SEC. 2. REPORT ON SIGNIFICANT SECURITY RISKS OF DE-
FENSE 
CRITICAL 
ELECTRIC 
INFRASTRUC-
TURE. 
(a) REPORT REQUIRED.—Not later than 90 days 
after the date of the enactment of this Act, the Secretary 
of Defense shall, in coordination with the Director of Na-
tional Intelligence, the Secretary of Energy, and the Sec-
retary of Homeland Security, submit to the appropriate 
committees of Congress a report setting forth the fol-
lowing: 
(1) Identification of significant security risks to 
defense critical electric infrastructure posed by sig-
nificant malicious cyber-enabled activities. 
(2) An assessment of the potential effect of the 
security risks identified pursuant to paragraph (1) 
on the readiness of the Armed Forces. 
(3) An assessment of the strategic benefits de-
rived from, and the challenges associated with, iso-
lating military infrastructure from the national elec-
tric grid and the use of microgrids by the Armed 
Forces. 
(4) Recommendations on actions to be taken— 
(A) to eliminate or mitigate the security 
risks identified pursuant to paragraph (1); and 
VerDate Sep 11 2014 
00:38 Sep 29, 2017
Jkt 069200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H3855.IH
H3855
lotter on DSKBCFDHB2PROD with BILLS
(B) to address the effect of those security 
risks on the readiness of the Armed Forces 
identified pursuant to paragraph (2). 
(b) FORM OF REPORT.—The report required by sub-
section (a) shall be submitted in unclassified form, but 
may include a classified annex. 
(c) DEFINITIONS.—In this section: 
(1) The term ‘‘appropriate committees of Con-
gress’’ means— 
(A) the congressional defense committees 
(as defined in section 101(a) of title 10, United 
States Code); 
(B) the Committee on Energy and Natural 
Resources and the Committee on Homeland Se-
curity and Governmental Affairs of the Senate; 
and 
(C) the Committee on Energy and Com-
merce and the Committee on Homeland Secu-
rity of the House of Representatives. 
(2) The term ‘‘defense critical electric infra-
structure’’— 
(A) has the meaning given such term in 
section 215A(a) of the Federal Power Act (16 
U.S.C. 824o–1(a)); and 
VerDate Sep 11 2014 
00:38 Sep 29, 2017
Jkt 069200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H3855.IH
H3855
lotter on DSKBCFDHB2PROD with BILLS
(B) shall include any electric infrastructure 
located in any of the 48 contiguous States or 
the District of Columbia that serves a facility— 
(i) designated by the Secretary of De-
fense as— 
(I) critical to the defense of the 
United States; and 
(II) vulnerable to a disruption of 
the supply of electric energy provided 
to such facility by an external pro-
vider; and 
(ii) that is not owned or operated by 
the owner or operator of such facility. 
(3) The term ‘‘security risk’’ shall have such 
meaning as the Secretary of Defense shall deter-
mine, in coordination with the Director of National 
Intelligence and the Secretary of Energy, for pur-
poses of the report required by subsection (a). 
(4) The term ‘‘significant malicious cyber-en-
abled activities’’ include— 
(A) significant efforts— 
(i) to deny access to or degrade, dis-
rupt, or destroy an information and com-
munications technology system or network; 
or 
VerDate Sep 11 2014 
00:38 Sep 29, 2017
Jkt 069200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H3855.IH
H3855
lotter on DSKBCFDHB2PROD with BILLS
(ii) to exfiltrate, degrade, corrupt, de-
stroy, or release information from such a 
system or network without authorization 
for purposes of— 
(I) conducting influence oper-
ations; or 
(II) causing a significant mis-
appropriation of funds, economic re-
sources, trade secrets, personal identi-
fications, or financial information for 
commercial or competitive advantage 
or private financial gain; 
(B) significant destructive malware at-
tacks; and 
(C) significant denial of service activities. 
Æ 
VerDate Sep 11 2014 
00:38 Sep 29, 2017
Jkt 069200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6301
E:\BILLS\H3855.IH
H3855
lotter on DSKBCFDHB2PROD with BILLS