Strengthening Cybersecurity Information Sharing and Coordination in Our Ports Act of 2015

Bill: 114-hr-3878
Sponsor: Rep. Torres, Norma J. [D-CA-35]
Introduced: 2015-11-02 in the House
Policy area: Transportation and Public Works
Subjects: Computer security and identity theft
Federal-Indian relations
Government information and archives
Government studies and investigations
Intergovernmental relations
Law enforcement administration and funding
Marine and inland water transportation
Navigation, waterways, harbors
State and local government operations
Transportation safety and security

Summary:
action_date: 2015-11-02
text: 

Strengthening Cybersecurity Information Sharing and Coordination in Our Ports Act of 2015

 This bill requires the Department of Homeland Security (DHS) to seek to enhance cybersecurity situational awareness and information sharing between and with maritime security stakeholders from federal, state, local, and tribal governments, public safety and emergency response agencies, law enforcement and security organizations, maritime industry participants, port owners and operators, and maritime terminal owners and operators. 
DHS must: (1) consult with the Coast Guard to enhance participation by the Maritime Information Sharing and Analysis Center in the National Cybersecurity and Communications Integration Center; and (2) request that the National Maritime Security Advisory Committee report and make recommendations to DHS on methods to enhance cybersecurity and information sharing between such stakeholders, including the establishment of a council to facilitate national-level sharing of security information and coordination of strategies to mitigate cybersecurity risks in the maritime sector.
 The Coast Guard must direct captains of designated ports to establish a working group of members of Area Maritime Security Advisory Committees to facilitate the sharing of information about, and development of plans to address, port-specific cybersecurity vulnerabilities. 
The Coast Guard must also require that Area Maritime Security Plans and facility security plans approved after enactment of this Act include mitigation measures to prevent, manage, and respond to cyber threats and vulnerabilities.
 
DHS must ensure that maritime security risk assessments include cybersecurity risks to ports and the maritime border of the United States. 

action_date: 2015-12-15
text: 

Strengthening Cybersecurity Information Sharing and Coordination in Our Ports Act of 2015

 
(Sec. 2) This bill requires the Department of Homeland Security (DHS) to implement, and evaluate at least every two years, a maritime cybersecurity risk assessment model to evaluate current and future cybersecurity risks. The model must be consistent with the National Institute of Standards and Technology Framework for Improving Critical Infrastructure Cybersecurity and any updates pursuant to the Cybersecurity Enhancement Act of 2014.
 
DHS must also: (1) seek to ensure participation of at least one information sharing and analysis organization representing the maritime community in the National Cybersecurity and Communications Integration Center (NCCIC); (2) establish guidelines for voluntary reporting of maritime-related cybersecurity risks and incidents to the NCCIC and other appropriate federal agencies; and (3) request the National Maritime Security Advisory Committee to report and make recommendations to DHS regarding the enhancement of cybersecurity information sharing between relevant federal agencies and state, local, and tribal governments, public safety and emergency response agencies, law enforcement and security organizations, the maritime industry, port owners and operators, and terminal owners and operators.
 
(Sec. 3) The Coast Guard must: (1) direct Area Maritime Security Advisory Committees to facilitate the sharing of cybersecurity risks and incidents to address port-specific cybersecurity risks, including, possibly, by establishing a working group of members of such committees to address port-specific cybersecurity vulnerabilities; and (2) require area maritime security plans and facility security plans to include a mitigation plan to prevent, manage, and respond to cybersecurity risks.
 
(Sec. 4) DHS's vulnerability assessments of facilities and vessels that may be involved in a transportation security incident must identify weaknesses in cybersecurity. Owners or operators of such vessels or facilities must include cybersecurity provisions in their security plans for deterring such incidents. 

action_date: 2015-12-16
text: 

Strengthening Cybersecurity Information Sharing and Coordination in Our Ports Act of 2015

 
(Sec. 2) This bill requires the Department of Homeland Security (DHS) to implement, and evaluate at least every two years, a maritime cybersecurity risk assessment model to evaluate current and future cybersecurity risks. The model must be consistent with the National Institute of Standards and Technology Framework for Improving Critical Infrastructure Cybersecurity and any updates pursuant to the Cybersecurity Enhancement Act of 2014.
 
DHS must also: (1) seek to ensure participation of at least one information sharing and analysis organization representing the maritime community in the National Cybersecurity and Communications Integration Center (NCCIC); (2) establish guidelines for voluntary reporting of maritime-related cybersecurity risks and incidents to the NCCIC and other appropriate federal agencies; and (3) request the National Maritime Security Advisory Committee to report and make recommendations to DHS regarding the enhancement of cybersecurity information sharing between relevant federal agencies and state, local, and tribal governments, public safety and emergency response agencies, law enforcement and security organizations, the maritime industry, port owners and operators, and terminal owners and operators.
 
(Sec. 3) The Coast Guard must: (1) direct Area Maritime Security Advisory Committees to facilitate the sharing of cybersecurity risks and incidents to address port-specific cybersecurity risks, including, possibly, by establishing a working group of members of such committees to address port-specific cybersecurity vulnerabilities; and (2) require area maritime security plans and facility security plans to include a mitigation plan to prevent, manage, and respond to cybersecurity risks.
 
(Sec. 4) DHS's vulnerability assessments of facilities and vessels that may be involved in a transportation security incident must identify weaknesses in cybersecurity. Owners or operators of such vessels or facilities must include provisions regarding prevention, management, and response to cybersecurity risks in their security plans for deterring such incidents. 


Legislative actions:
action_date: 2016-02-01
text: Star Print ordered on the bill.
action_date: 2015-12-17
text: Received in the Senate and Read twice and referred to the Committee on Commerce, Science, and Transportation.
action_date: 2015-12-16
text: Motion to reconsider laid on the table Agreed to without objection.
action_date: 2015-12-16
text: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H9353)
action_date: 2015-12-16
text: Passed/agreed to in House: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote.(text: CR H9353)
action_date: 2015-12-16
text: DEBATE - The House proceeded with forty minutes of debate on H.R. 3878.
action_date: 2015-12-16
text: Considered under suspension of the rules. (consideration: CR H9352-9355)
action_date: 2015-12-16
text: Mrs. Miller (MI) moved to suspend the rules and pass the bill, as amended.
action_date: 2015-12-15
text: Placed on the Union Calendar, Calendar No. 288.
action_date: 2015-12-15
text: Committee on Transportation discharged.
action_date: 2015-12-15
text: Committee on Transportation discharged.
action_date: 2015-12-15
text: Reported (Amended) by the Committee on Homeland Security. H. Rept. 114-379, Part I.
action_date: 2015-12-15
text: Reported (Amended) by the Committee on Homeland Security. H. Rept. 114-379, Part I.
action_date: 2015-11-04
text: Ordered to be Reported (Amended) by Voice Vote.
action_date: 2015-11-04
text: Committee Consideration and Mark-up Session Held.
action_date: 2015-11-02
text: Referred to the Committee on Homeland Security, and in addition to the Committee on Transportation and Infrastructure, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
action_date: 2015-11-02
text: Referred to the Committee on Homeland Security, and in addition to the Committee on Transportation and Infrastructure, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
action_date: 2015-11-02
text: Referred to the Committee on Homeland Security, and in addition to the Committee on Transportation and Infrastructure, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
action_date: 2015-11-02
text: Introduced in House
action_date: 2015-11-02
text: Introduced in House