H. R. 7776—1246 
SEC. 
7122. 
INDUSTRIAL 
CONTROL 
SYSTEMS 
CYBERSECURITY 
TRAINING. 
(a) IN GENERAL.—Subtitle A of title XXII of the Homeland 
Security Act of 2002 (6 U.S.C. 651 et seq.) is amended by adding 
at the end the following new section: 
‘‘SEC. 
2220E. 
INDUSTRIAL 
CONTROL 
SYSTEMS 
CYBERSECURITY 
TRAINING INITIATIVE. 
‘‘(a) ESTABLISHMENT.— 
‘‘(1) IN GENERAL.—The Industrial Control Systems Cyberse-
curity Training Initiative (in this section referred to as the 
‘Initiative’) is established within the Agency. 
‘‘(2) PURPOSE.—The purpose of the Initiative is to develop 
and strengthen the skills of the cybersecurity workforce related 
to securing industrial control systems. 
‘‘(b) REQUIREMENTS.—In carrying out the Initiative, the Director 
shall— 
‘‘(1) ensure the Initiative includes— 
‘‘(A) virtual and in-person trainings and courses pro-
vided at no cost to participants; 
‘‘(B) trainings and courses available at different skill 
levels, including introductory level courses; 
‘‘(C) trainings and courses that cover cyber defense 
strategies for industrial control systems, including an 
understanding of the unique cyber threats facing industrial 
control 
systems 
and 
the 
mitigation 
of 
security 
vulnerabilities in industrial control systems technology; and 
‘‘(D) appropriate consideration regarding the avail-
ability of trainings and courses in different regions of the 
United States; and 
‘‘(2) engage in— 
‘‘(A) collaboration with the National Laboratories of 
the Department of Energy in accordance with section 309; 
‘‘(B) consultation with Sector Risk Management Agen-
cies; 
‘‘(C) as appropriate, consultation with private sector 
entities with relevant expertise, such as vendors of indus-
trial control systems technologies; and 
‘‘(3) consult, to the maximum extent practicable, with 
commercial training providers and academia to minimize the 
potential for duplication of other training opportunities. 
‘‘(c) REPORTS.— 
‘‘(1) IN GENERAL.—Not later than one year after the date 
of the enactment of this section and annually thereafter, the 
Director shall submit to the Committee on Homeland Security 
of the House of Representatives and the Committee on Home-
land Security and Governmental Affairs of the Senate a report 
on the Initiative. 
‘‘(2) CONTENTS.—Each report submitted under paragraph 
(1) shall include the following: 
‘‘(A) A description of the courses provided under the 
Initiative. 
‘‘(B) A description of outreach efforts to raise awareness 
of the availability of such courses. 
‘‘(C) The number of participants in each course.
H. R. 7776—1247 
‘‘(D) Voluntarily provided information on the demo-
graphics of participants in such courses, including by sex, 
race, and place of residence. 
‘‘(E) Information on the participation in such courses 
of workers from each critical infrastructure sector. 
‘‘(F) Plans for expanding access to industrial control 
systems education and training, including expanding access 
to 
women 
and 
underrepresented 
populations, 
and 
expanding access to different regions of the United States. 
‘‘(G) Recommendations regarding how to strengthen 
the state of industrial control systems cybersecurity edu-
cation and training.’’. 
(b) CLERICAL AMENDMENT.—The table of contents in section 
1(b) of the Homeland Security Act of 2002 is amended by inserting 
after the item relating to section 2220D the following new item: 
‘‘Sec. 2220E. Industrial Control Systems Cybersecurity Training Initiative.’’. 
SEC. 7123. NATIONAL COMPUTER FORENSICS INSTITUTE REAUTHOR-
IZATION. 
Section 822 of the Homeland Security Act of 2002 (6 U.S.C. 
383) is amended— 
(1) in subsection (a)— 
(A) in the subsection heading, by striking ‘‘IN GENERAL’’ 
and inserting ‘‘IN GENERAL; MISSION’’; 
(B) by striking ‘‘2017 through 2022’’ and inserting 
‘‘2023 through 2028’’; and 
(C) by striking the second sentence and inserting ‘‘The 
Institute’s mission shall be to educate, train, and equip 
State, local, territorial, and Tribal law enforcement officers, 
prosecutors, and judges, as well as participants in the 
United States Secret Service’s network of cyber fraud task 
forces who are Federal employees, members of the uni-
formed services, or State, local, Tribal, or territorial 
employees, regarding the investigation and prevention of 
cybersecurity incidents, electronic crimes, and related 
cybersecurity threats, including through the dissemination 
of homeland security information, in accordance with rel-
evant Federal law regarding privacy, civil rights, and civil 
liberties protections.’’; 
(2) by amending subsection (b) to read as follows: 
‘‘(b) CURRICULUM.—In furtherance of subsection (a), all edu-
cation and training of the Institute shall be conducted in accordance 
with relevant Federal law regarding privacy, civil rights, and civil 
liberties protections. Education and training provided pursuant to 
subsection (a) shall relate to the following: 
‘‘(1) Investigating and preventing cybersecurity incidents, 
electronic crimes, and related cybersecurity threats, including 
relating to instances involving illicit use of digital assets and 
emerging trends in cybersecurity and electronic crime. 
‘‘(2) Conducting forensic examinations of computers, mobile 
devices, and other information systems. 
‘‘(3) Prosecutorial and judicial considerations related to 
cybersecurity incidents, electronic crimes, related cybersecurity 
threats, and forensic examinations of computers, mobile devices, 
and other information systems. 
‘‘(4) Methods to obtain, process, store, and admit digital 
evidence in court.’’.
H. R. 7776—1248 
(3) in subsection (c)— 
(A) by striking ‘‘cyber and electronic crime and related 
threats is shared with State, local, tribal, and territorial 
law enforcement officers and prosecutors’’ and inserting 
‘‘cybersecurity incidents, electronic crimes, and related 
cybersecurity threats is shared with recipients of education 
and training provided pursuant to subsection (a)’’; and 
(B) by adding at the end the following new sentence: 
‘‘When selecting participants for such training, the Institute 
shall prioritize, to the extent reasonable and practicable, 
providing education and training to individuals from geo-
graphically-diverse jurisdictions throughout the United 
States, and the Institute shall prioritize, to the extent 
reasonable and practicable, State, local, tribal, and terri-
torial law enforcement officers, prosecutors, judges, and 
other employees.’’; 
(4) in subsection (d)— 
(A) by striking ‘‘State, local, tribal, and territorial law 
enforcement officers’’ and inserting ‘‘recipients of education 
and training provided pursuant to subsection (a)’’; and 
(B) by striking ‘‘necessary to conduct cyber and elec-
tronic crime and related threat investigations and computer 
and mobile device forensic examinations’’ and inserting 
‘‘for investigating and preventing cybersecurity incidents, 
electronic crimes, and related cybersecurity threats, and 
for forensic examinations of computers, mobile devices, and 
other information systems’’; 
(5) in subsection (e)— 
(A) by amending the heading to read as follows: ‘‘CYBER 
FRAUD TASK FORCES’’; 
(B) by striking ‘‘Electronic Crime’’ and inserting ‘‘Cyber 
Fraud’’; 
(C) by striking ‘‘State, local, tribal, and territorial law 
enforcement officers’’ and inserting ‘‘recipients of education 
and training provided pursuant to subsection (a)’’; and 
(D) by striking ‘‘at’’ and inserting ‘‘by’’; and 
(6) by inserting after subsection (f) the following new sub-
sections: 
‘‘(g) EXPENSES.—The Director of the United States Secret 
Service may pay for all or a part of the education, training, or 
equipment provided by the Institute, including relating to the travel, 
transportation, and subsistence expenses of recipients of education 
and training provided pursuant to subsection (a). 
‘‘(h) ANNUAL REPORTS TO CONGRESS.— 
‘‘(1) IN
GENERAL.—The Secretary shall include in the 
annual report required under section 1116 of title 31, United 
States Code, information regarding the activities of the 
Institute, including, where possible, the following: 
‘‘(A) An identification of jurisdictions with recipients 
of the education and training provided pursuant to sub-
section (a) during such year. 
‘‘(B) Information relating to the costs associated with 
that education and training. 
‘‘(C) Any information regarding projected future 
demand for the education and training provided pursuant 
to subsection (a).
H. R. 7776—1249 
‘‘(D) Impacts of the activities of the Institute on the 
capability of jurisdictions to investigate and prevent cyber-
security incidents, electronic crimes, and related cybersecu-
rity threats. 
‘‘(E) A description of the nomination process for poten-
tial recipients of the information and training provided 
pursuant to subsection (a). 
‘‘(F) Any other issues determined relevant by the Sec-
retary. 
‘‘(2) EXCEPTION.—Any information required under para-
graph (1) that is submitted as part of the annual budget sub-
mitted by the President to Congress under section 1105 of 
title 31, United States Code, is not required to be included 
in the report required under paragraph (1). 
‘‘(i) DEFINITIONS.—In this section: 
‘‘(1) CYBERSECURITY
THREAT.—The term ‘cybersecurity 
threat’ has the meaning given such term in section 102 of 
the Cybersecurity Act of 2015 (enacted as division N of the 
Consolidated Appropriations Act, 2016 (Public Law 114–113; 
6 U.S.C. 1501)). 
‘‘(2) INCIDENT.—The term ‘incident’ has the meaning given 
such term in section 2209(a). 
‘‘(3) INFORMATION SYSTEM.—The term ‘information system’ 
has the meaning given such term in section 102 of the Cyberse-
curity Act of 2015 (enacted as division N of the Consolidated 
Appropriations Act, 2016 (Public Law 114–113; 6 U.S.C. 
1501(9))).’’. 
SEC. 7124. REPORT ON CYBERSECURITY ROLES AND RESPONSIBIL-
ITIES OF THE DEPARTMENT OF HOMELAND SECURITY. 
(a) IN GENERAL.—Not later than one year after the date of 
the enactment of this Act, the Secretary of Homeland Security, 
in coordination with the Director of the Cybersecurity and Infra-
structure Security Agency of the Department of Homeland Security, 
shall submit to the Committee on Homeland Security of the House 
of Representatives and the Committee on Homeland Security and 
Governmental Affairs of the Senate a report on the roles and 
responsibilities of the Department and its components relating to 
cyber incident response. 
(b) CONTENTS.—The report required under subsection (a) shall 
include the following: 
(1) A review of how the cyber incident response plans 
under section 2210(c) of the Homeland Security Act of 2002 
(6 U.S.C. 660(c)) are utilized in the Federal Government’s 
response to a cyber incident. 
(2) An explanation of the roles and responsibilities of the 
Department of Homeland Security and its components with 
responsibility for, or in support of, the Federal Government’s 
response to a cyber incident, including primary responsibility 
for working with impacted private sector entities. 
(3) An explanation of which and how authorities of the 
Department and its components are utilized in the Federal 
Government’s response to a cyber incident. 
(4) Recommendations to provide further clarity for roles 
and responsibilities of the Department and its components 
relating to cyber incident response.
H. R. 7776—1250 
Subtitle D—Enhancing Transportation and 
Border Security Operations 
SEC. 7131. TSA REACHING ACROSS NATIONALITIES, SOCIETIES, AND 
LANGUAGES TO ADVANCE TRAVELER EDUCATION. 
(a) IN GENERAL.—Not later than 180 days after the date of 
the enactment of this Act, the Administrator of the Transportation 
Security Administration (TSA) shall submit to the Committee on 
Homeland Security of the House of Representatives and the Com-
mittee on Commerce, Science, and Transportation of the Senate 
a plan to ensure that TSA material disseminated in major airports 
can be better understood by more people accessing such airports. 
(b) CONTENTS.—The plan required under subsection (a) shall 
include the following: 
(1) An identification of the most common languages other 
than English that are the primary languages of individuals 
that travel through or work in each major airport. 
(2) A plan to improve— 
(A) TSA materials to communicate information in lan-
guages identified pursuant to paragraph (1); and 
(B) the communication of TSA material to individuals 
with vision or hearing impairments or other possible bar-
riers to understanding such material. 
(c) CONSIDERATIONS.—In developing the plan required under 
subsection (a), the Administrator of the TSA, acting through the 
Office of Civil Rights and Liberties, Ombudsman, and Traveler 
Engagement of the TSA, shall take into consideration data 
regarding the following: 
(1) International enplanements. 
(2) Local populations surrounding major airports. 
(3) Languages spoken by members of Indian Tribes within 
each service area population in which a major airport is located. 
(d) IMPLEMENTATION.—Not later than 180 days after the 
submission of the plan required under subsection (a), the Adminis-
trator of the TSA, in consultation with the owner or operator 
of each major airport, shall implement such plan. 
(e) GAO REVIEW.—Not later than one year after the 
implementation pursuant to subsection (d) of the plan required 
under subsection (a), the Comptroller General of the United States 
shall submit to the Committee on Homeland Security of the House 
of Representatives and the Committee on Commerce, Science, and 
Transportation of the Senate a review of such implementation. 
(f) DEFINITIONS.—In this section: 
(1) AIRPORT.—The term ‘‘airport’’ has the meaning given 
such term in section 40102 of title 49, United States Code. 
(2) INDIAN
TRIBE.—The term ‘‘Indian Tribe’’ has the 
meaning given the term ‘‘Indian tribe’’ in section 102 of the 
Federally Recognized Indian Tribe List Act of 1994 (25 U.S.C. 
5130), individually identified (including parenthetically) in the 
list published most recently as of the date of the enactment 
of this Act pursuant to section 104 of that Act (25 U.S.C. 
5131). 
(3) MAJOR AIRPORTS.—The term ‘‘major airports’’ means 
Category X and Category I airports.
H. R. 7776—1251 
(4) NON-TRAVELING INDIVIDUAL.—The term ‘‘non-traveling 
individual’’ has the meaning given such term in section 1560.3 
of title 49, Code of Federal Regulations. 
(5) TSA MATERIAL.—The term ‘‘TSA material’’ means signs, 
videos, audio messages, websites, press releases, social media 
postings, and other communications published and dissemi-
nated by the Administrator of the TSA in Category X and 
Category I airports for use by both traveling and non-traveling 
individuals. 
SEC. 7132. ONE-STOP PILOT PROGRAM. 
(a) DEFINITIONS.—In this section: 
(1) ADMINISTRATOR.—The term ‘‘Administrator’’ means the 
Administrator of the Transportation Security Administration. 
(2) APPROPRIATE CONGRESSIONAL COMMITTEES.—The term 
‘‘appropriate congressional committees’’ means— 
(A) the Committee on Homeland Security and Com-
mittee on Foreign Affairs of the House of Representatives; 
and 
(B) the Committee on Homeland Security and Govern-
mental Affairs, the Committee on Commerce, Science, and 
Transportation, and the Committee on Foreign Relations 
of the Senate. 
(3) TSA.—The term ‘‘TSA’’ means the Transportation Secu-
rity Administration of the Department of Homeland Security. 
(b) IMPLEMENTATION.—Notwithstanding 44901(a) of title 49, 
United States Code, the Administrator, in coordination with the 
Commissioner of U.S. Customs and Border Protection and the Sec-
retary of State, may implement a pilot program at not more than 
six foreign last point of departure airports to permit passengers 
and their accessible property arriving on direct flights or flight 
segments originating at such participating foreign airports to con-
tinue on additional flights or flight segments originating in the 
United States without additional security re-screening if— 
(1) the initial screening was conducted in accordance with 
an aviation security screening agreement described in sub-
section (e); 
(2) passengers arriving from participating foreign airports 
are unable to access their checked baggage until the arrival 
at their final destination; and 
(3) upon arrival in the United States, passengers arriving 
from participating foreign airports do not come into contact 
with other arriving international passengers, those passengers’ 
property, or other persons who have not been screened or 
subjected to other appropriate security controls required for 
entry into the airport’s sterile area. 
(c) REQUIREMENTS FOR PILOT PROGRAM.—In carrying out this 
section, the Administrator shall ensure that there is no reduction 
in the level of security or specific TSA aviation security standards 
or requirements for screening passengers and their property prior 
to boarding an international flight bound for the United States, 
including specific aviation security standards and requirements 
regarding the following: 
(1) High risk passengers and their property. 
(2) Weapons, explosives, and incendiaries. 
(3) Screening passengers and property transferring at a 
foreign last point of departure airport from another airport
H. R. 7776—1252 
and bound for the United States, and addressing any commin-
gling of such passengers and property with passengers and 
property screened under the pilot program described in sub-
section (b). 
(4) Insider risk at foreign last point of departure airports. 
(d) RE-SCREENING
OF CHECKED BAGGAGE.—Subject to sub-
section (f), the Administrator may determine whether checked bag-
gage arriving from participating foreign airports referenced in sub-
section (b) that screen using an explosives detection system must 
be re-screened in the United States by an explosives detection 
system before such baggage continues on any additional flight or 
flight segment. 
(e) AVIATION SECURITY SCREENING AGREEMENT.— 
(1) IN GENERAL.—An aviation security screening agreement 
described in this subsection is a treaty, executive agreement, 
or non-binding instrument entered into with a foreign country 
that delineates and implements security standards and proto-
cols utilized at a foreign last point of departure airport that 
are determined by the Administrator— 
(A) to be comparable to those of the United States; 
and 
(B) sufficiently effective to enable passengers and their 
accessible property to deplane into sterile areas of airports 
in the United States without the need for re-screening. 
(2) NON-DELEGATION.—The authority to approve an avia-
tion security screening agreement may not be delegated below 
the level of the Secretary of State, the Secretary of Homeland 
Security, or the Administrator. 
(f) RE-SCREENING REQUIREMENT.— 
(1) IN GENERAL.—If the Administrator determines that a 
foreign country participating in the aviation security screening 
agreement has not maintained and implemented security stand-
ards and protocols comparable to those of the United States 
at foreign last point of departure airports at which a pilot 
program has been established in accordance with this section, 
the Administrator shall ensure that passengers and their prop-
erty arriving from such airports are re-screened in the United 
States, including by using explosives detection systems in 
accordance with section 44901(d)(1) of title 49, United States 
Code, and implementing regulations and directives, before such 
passengers and their property are permitted into sterile areas 
of airports in the United States. 
(2) CONSULTATION.—If the Administrator has reasonable 
grounds to believe the other party to an aviation security 
screening agreement has not complied with such agreement, 
the Administrator shall request immediate consultation with 
such party. 
(3) SUSPENSION
OR
TERMINATION
OF
AGREEMENT.—If a 
satisfactory resolution between TSA and a foreign country is 
not reached within 45 days after a consultation request under 
paragraph (2) or in the case of the foreign country’s continued 
or egregious failure to maintain the security standards and 
protocols described in paragraph (1), the President, or with 
the concurrence of the Secretary of State, the Secretary of 
Homeland Security or the Administrator, as appropriate, shall 
suspend or terminate the aviation security screening agreement 
with such country, as determined appropriate by the President,
H. R. 7776—1253 
the Secretary of Homeland Security, or the Administrator. The 
Administrator shall notify the appropriate congressional 
committees of such consultation and suspension or termination, 
as the case may be, not later than seven days after such 
consultation and suspension or termination. 
(g) BRIEFINGS TO CONGRESS.—Not later than 45 days before 
an aviation security screening agreement described in subsection 
(e) enters into force, the Administrator, in coordination with the 
Secretary of State, shall submit to the appropriate congressional 
committees the following: 
(1) An aviation security threat assessment for the country 
in which such foreign last point of departure airport is located. 
(2) Information regarding any corresponding mitigation 
efforts to address any security issues identified in such threat 
assessment, including any plans for joint covert testing. 
(3) Information on potential security vulnerabilities associ-
ated with commencing a pilot program at such foreign last 
point of departure airport pursuant to subsection (b) and mitiga-
tion plans to address such potential security vulnerabilities. 
(4) An assessment of the impacts such pilot program will 
have on aviation security. 
(5) An assessment of the screening performed at such for-
eign last point of departure airport, including the feasibility 
of TSA personnel monitoring screening, security protocols, and 
standards. 
(6) Information regarding identifying the entity or entities 
responsible for screening passengers and property at such for-
eign last point of departure airport. 
(7) The name of the entity or local authority and any 
contractor or subcontractor. 
(8) Information regarding the screening requirements 
relating to such aviation security screening agreement. 
(9) Details regarding information sharing mechanisms 
between the TSA and such foreign last point of departure 
airport, screening authority, or entity responsible for screening 
provided for under such aviation security screening agreement. 
(10) A copy of the aviation security screening agreement, 
which shall identify the foreign last point of departure airport 
or airports at which a pilot program under this section is 
to be established. 
(h) CERTIFICATIONS RELATING TO THE PILOT PROGRAM FOR ONE- 
STOP SECURITY.—For each aviation security screening agreement 
described in subsection (e), the Administrator, in coordination with 
the Secretary of State, shall submit to the appropriate congressional 
committees the following: 
(1)(A) A certification that such agreement satisfies all of 
the requirements specified in subsection (c); or 
(B) in the event that one or more of such requirements 
are not so satisfied, a description of the unsatisfied requirement 
and information on what actions the Administrator will take 
to ensure that such remaining requirements are satisfied before 
such agreement enters into force. 
(2) A certification that TSA and U.S. Customs and Border 
Protection have ensured that any necessary physical modifica-
tions or appropriate mitigations exist in the domestic one-
H. R. 7776—1254 
stop security pilot program airport prior to receiving inter-
national passengers from a last point of departure airport under 
the aviation security screening agreement. 
(3) A certification that a foreign last point of departure 
airport covered by an aviation security screening agreement 
has an operation to screen all checked bags as required by 
law, regulation, or international agreement, including the full 
utilization of explosives detection systems to the extent 
applicable. 
(4) A certification that the Administrator consulted with 
stakeholders, including air carriers, aviation nonprofit labor 
organizations, airport operators, relevant interagency partners, 
and other stakeholders that the Administrator determines 
appropriate. 
(i) REPORT TO CONGRESS.—Not later than five years after the 
date of the enactment of this Act, the Secretary of Homeland 
Security, in coordination with the Administrator, shall submit to 
the appropriate congressional committees a report regarding the 
implementation of the pilot program authorized under this section, 
including information relating to the following: 
(1) The impact of such program on homeland security and 
international aviation security, including any benefits and chal-
lenges of such program. 
(2) The impact of such program on passengers, airports, 
and air carriers, including any benefits and challenges of such 
program. 
(3) The impact and feasibility of continuing such program 
or expanding it into a more permanent program, including 
any benefits and challenges of such continuation or expansion. 
(j) RULE OF CONSTRUCTION.—Nothing in this section may be 
construed as limiting the authority of U.S. Customs and Border 
Protection to inspect persons and baggage arriving in the United 
States in accordance with applicable law. 
(k) SUNSET.—The pilot program authorized under this section 
shall terminate on the date that is six years after the date of 
the enactment of this Act. 
SEC. 7133. REPORT ON EFFORTS OF THE DEPARTMENT OF HOMELAND 
SECURITY TO DETER VEHICULAR TERRORIST ATTACKS 
(DARREN DRAKE). 
(a) IN GENERAL.—Not later than one year after the date of 
the enactment of this Act, the Secretary of Homeland Security 
shall submit to Congress a report on the efforts of the Department 
of Homeland Security to deter vehicular terrorist attacks, including 
engagement with the private sector and other stakeholders. Such 
report shall include assessment of the following: 
(1) The impact of such engagement on efforts to protect 
the United States against terrorist attacks. 
(2) A description of the Department’s engagement with 
privacy, civil rights, and civil liberties stakeholders. 
(3) Ways to improve engagement among the following: 
(A) The Department. 
(B) Federal, State, local, and Tribal law enforcement 
agencies. 
(C) Other relevant stakeholders.