Port Crane Security and Inspection Act of 2022

Bill: 117-hr-6487
Sponsor: full_name: Rep. Gimenez, Carlos A. [R-FL-26]
Introduced: 2022-01-25
Policy area: Transportation and Public Works
Subjects: Computer security and identity theft

Computers and information technology

Foreign and international corporations

Foreign property

Navigation, waterways, harbors
Latest action: action_date: 2022-01-26
text: Referred to the Subcommittee on Cybersecurity, Infrastructure Protection, and Innovation.

Summaries:
action_date: 2022-01-25
action_desc: Introduced in House
text: <p><strong>Port Crane Security and Inspection Act of 2022</strong></p> <p>This bill limits the operation at U.S. ports of foreign cranes. <em>Foreign cranes </em>are those (1) manufactured by companies that are subject to the control or influence of a country designated as a foreign adversary, and (2) using software or other technology that connects to ports' cyber infrastructure.</p> <p>Foreign cranes that are contracted for on or after the date of the bill's enactment may not operate at a U.S. port. The bill also prohibits, effective five years after the date of the bill's enactment, foreign cranes at U.S. ports if the cranes use software or other technology manufactured by a company affiliated with a foreign adversary and connect to a port's cyber infrastructure.</p> <p>Additionally, the Cybersecurity and Infrastructure Security Agency (CISA) must (1) inspect foreign cranes before they are placed into operation for potential security vulnerabilities, and (2) assess the threat posed by security vulnerabilities on existing or newly constructed foreign cranes. CISA must also report to Congress about critical and high-risk security vulnerabilities posed by foreign cranes at U.S. ports.</p> <p><br /></p>

tv_txt: I 117th CONGRESS 2d Session H. R. 6487 IN THE HOUSE OF REPRESENTATIVES January 25, 2022 Mr. Gimenez introduced the following bill; which was referred to the Committee on Homeland Security A BILL To require the inspection of certain foreign cranes before use at a United States port, and for other purposes.

1. Short title This Act may be cited as the Port Crane Security and Inspection Act of 2022 . 2. Foreign crane inspection transportation and port security and maritime security enhancement (a) In general With respect to newly constructed foreign cranes procured for use at a United States port determined by the Secretary to be of high risk to port security or maritime transportation security and that connect to the cybersecurity network of such port, the Secretary of Homeland Security shall, acting through the Cybersecurity and Infrastructure Security Agency, before such crane is placed into service at such port, inspect such crane for potential security vulnerabilities. (b) Security vulnerability assessments Not later than 180 days after the date of enactment of this Act, the Secretary shall assess the threat posed by security vulnerabilities of any existing or newly constructed foreign cranes. (c) Report to Congress Not later than 1 year after the date of enactment of this Act, the Secretary shall brief the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate regarding critical and high-risk foreign crane security vulnerabilities posed by existing or newly constructed foreign cranes within United States ports. (d) Definitions In this section: (1) Covered foreign country The term covered foreign country means a country that— (A) the intelligence community has identified as a foreign adversary in its most recent Annual Threat Assessment; or (B) the Secretary of Homeland Security, in coordination with the Director of National Intelligence, has identified as a foreign adversary that is not included in such Annual Threat Assessment. (2) Foreign crane The term foreign crane means a crane for which any software or other technology in such crane that is connected into cyber infrastructure at a port located in the United States was, in whole or in part, manufactured by an entity that is owned or controlled by, is a subsidiary of, or is otherwise related legally or financially to a corporation based in a covered foreign country. 3. Foreign crane prohibition (a) In general Notwithstanding any other provision of law, a foreign crane— (1) for which a contract was entered into on or after the date of enactment of this Act may not be operated at a port located in the United States; and (2) operated at a port located in the United States may not operate foreign software on any date after the date which is 5 years after the date of enactment of this Act. (b) Definitions In this section: (1) Covered foreign country The term covered foreign country means a country that— (A) the intelligence community has identified as a foreign adversary in its most recent Annual Threat Assessment; or (B) the Secretary of Homeland Security, in coordination with the Director of National Intelligence, has identified as a foreign adversary that is not included in such Annual Threat Assessment. (2) Foreign crane The term foreign crane means a crane for which any software or other technology in such crane that is connected into cyber infrastructure at a port located in the United States was, in whole or in part, manufactured by an entity that is owned or controlled by, is a subsidiary of, or is otherwise related legally or financially to a corporation based in a covered foreign country. (3) Foreign software The term foreign software means software or other technology in a foreign crane that is connected into cyber infrastructure at a port located in the United States was, in whole or in part, manufactured by a company wholly owned by a covered foreign country.