II 116th CONGRESS 2d Session S. 4157 IN THE SENATE OF THE UNITED STATES July 2, 2020 Mr. Johnson introduced the following bill; which was read twice and referred to the Committee on Homeland Security and Governmental Affairs A BILL To amend the Homeland Security Act of 2002 to expand the authority of the National Infrastructure Simulation and Analysis Center, and for other purposes.

1. Short title This Act may be cited as the National Infrastructure Simulation and Analysis Center Pandemic Modeling Act of 2020 . 2. National Infrastructure Simulation and Analysis Center Section 511 of the Homeland Security Act of 2002 ( 6 U.S.C. 321 ) is amended— (1) in subsection (b)— (A) in paragraph (1)— (i) in subparagraph (A) by striking and at the end; (ii) in subparagraph (B)— (I) by inserting , pandemic after natural disaster ; and (II) by striking the period at the end and inserting ; and ; and (iii) by adding at the end the following: (C) such other activities as determined appropriate by the Director of the Cybersecurity and Infrastructure Security Agency. ; and (B) in paragraph (2)(C)— (i) in clause (i)— (I) by inserting , pandemics after natural disasters ; and (II) by striking and other man-made disasters and inserting other man-made disasters, and such other activities as determined appropriate by the Director of the Cybersecurity and Infrastructure Security Agency ; and (ii) in clause (ii), by inserting upon request and not later than 15 days after completion before , including . 3. Reporting and briefing requirements (a) Reporting to Federal agencies (1) Summary of current projects (A) In general Not later than 1 year after the date of enactment of this Act, and once each year thereafter, the Director of the Cybersecurity and Infrastructure Security Agency shall provide a summary of the current projects of the National Infrastructure Simulation and Analysis Center to each Federal agency and department with critical infrastructure responsibilities under Homeland Security Presidential Directive 7, or any successor to such directive. (B) Request for additional information If the head of a Federal agency or department with critical infrastructure responsibilities under Homeland Security Presidential Directive 7, or any successor to such directive, requests additional information on a specific project summarized under subparagraph (A), the Director of the Cybersecurity and Infrastructure Security Agency shall provide the information not later than 30 days after the date of the request. (2) Prior data (A) In general Not later than 90 days after the date of enactment of this Act, the Director of the Cybersecurity and Infrastructure Security Agency shall provide a catalogue of the projects of the National Infrastructure Simulation and Analysis Center for each of fiscal years 2014 through 2020 to each Federal agency and department with critical infrastructure responsibilities under Homeland Security Presidential Directive 7, or any successor to such directive. (B) Request for additional information If the head of a Federal agency or department with critical infrastructure responsibilities under Homeland Security Presidential Directive 7, or any successor to such directive, requests additional information on a specific project catalogued under subparagraph (A), the Director of the Cybersecurity and Infrastructure Security Agency shall provide the information not later than 30 days after the date of the request. (3) Pandemic portfolio summary (A) In general Not later than 45 days after the date of enactment of this Act, the Director of the Cybersecurity and Infrastructure Security Agency shall provide a summary of the past pandemic projects and provide all pandemic reports of the National Infrastructure Simulation and Analysis Center to each Federal agency and department with critical infrastructure responsibilities under Homeland Security Presidential Directive 7, or any successor to such directive. (B) Request for additional information If the head of a Federal agency or department with critical infrastructure responsibilities under Homeland Security Presidential Directive 7, or any successor to such directive, requests additional information on a past project or specific pandemic report provided under subparagraph (A), the Director of the Cybersecurity and Infrastructure Security Agency shall provide the information not later than 15 days after the date of the request. (b) Reporting to Congress (1) Current projects and priorities Not later than 1 year after the date of enactment of this Act, and once each year thereafter, the Director of the Cybersecurity and Infrastructure Security Agency shall provide summaries of the current projects and priorities of the National Infrastructure Simulation and Analysis Center to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Homeland Security of the House of Representatives. (2) Prior data Not later than 90 days after the date of enactment of this Act, the Director of the Cybersecurity and Infrastructure Security Agency shall provide a catalogue of the projects of the National Infrastructure Simulation and Analysis Center for each of fiscal years 2014 through 2020 to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Homeland Security of the House of Representatives. (3) Pandemic portfolio summary Not later than 45 days after the date of enactment of this Act, the Director of the Cybersecurity and Infrastructure Security Agency shall provide a summary of the past pandemic projects and provide all pandemic reports of the National Infrastructure Simulation and Analysis Center to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Homeland Security of the House of Representatives. (c) Briefing to Congress (1) In general Not later than 180 days after the date of enactment of this Act, the Director of the Cybersecurity and Infrastructure Security Agency shall provide a briefing on current pandemic modeling, simulation, and analyses of the National Infrastructure Simulation and Analysis Center, and any additional activities supporting these efforts, to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Homeland Security of the House of Representatives. (2) Additional briefing Not later than 180 days after the date on which the Director of the Cybersecurity and Infrastructure Security Agency provides the briefing required under paragraph (1), the Director of the Cybersecurity and Infrastructure Security Agency shall provide an updated version of the briefing to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Homeland Security of the House of Representatives.