DHS Industrial Control Systems Capabilities Enhancement Act of 2021

Bill: 117-s-2439
Sponsor: Sen. Peters, Gary C. [D-MI]
Introduced: 2021-07-22 in the Senate
Policy area: Science, Technology, Communications
Subjects: Computer security and identity theft
Congressional oversight
Government studies and investigations
Homeland security
Industrial facilities
Infrastructure development
Manufacturing

Summary:
action_date: 2021-07-22
text: 

DHS Industrial Control Systems Capabilities Enhancement Act of 2021

 
This bill requires the Cybersecurity and Infrastructure Security Agency (CISA) to maintain certain capabilities to identify and address threats to industrial control systems. 
 
Specifically, the bill requires CISA's National Cybersecurity and Communications Integration Center to ensure that its activities address the security of both information and operational technology, including industrial control systems. 
 
Additionally, CISA must maintain capabilities to identify and address threats and vulnerabilities to products and technologies intended for use in the automated control of critical infrastructure processes by (1) leading efforts to identify and mitigate cybersecurity threats to industrial control systems; (2) maintaining threat hunting and incident response capabilities to respond to cybersecurity risks and incidents; (3) providing cybersecurity technical assistance to stakeholders; and (4) collecting, coordinating, and providing vulnerability information to the industrial control systems community.
 
CISA shall provide to the homeland security committees a briefing on its industrial control systems capabilities at specified intervals.
 
The Government Accountability Office must review and report on implementation of the bill's requirements.

action_date: 2022-12-13
text: 

DHS Industrial Control Systems Capabilities Enhancement Act of 2021

 
This bill requires the Cybersecurity and Infrastructure Security Agency (CISA) to maintain certain capabilities to identify and address threats to industrial control systems. 
 
Specifically, the bill requires CISA's National Cybersecurity and Communications Integration Center to ensure that its activities address the security of both information and operational technology, including industrial control systems. 
 
Additionally, CISA must maintain capabilities to identify and address threats and vulnerabilities to products and technologies intended for use in the automated control of critical infrastructure processes by (1) leading efforts to identify and mitigate cybersecurity threats to industrial control systems; (2) maintaining threat hunting and incident response capabilities to respond to cybersecurity risks and incidents; (3) providing cybersecurity technical assistance to stakeholders; and (4) collecting, coordinating, and providing vulnerability information to the industrial control systems community.
 
CISA shall provide to the homeland security committees a briefing on its industrial control systems capabilities at specified intervals.
 
The Government Accountability Office must review and report on implementation of the bill's requirements.


Legislative actions:
action_date: 2022-12-13
text: Placed on Senate Legislative Calendar under General Orders. Calendar No. 631.
action_date: 2022-12-13
text: Committee on Homeland Security and Governmental Affairs. Reported by Senator Peters with an amendment. With written report No. 117-247.
action_date: 2022-12-13
text: Committee on Homeland Security and Governmental Affairs. Reported by Senator Peters with an amendment. With written report No. 117-247.
action_date: 2021-08-04
text: Committee on Homeland Security and Governmental Affairs. Ordered to be reported without amendment favorably.
action_date: 2021-07-22
text: Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
action_date: 2021-07-22
text: Introduced in Senate