S.Amdt. 1917

SA 1917. Ms. HASSAN (for herself, Mr. Cornyn, Mr. Portman, and Mr.
Peters) submitted an amendment intended to be proposed by her to the
bill S. 4049, to authorize appropriations for fiscal year 2021 for
military activities of the Department of Defense, for military
construction, and for defense activities of the Department of Energy,
to prescribe military personnel strengths for such fiscal year, and for
other purposes; which was ordered to lie on the table; as follows:

At the appropriate place, insert the following:

SEC. __. CYBERSECURITY STATE COORDINATOR ACT.

(a) Short Title.--This section may be cited as the
``Cybersecurity State Coordinator Act of 2020''.
(b) Cybersecurity State Coordinator.--
(1) In general.--Subtitle A of title XXII of the Homeland
Security Act of 2002 (6 U.S.C. 651 et seq.) is amended--
(A) in section 2202(c) (6 U.S.C. 652(c))--
(i) in paragraph (10), by striking ``and'' at the end;
(ii) by redesignating paragraph (11) as paragraph (12); and
(iii) by inserting after paragraph (10) the following:
``(11) appoint a Cybersecurity State Coordinator in each
State, as described in section 2215; and''; and
(B) by adding at the end the following:

``SEC. 2215. CYBERSECURITY STATE COORDINATOR.

``(a) Appointment.--The Director shall appoint an employee
of the Agency in each State, with the appropriate
cybersecurity qualifications and expertise, who shall serve
as the Cybersecurity State Coordinator.
``(b) Duties.--The duties of a Cybersecurity State
Coordinator appointed under subsection (a) shall include--
``(1) building strategic relationships across Federal and,
on a voluntary basis, non-Federal entities by advising on
establishing governance structures to facilitate the
development and maintenance of secure and resilient
infrastructure;
``(2) serving as a Federal cybersecurity risk advisor and
coordinating between Federal and, on a voluntary basis, non-
Federal entities to support preparation, response, and
remediation efforts relating to cybersecurity risks and
incidents;
``(3) facilitating the sharing of cyber threat information
between Federal and, on a voluntary basis, non-Federal
entities to improve understanding of cybersecurity risks and
situational awareness of cybersecurity incidents;
``(4) raising awareness of the financial, technical, and
operational resources available from the Federal Government
to non-Federal entities to increase resilience against cyber
threats;
``(5) supporting training, exercises, and planning for
continuity of operations to expedite recovery from
cybersecurity incidents, including ransomware;
``(6) serving as a principal point of contact for non-
Federal entities to engage, on a voluntary basis, with the
Federal Government on preparing, managing, and responding to
cybersecurity incidents;
``(7) assisting non-Federal entities in developing and
coordinating vulnerability disclosure programs consistent
with Federal and information security industry standards; and
``(8) performing such other duties as determined necessary
by the Director to achieve the goal of managing cybersecurity
risks in the United States and reducing the impact of cyber
threats to non-Federal entities.
``(c) Feedback.--The Director shall consult with relevant
State and local officials regarding the appointment, and
State and local officials and other non-Federal entities
regarding the performance, of the Cybersecurity State
Coordinator of a State.''.
(2) Oversight.--The Director of the Cybersecurity and
Infrastructure Security Agency shall provide to the Committee
on Homeland Security and Governmental Affairs of the Senate
and the Committee on Homeland Security of the House of
Representatives a briefing on the placement and efficacy of
the Cybersecurity State Coordinators appointed under section
2215 of the Homeland Security Act of 2002, as added by
paragraph (1)--
(A) not later than 1 year after the date of enactment of
this Act; and
(B) not later than 2 years after providing the first
briefing under this paragraph.
(3) Rule of construction.--Nothing in this subsection or
the amendments made by this subsection shall be construed to
affect or otherwise modify the authority of Federal law
enforcement agencies with respect to investigations relating
to cybersecurity incidents.
(4) Technical and conforming amendment.--The table of
contents in section 1(b) of the Homeland Security Act of 2002
(Public Law 107-296; 116 Stat. 2135) is amended by inserting
after the item relating to section 2214 the following:

``Sec. 2215. Cybersecurity State Coordinator.''.
______