Safe Communities Act of 2020

IIB 116TH CONGRESS 2D SESSION H. R. 5780 IN THE SENATE OF THE UNITED STATES OCTOBER 1, 2020 Received; read twice and referred to the Committee on Homeland Security and Governmental Affairs AN ACT To enhance stakeholder outreach to and operational engage- ment with owners and operators of critical infrastructure and other relevant stakeholders by the Cybersecurity and Infrastructure Security Agency to bolster security against acts of terrorism and other homeland security threats, including by maintaining a clearinghouse of security guidance, best practices, and other voluntary content de- veloped by the Agency or aggregated from trusted sources, and for other purposes. VerDate Sep 11 2014 21:21 Oct 02, 2020 Jkt 019200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6652 E:\BILLS\H5780.RFS H5780 pbinns on DSKJLVW7X2PROD with BILLS 2 HR 5780 RFS Be it enacted by the Senate and House of Representa- 1 tives of the United States of America in Congress assembled, 2 SECTION 1. SHORT TITLE. 3 This Act may be cited as the ‘‘Safe Communities Act 4 of 2020’’. 5 SEC. 2. RESPONSIBILITIES OF CISA DIRECTOR RELATING 6 TO SECURITY RESOURCES CLEARINGHOUSE. 7 Subsection (c) of section 2202 of the Homeland Secu- 8 rity Act of 2002 (6 U.S.C. 652) is amended— 9 (1) by redesignating paragraphs (6) through 10 (11) as paragraphs (7) through (12), respectively; 11 and 12 (2) by inserting after paragraph (5) the fol- 13 lowing new paragraph: 14 ‘‘(6) maintain a clearinghouse for owners and 15 operators of critical infrastructure and other rel- 16 evant stakeholders to access security guidance, best 17 practices, and other voluntary content developed by 18 the Agency in a manner consistent with the require- 19 ments of section 508 of the Rehabilitation Act of 20 1973 (29 U.S.C. 794d) and the Plain Writing Act 21 of 2010 (5 U.S.C. note) or aggregated from trusted 22 sources;’’. 23 VerDate Sep 11 2014 21:21 Oct 02, 2020 Jkt 019200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\H5780.RFS H5780 pbinns on DSKJLVW7X2PROD with BILLS 3 HR 5780 RFS SEC. 3. STAKEHOLDER OUTREACH AND OPERATIONAL EN- 1 GAGEMENT STRATEGY. 2 (a) STRATEGY.—Not later than 180 days after the 3 date of the enactment of this Act, the Director of the Cy- 4 bersecurity and Infrastructure Security Agency of the De- 5 partment of Homeland Security shall issue a strategy to 6 improve stakeholder outreach and operational engagement 7 that includes the Agency’s strategic and operational goals 8 and priorities for carrying out stakeholder engagement ac- 9 tivities. 10 (b) CONTENTS.—The stakeholder outreach and oper- 11 ational engagement strategy issued under subsection (a) 12 shall include the following: 13 (1) A catalogue of the stakeholder engagement 14 activities and services delivered by protective security 15 advisors and cybersecurity advisors of the Cyberse- 16 curity and Infrastructure Security Agency of the De- 17 partment of Homeland Security, including the loca- 18 tions of the stakeholder engagement and services de- 19 livered and the critical infrastructure sectors (as 20 such term is defined in section 2001(3) of the 21 Homeland Security Act of 2002 (6 U.S.C. 601(3)) 22 involved. 23 (2) An assessment of the capacity of programs 24 of the Agency to deploy protective security advisors 25 and cybersecurity advisors, including the adequacy 26 VerDate Sep 11 2014 21:21 Oct 02, 2020 Jkt 019200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\H5780.RFS H5780 pbinns on DSKJLVW7X2PROD with BILLS 4 HR 5780 RFS of such advisors to meet service requests and the 1 ability of such advisors to engage with and deliver 2 services to stakeholders in urban, suburban, and 3 rural areas. 4 (3) Long-term objectives of the protective secu- 5 rity advisor and cybersecurity advisor programs, in- 6 cluding cross-training of the protective security advi- 7 sor and cybersecurity advisor workforce to optimize 8 the capabilities of such programs and capacity goals. 9 (4) A description of programs, policies, and ac- 10 tivities used to carry out such stakeholder engage- 11 ment activities and services under paragraph (1). 12 (5) Resources and personnel necessary to effec- 13 tively support critical infrastructure owners and op- 14 erators and, as appropriate, other entities, including 15 non-profit organizations, based on current and pro- 16 jected demand for Agency services. 17 (6) Guidance on how outreach to critical infra- 18 structure owners and operators in a region should be 19 prioritized. 20 (7) Plans to ensure that stakeholder engage- 21 ment field personnel of the Agency have a clear un- 22 derstanding of expectations for engagement within 23 each critical infrastructure sector and subsector, 24 whether during steady state or surge capacity. 25 VerDate Sep 11 2014 21:21 Oct 02, 2020 Jkt 019200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\H5780.RFS H5780 pbinns on DSKJLVW7X2PROD with BILLS 5 HR 5780 RFS (8) Metrics for measuring the effectiveness of 1 stakeholder engagement activities and services under 2 paragraph (1), including mechanisms to track re- 3 gional engagement of field personnel of the Agency 4 with critical infrastructure owners and operators, 5 and how frequently such engagement takes place. 6 (9) Plans for awareness campaigns to famil- 7 iarize owners and operators of critical infrastructure 8 with security resources and support offered by the 9 Cybersecurity and Infrastructure Security Agency, 10 including the clearinghouse maintained pursuant to 11 paragraph (6) of section 2202(c) of the Homeland 12 Security Act of 2002 (6 U.S.C. 652(c)), as added by 13 section 2. 14 (10) A description of how to prioritize engage- 15 ment with critical infrastructure sectors based on 16 threat information and the capacity of such sectors 17 to mitigate such threats 18 (c) STAKEHOLDER INPUT.—In issuing the stake- 19 holder outreach and operational engagement strategy re- 20 quired under subsection (a), the Director of the Cyberse- 21 curity and Infrastructure Security Agency of the Depart- 22 ment of Homeland Security shall, to the extent prac- 23 ticable, solicit input from stakeholders representing the 24 following: 25 VerDate Sep 11 2014 21:21 Oct 02, 2020 Jkt 019200 PO 00000 Frm 00005 Fmt 6652 Sfmt 6201 E:\BILLS\H5780.RFS H5780 pbinns on DSKJLVW7X2PROD with BILLS 6 HR 5780 RFS (1) Each of the critical infrastructure sectors. 1 (2) Critical infrastructure owners and operators 2 located in each region in which the Agency main- 3 tains a field office. 4 (d) IMPLEMENTATION PLAN.—Not later than 90 5 days after issuing the stakeholder outreach and oper- 6 ational engagement strategy required under subsection 7 (a), the Director of the Cybersecurity and Infrastructure 8 Security Agency of the Department of Homeland Security 9 shall issue an implementation plan for the strategy that 10 includes the following: 11 (1) Strategic objectives and corresponding tasks 12 for protective security advisor and cybersecurity ad- 13 visor workforce development, training, and retention 14 plans. 15 (2) Projected timelines, benchmarks, and re- 16 source requirements for such tasks. 17 (3) Metrics to evaluate the performance of such 18 tasks. 19 (e) CONGRESSIONAL OVERSIGHT.—Upon issuance of 20 the implementation plan required under subsection (d), 21 the Director of the Cybersecurity and Infrastructure Secu- 22 rity Agency of the Department of Homeland Security, 23 shall submit to the Committee on Homeland Security of 24 the House of Representatives and the Committee on 25 VerDate Sep 11 2014 21:21 Oct 02, 2020 Jkt 019200 PO 00000 Frm 00006 Fmt 6652 Sfmt 6201 E:\BILLS\H5780.RFS H5780 pbinns on DSKJLVW7X2PROD with BILLS 7 HR 5780 RFS Homeland Security and Governmental Affairs of the Sen- 1 ate the stakeholder outreach and operational engagement 2 strategy required under subsection (a) and the implemen- 3 tation plan required under subsection (b), together with 4 any other associated legislative or budgetary proposals re- 5 lating thereto. 6 SEC. 4. INFORMATION PROVIDED BY PROTECTIVE SECU- 7 RITY ADVISORS. 8 The Director of the Cybersecurity and Infrastructure 9 Security Agency of the Department of Homeland Security 10 shall ensure, to the greatest extent practicable, protective 11 security advisors of the Agency are disseminating home- 12 land security information on voluntary programs and serv- 13 ices of the Department of Homeland Security, including 14 regarding the Nonprofit Security Grant Program, to bol- 15 ster security and terrorism resilience. 16 SEC. 5. PROTECTIVE SECURITY ADVISOR FORCE MULTI- 17 PLIER PILOT PROGRAM. 18 (a) IN GENERAL.—Not later than one year after the 19 date of the enactment of this Act, the Director of the Cy- 20 bersecurity and Infrastructure Security Agency of the De- 21 partment of Homeland Security shall establish a one-year 22 pilot program for State, local, Tribal, and territorial law 23 enforcement agencies and appropriate government officials 24 to be trained by protective security advisors of the Agency 25 VerDate Sep 11 2014 21:21 Oct 02, 2020 Jkt 019200 PO 00000 Frm 00007 Fmt 6652 Sfmt 6201 E:\BILLS\H5780.RFS H5780 pbinns on DSKJLVW7X2PROD with BILLS 8 HR 5780 RFS regarding carrying out security vulnerability or terrorism 1 risk assessments of facilities. 2 (b) REPORT.—Not later than 90 days after the com- 3 pletion of the pilot program under subsection (a), the Di- 4 rector of the Cybersecurity and Infrastructure Security 5 Agency of the Department of Homeland Security shall re- 6 port on such pilot program to the Committee on Homeland 7 Security of the House of Representatives and the Com- 8 mittee on Homeland Security and Governmental Affairs 9 of the Senate. 10 Passed the House of Representatives September 30, 2020. Attest: CHERYL L. JOHNSON, Clerk. VerDate Sep 11 2014 21:21 Oct 02, 2020 Jkt 019200 PO 00000 Frm 00008 Fmt 6652 Sfmt 6201 E:\BILLS\H5780.RFS H5780 pbinns on DSKJLVW7X2PROD with BILLS