II
114th CONGRESS
1st Session
S. 1068
IN THE SENATE OF THE UNITED STATES
April 23, 2015
Mr. Risch (for himself and Mr. Heinrich) introduced the following bill; which was read twice and referred to the Committee on Energy and Natural Resources
A BILL
To amend the Federal Power Act to protect the bulk-power system from cyber security threats.
Cyber security threats
Part II of the Federal Power Act (16 U.S.C. 824 et seq.) is amended by adding at the end the following:
Cyber security threats
Definitions
In this section:
Bulk-power system
The term bulk-power system has the meaning given the term in section 215.
Cyber security threat
The term cyber security threat means the imminent danger of a malicious act that disrupts, attempts to disrupt, or poses a significant risk of disrupting the operation of programmable electronic devices or communications networks (including hardware, software, and data) essential to the reliable operation of the bulk-power system.
Electric Reliability Organization
The term Electric Reliability Organization has the meaning given the term in section 215.
Secretary
The term Secretary means the Secretary of Energy.
Emergency authority of Secretary
In general
If the President submits to the Secretary a written notice of a determination by the President that immediate action is necessary to protect the bulk-power system from a cyber security threat, the Secretary may require, by order and with or without notice, any entity that owns, controls, or operates a bulk-power system facility to take such actions as the Secretary determines will best avert or mitigate the cyber security threat.
Coordination with Canada and Mexico
In exercising the authority pursuant to this subsection, the Secretary is encouraged to consult and coordinate with the appropriate officials in Canada and Mexico responsible for the protection of cyber security of the interconnected North American electricity grid.
Consultation
Before exercising authority pursuant to this subsection, to the maximum extent practicable, taking into consideration the nature of an identified cyber security threat and the urgency of need for action, the Secretary shall consult regarding implementation of actions that will effectively address the cyber security threat with—
any entities potentially subject to the cyber security threat that own, control, or operate bulk-power system facilities;
the Electric Reliability Organization;
the Electricity Sub-sector Coordinating Council (as defined in the document entitled Homeland Security Presidential Directive 7: Critical Infrastructure Identification, Prioritization, and Protection
); and
officials of other Federal departments and agencies, as appropriate.
Cost recovery
In general
The Commission shall establish a mechanism that permits owners, operators, or users of the bulk-power system to seek recovery of prudently incurred costs required to implement actions ordered by the Secretary under this subsection.
Requirements
Any rate or charge approved under a mechanism established under this paragraph—
shall be just and reasonable; and
shall not be unduly discriminatory or preferential.
Duration of emergency orders
An order issued by the Secretary pursuant to subsection (b) shall remain in effect for not longer than the 30-day period beginning on the effective date of the order, unless, during that 30 day-period, the Secretary—
provides to interested persons an opportunity to submit written data, recommendations, and arguments; and
affirms, amends, or repeals the order, subject to the condition that an amended order shall not exceed a total duration of 90 days.
.