Title: STB Information Security Improvement Act
Policy area: Transportation and Public Works

Summary:
STB Information Security Improvement Act
This bill requires the Surface Transportation Board to develop a timeline and plan to implement the recommendations of the Department of Transportation in Report No. FI2018002 concerning information security.


[Congressional Bills 115th Congress]
[From the U.S. Government Publishing Office]
[S. 2844 Introduced in Senate (IS)]

<DOC>






115th CONGRESS
  2d Session
                                S. 2844

   To require the Surface Transportation Board to implement certain 
     recommendations of the Inspector General of the Department of 
                            Transportation.


_______________________________________________________________________


                   IN THE SENATE OF THE UNITED STATES

                              May 15, 2018

   Mr. Thune introduced the following bill; which was read twice and 
   referred to the Committee on Commerce, Science, and Transportation

_______________________________________________________________________

                                 A BILL


 
   To require the Surface Transportation Board to implement certain 
     recommendations of the Inspector General of the Department of 
                            Transportation.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``STB Information Security Improvement 
Act''.

SEC. 2. REQUIREMENTS.

    (a) In General.--The Surface Transportation Board (in this section 
referred to as the ``STB'') shall develop a timeline and plan to 
implement the recommendations of the Inspector General of the 
Department of Transportation in Report No. FI2018002, including 
improvements--
            (1) to identify controls, including risk management, 
        weakness remediation, and security authorization;
            (2) to protect controls, including configuration 
        management, user identity and access management, and security 
        training;
            (3) to detect controls, including continuous monitoring;
            (4) to respond controls, including incident handling and 
        reporting;
            (5) to recover controls for contingency planning; and
            (6) to such other tools that would implement the 
        recommendations in the report.
    (b) Implementation.--
            (1) In general.--Not later than 180 days after the date of 
        enactment of this Act, the STB shall submit the plan and 
        timeline developed under subsection (a) to the Committee on 
        Commerce, Science, and Transportation of the Senate and the 
        Committee on Transportation and Infrastructure of the House of 
        Representatives.
            (2) Report.--The STB shall report annually to such 
        Committees on the progress on implementation of the 
        recommendations until the implementation is complete.
            (3) Plan implementation.--The STB shall designate an 
        individual to implement the plan developed under subsection 
        (a).

SEC. 3. NO ADDITIONAL FUNDS AUTHORIZED.

    No additional funds are authorized to carry out the requirements of 
this Act. Such requirements shall be carried out using amounts 
otherwise authorized.
                                 <all>