nation’s crit-
ical infrastructure, including— 
(1) promoting research and development to en-
able the secure and resilient design and construction 
of critical infrastructure and more secure accom-
panying cyber technology; 
(2) enhancing modeling capabilities to deter-
mine potential impacts on critical infrastructure of 
incidents or threat scenarios, and cascading effects 
on other sectors; and 
(3) facilitating initiatives to incentivize cyberse-
curity investments and the adoption of critical infra-
structure design features that strengthen cybersecu-
rity and resilience. 
SEC. 220. GAO REPORT ON IMPACT PRIVACY AND CIVIL LIB-
ERTIES. 
Not later than 60 months after the date of the enact-
ment of this title, the Comptroller General of the United 
States shall submit to the Committee on Homeland Secu-
rity of the House of Representatives and the Committee 
on Homeland Security and Governmental Affairs of the 
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00120
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS
121 
HR 1560 RFS
Senate an assessment on the impact on privacy and civil 
liberties limited to the work of the National Cybersecurity 
and Communications Integration Center. 
Passed the House of Representatives April 22, 2015. 
Attest: 
KAREN L. HAAS, 
Clerk. 
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00121
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS