S.Amdt. 2710
What it does: Rewrites page 20, line 6 through page 22, line 14
Sen. Maria Cantwell (D-WA)What it changes
1 change to S. 3414
The Congressional Record cuts off the end of this amendment, so some changes may be missing.
Rewrites page 20, line 6 through page 22, line 14
ReplacesPrinted pageRemoves page 20, line 6 through page 22, line 14 of the printed bill. See that page
Inserted: date on which the top-level assessment is completed under section 102(a)(2)(A), each sector coordinating council shall propose to the Council voluntary outcome-based cybersecurity practices (referred to in this section as "cybersecurity practices") sufficient to effectively remediate or mitigate cyber risks identified through an assessment conducted under section 102(a) comprised of--
Inserted: (1) industry best practices, standards, and guidelines; or
Inserted: (2) practices developed by the sector coordinating council in coordination with owners and operators, voluntary consensus standards development organizations, representatives of State and local governments, the private sector, and appropriate information sharing and analysis organizations.
Inserted: (b) Review of Cybersecurity Practices.--
Inserted: (1) In general.--The Council shall, in consultation with owners and operators, the Critical Infrastructure Partnership Advisory Council, and appropriate information sharing and analysis organizations, and in coordination with appropriate representatives from State and local governments--
Inserted: (A) consult with relevant security experts and institutions of higher education, including university information security centers, appropriate nongovernmental cybersecurity experts, and representatives from national laboratories;
Inserted: (B) review relevant regulations or compulsory standards or guidelines;
Inserted: (C) review cybersecurity practices proposed under subsection (a); and
Inserted: (D) consider any amendments to the cybersecurity practices and any additional cybersecurity practices necessary to ensure adequate remediation or mitigation of the cyber risks identified through an assessment conducted under section 102(a).
Inserted: (2) Adoption.--
Inserted: (A) In general.--Not later than 1 year after the date on which the top-level assessment is completed under section 102(a)(2)(A), the Council shall--
Inserted: (i) adopt any cybersecurity practices proposed under subsection (a) that adequately remediate or mitigate identified cyber risks and any associated consequences identified through an assessment conducted under section 102(a); and
Show 2 more inserted paragraphsShow less
Inserted: (ii) adopt any amended or additional cybersecurity practices necessary to ensure the adequate remediation or mitigation of the cyber risks identified through an assessment conducted under section 102(a).
Inserted: (B) No submission by sector coordinating council.--If a sector coordinating council fails to propose to the Council cybersecurity practices under subsection (a) within 180 days of the date on which the top-level assessment is completed under section 102(a)(2)(A), not later than 1 year after the date on which the top-level assessment is completed under section 102(a)(2)(A) the Council shall adopt cybersecurity
Original wording
On page 20, strike line 6 and all that follows through page 22, line 14, and insert the following:
Read automatically from the Congressional Record. Check the original before relying on it.
As printed
SA 2710. Ms. CANTWELL submitted an amendment intended to be proposed by her to the bill S. 3414, to enhance the security and resiliency of the cyber and communications infrastructure of the United States, which was ordered to lie on the table; as follows:
On page 20, strike line 6 and all that follows through page 22, line 14, and insert the following:
date on which the top-level assessment is completed under section 102(a)(2)(A), each sector coordinating council shall propose to the Council voluntary outcome-based cybersecurity practices (referred to in this section as “cybersecurity practices”) sufficient to effectively remediate or mitigate cyber risks identified through an assessment conducted under section 102(a) comprised of--
(1) industry best practices, standards, and guidelines; or
(2) practices developed by the sector coordinating council in coordination with owners and operators, voluntary consensus standards development organizations, representatives of State and local governments, the private sector, and appropriate information sharing and analysis organizations.
(b) Review of Cybersecurity Practices.--
(1) In general.--The Council shall, in consultation with owners and operators, the Critical Infrastructure Partnership Advisory Council, and appropriate information sharing and analysis organizations, and in coordination with appropriate representatives from State and local governments--
(A) consult with relevant security experts and institutions of higher education, including university information security centers, appropriate nongovernmental cybersecurity experts, and representatives from national laboratories;
(B) review relevant regulations or compulsory standards or guidelines;
(C) review cybersecurity practices proposed under subsection (a); and
(D) consider any amendments to the cybersecurity practices and any additional cybersecurity practices necessary to ensure adequate remediation or mitigation of the cyber risks identified through an assessment conducted under section 102(a).
(2) Adoption.--
(A) In general.--Not later than 1 year after the date on which the top-level assessment is completed under section 102(a)(2)(A), the Council shall--
(i) adopt any cybersecurity practices proposed under subsection (a) that adequately remediate or mitigate identified cyber risks and any associated consequences identified through an assessment conducted under section 102(a); and
(ii) adopt any amended or additional cybersecurity practices necessary to ensure the adequate remediation or mitigation of the cyber risks identified through an assessment conducted under section 102(a).
(B) No submission by sector coordinating council.--If a sector coordinating council fails to propose to the Council cybersecurity practices under subsection (a) within 180 days of the date on which the top-level assessment is completed under section 102(a)(2)(A), not later than 1 year after the date on which the top-level assessment is completed under section 102(a)(2)(A) the Council shall adopt cybersecurity
Legislative Activity
Stay on top of the latest movement without scrolling through every action
Senate amendment submitted
July 31, 2012