‘‘(II) aid in the detection and 
warning of attacks on, and in the res-
toration of, physical security infra-
structure in the aftermath of attacks 
on the national physical infrastruc-
ture; 
‘‘(ii) a national physical infrastructure 
vulnerability reduction program that iden-
tifies vulnerabilities of critical infrastruc-
ture, performs vulnerability assessments on 
infrastructure systems and technologies, 
and coordinates the mitigation of such 
vulnerabilities; and 
‘‘(iii) a program to coordinate and 
consult with Federal, State, and local gov-
ernments to enhance their physical security 
programs. 
‘‘(B) To coordinate with other directorates 
and offices within the Department on infra-
structure security. 
‘‘(C) To coordinate with the Under Sec-
retary for Preparedness and Response to ensure 
that the National Response Plan developed pur-
suant to section 502(6) includes appropriate
measures for the recovery of the physical infra-
structure elements. 
‘‘(D) To develop processes for sharing in-
formation with state and local governments, 
and, if appropriate, the private sector, to— 
‘‘(i) promote voluntary infrastructure 
security best practices, standards, and 
benchmarks that are responsive to rapid 
technology changes and to the security 
needs of critical infrastructure; and 
‘‘(ii) consider the roles of Federal, 
State, local, and foreign governments and 
the private sector, including the insurance 
industry and auditors. 
‘‘(E) To consult with the Under Secretary 
for Preparedness and Response to ensure that 
realistic infrastructure security scenarios are in-
corporated into tabletop and recovery exercises. 
‘‘(F) To consult and coordinate, as appro-
priate, with other Federal agencies on pro-
grams, policies, and operations related to infra-
structure security. 
‘‘(G) To advise the Under Secretary for 
Preparedness and Response on any regulatory
authority that is needed in order to fulfill the 
responsibilities listed in this section. 
‘‘(H) To carry out comprehensive assess-
ments of the vulnerabilities of the key resources 
and critical infrastructure of the United States, 
including the performance of risk assessments 
to determine the risks posed by particular types 
of terrorist attacks within the United States 
(including an assessment of the probability of 
success of such attacks and the feasibility and 
potential efficacy of various countermeasures to 
such attacks). 
‘‘(I) To develop a comprehensive national 
plan for securing the key resources and critical 
infrastructure of the United States, including 
power production, generation, and distribution 
systems, information technology and tele-
communications systems (including satellites), 
electronic financial and property record storage 
and transmission systems, emergency prepared-
ness communications systems, and the physical 
and technological assets that support such sys-
tems. 
‘‘(J) To recommend measures necessary to 
protect the key resources and critical infra-
structure of the United States in coordination 
with other agencies of the Federal Government 
and in cooperation with State and local govern-
ment agencies and authorities, the private sec-
tor, and other entities. 
‘‘(K) To perform such other duties relating 
to such responsibilities as the Secretary may 
provide. 
‘‘(3) 
CONSULTATION
WITH
CHIEF
INTEL-
LIGENCE
OFFICER.—Subject to the direction and 
control of the Secretary, the Assistant Secretary for 
Physical Infrastructure Security shall consult with 
the Chief Intelligence Officer on the following re-
sponsibilities: 
‘‘(A) To integrate relevant information, 
analyses, and vulnerability assessments (wheth-
er such information, analyses, or assessments 
are provided or produced by the Department or 
others) in order to identify priorities for protec-
tive and support measures by the Department, 
other agencies of the Federal Government, 
State and local government agencies. 
‘‘(B) To ensure, in conjunction with the 
Chief Information Officer of the Department,
that any information databases and analytical 
tools developed or utilized by the Department— 
‘‘(i) are compatible with one another 
and with relevant information databases of 
other agencies of the Federal Government; 
and 
‘‘(ii) treat information in such data-
bases in a manner that complies with ap-
plicable Federal law on privacy. 
‘‘(C) To coordinate with elements of the 
intelligence community and with Federal, State, 
and local law enforcement agencies, and the pri-
vate sector, as appropriate.’’. 
(b) REPORTS REQUIRED.— 
(1) REPORT ON CERTAIN VULNERABILITIES.— 
(A) IN GENERAL.—Not later than Decem-
ber 30, 2005, the Assistant Secretary for Phys-
ical Infrastructure Security of the Department 
of Homeland Security, in coordination with the 
Chief Intelligence Officer of the Department of 
Homeland Security and appropriate personnel 
charged with infrastructure protection and 
emergency preparedness and response for the 
Department, shall submit to the President and 
Congress a comprehensive report assessing the
vulnerabilities of the key resources and critical 
infrastructure of the United States. 
(B) METHODOLOGY.—The report shall be 
based on commonly accepted risk-assessment 
methodologies and shall prioritize vulnerabilities 
based upon actual and prospective threats so 
that appropriate protective and support meas-
ures can be taken. To the extent possible, the 
report should include not only a general 
prioritization of vulnerabilities but also a 
prioritization of vulnerabilities by resource and 
infrastructure sector. 
(c) CLERICAL AMENDMENT.—The table of contents 
in section 1(b) of such Act is amended by adding after 
the items relating to title V the following new item: 
‘‘Sec. 514. Assistant Secretary for Physical Infrastructure Security.’’. 
SEC. 116. UNDER SECRETARY FOR POLICY. 
Section 103(a) of such Act is amended— 
(1) by redesignating paragraphs (6) through 
(10) as paragraphs (7) through (11), accordingly; 
and 
(2) by inserting after paragraph (5) the fol-
lowing new paragraph (6): 
‘‘(6) An Under Secretary for Policy.’’.