Port Crane Security and Inspection Act of 2022
Bill: H.R.6487 | Sponsor: Rep. Gimenez, Carlos A. (R-FL)
Policy area: Transportation and Public Works

Summary:
Port Crane Security and Inspection Act of 2022
This bill limits the operation at U.S. ports of foreign cranes. Foreign cranes are those (1) manufactured by companies that are subject to the control or influence of a country designated as a foreign adversary, and (2) using software or other technology that connects to ports' cyber infrastructure.
Foreign cranes that are contracted for on or after the date of the bill's enactment may not operate at a U.S. port. The bill also prohibits, effective five years after the date of the bill's enactment, foreign cranes at U.S. ports if the cranes use software or other technology manufactured by a company affiliated with a foreign adversary and connect to a port's cyber infrastructure.
Additionally, the Cybersecurity and Infrastructure Security Agency (CISA) must (1) inspect foreign cranes before they are placed into operation for potential security vulnerabilities, and (2) assess the threat posed by security vulnerabilities on existing or newly constructed foreign cranes. CISA must also report to Congress about critical and high-risk security vulnerabilities posed by foreign cranes at U.S. ports.


To require the inspection of certain foreign cranes before use at a 
              United States port, and for other purposes.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Port Crane Security and Inspection 
Act of 2022''.

SEC. 2. FOREIGN CRANE INSPECTION TRANSPORTATION AND PORT SECURITY AND 
              MARITIME SECURITY ENHANCEMENT.

    (a) In General.--With respect to newly constructed foreign cranes 
procured for use at a United States port determined by the Secretary to 
be of high risk to port security or maritime transportation security 
and that connect to the cybersecurity network of such port, the 
Secretary of Homeland Security shall, acting through the Cybersecurity 
and Infrastructure Security Agency, before such crane is placed into 
service at such port, inspect such crane for potential security 
vulnerabilities.
    (b) Security Vulnerability Assessments.--Not later than 180 days 
after the date of enactment of this Act, the Secretary shall assess the 
threat posed by security vulnerabilities of any existing or newly 
constructed foreign cranes.
    (c) Report to Congress.--Not later than 1 year after the date of 
enactment of this Act, the Secretary shall brief the Committee on 
Homeland Security of the House of Representatives and the Committee on 
Homeland Security and Governmental Affairs of the Senate regarding 
critical and high-risk foreign crane security vulnerabilities posed by 
existing or newly constructed foreign cranes within United States 
ports.
    (d) Definitions.--In this section:
            (1) Covered foreign country.--The term ``covered foreign 
        country'' means a country that--
                    (A) the intelligence community has identified as a 
                foreign adversary in its most recent Annual Threat 
                Assessment; or
                    (B) the Secretary of Homeland Security, in 
                coordination with the Director of National 
                Intelligence, has identified as a foreign adversary 
                that is not included in such Annual Threat Assessment.
            (2) Foreign crane.--The term ``foreign crane'' means a 
        crane for which any software or other technology in such crane 
        that is connected into cyber infrastructure at a port located 
        in the United States was, in whole or in part, manufactured by 
        an entity that is owned or controlled by, is a subsidiary of, 
        or is otherwise related legally or financially to a corporation 
        based in a covered foreign country.

SEC. 3. FOREIGN CRANE PROHIBITION.

    (a) In General.--Notwithstanding any other provision of law, a 
foreign crane--
            (1) for which a contract was entered into on or after the 
        date of enactment of this Act may not be operated at a port 
        located in the United States; and
            (2) operated at a port located in the United States may not 
        operate foreign software on any date after the date which is 5 
        years after the date of enactment of this Act.
    (b) Definitions.--In this section:
            (1) Covered foreign country.--The term ``covered foreign 
        country'' means a country that--
                    (A) the intelligence community has identified as a 
                foreign adversary in its most recent Annual Threat 
                Assessment; or
                    (B) the Secretary of Homeland Security, in 
                coordination with the Director of National 
                Intelligence, has identified as a foreign adversary 
                that is not included in such Annual Threat Assessment.
            (2) Foreign crane.--The term ``foreign crane'' means a 
        crane for which any software or other technology in such crane 
        that is connected into cyber infrastructure at a port located 
        in the United States was, in whole or in part, manufactured by 
        an entity that is owned or controlled by, is a subsidiary of, 
        or is otherwise related legally or financially to a corporation 
        based in a covered foreign country.
            (3) Foreign software.--The term ``foreign software'' means 
        software or other technology in a foreign crane that is 
        connected into cyber infrastructure at a port located in the 
        United States was, in whole or in part, manufactured by a 
        company wholly owned by a covered foreign country.
                                 <all>