Defense of United States Infrastructure Act of 2021

Bill: 117-s-2491
Sponsor: Sen. King, Angus S., Jr. [I-ME]
Introduced: 2021-07-27 in the Senate
Policy area: Science, Technology, Communications
Subjects: Advisory bodies
Computer security and identity theft
Computers and information technology
Government information and archives
Government studies and investigations
Intergovernmental relations

Summary:
action_date: 2021-07-27
text: 

Defense of United States Infrastructure Act of 2021

 
This bill sets out programs and requirements related to critical infrastructure and cybersecurity threats.
 
The bill establishes a grant program to address cybersecurity risks to critical infrastructure and requires the establishment of cybersecurity-focused critical technology centers.
 
The bill limits to five years the term of the Cybersecurity and Infrastructure Security Agency (CISA) director. Additionally, CISA must establish an information-sharing environment that integrates cyber threat information for use by federal programs. CISA must work with the White House Office of the National Cyber Director to allow private-sector participation in the environment. The Department of Homeland Security (DHS) must develop guidelines for, and the Privacy and Civil Liberties Oversight Board and others must conduct oversight of, the environment.
 
DHS may designate entities as systemically important critical infrastructure. DHS must develop an appropriate methodology before designating entities.
 
DHS must create a voluntary program to certify that smartphones and other critical technologies meet security standards. The bill prohibits certain actions (e.g., falsely attesting to certifications) with enforcement through the Federal Trade Commission (FTC).
 
The bill establishes within DHS the Bureau of Cybersecurity Statistics. Entities that provide cybersecurity incident response or insurance must report specified information to the bureau. The FTC must enforce this reporting requirement, and the bill limits the use of reported information in some proceedings.
 
The bill also (1) requires a strategy to secure a protocol and naming system that facilitate information exchange on the internet, and (2) expands hiring authorities of the Office of the National Cyber Director.

action_date: 2022-12-19
text: 

Defense of United States Infrastructure Act of 2021

 
This bill sets out programs and requirements related to critical infrastructure and cybersecurity threats, including (1) a pilot program to enable federal and nonfederal entities to share information in order to prevent, identify, and mitigate cyber threats; (2) reporting about the federal government's efforts to support security certifications for information technology; and (3) a working group to develop a strategy for implementing security measures for foundational internet protocols. 
 
 
 


Legislative actions:
action_date: 2022-12-19
text: Placed on Senate Legislative Calendar under General Orders. Calendar No. 670.
action_date: 2022-12-19
text: Committee on Homeland Security and Governmental Affairs. Reported by Senator Peters with an amendment in the nature of a substitute. With written report No. 117-271.
action_date: 2022-12-19
text: Committee on Homeland Security and Governmental Affairs. Reported by Senator Peters with an amendment in the nature of a substitute. With written report No. 117-271.
action_date: 2021-11-03
text: Committee on Homeland Security and Governmental Affairs. Ordered to be reported with an amendment in the nature of a substitute favorably.
action_date: 2021-07-27
text: Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
action_date: 2021-07-27
text: Introduced in Senate