S. 2392 – Reading Mode

115th CONGRESS

2d Session

S. 2392

IN THE SENATE OF THE UNITED STATES

February 7, 2018

Mr. Daines introduced the following bill; which was read twice and referred to the Committee on Homeland Security and Governmental Affairs

A BILL

To amend the Homeland Security Act of 2002 to authorize the Secretary of Homeland Security to designate cybersecurity technologies that qualify for protection under systems of risk and litigation management.

Short title

This Act may be cited as the Cyber Support for Anti-Terrorism by Fostering Effective Technologies Act of 2018 or the Cyber SAFETY Act of 2018.

Inclusion of qualifying cyber incidents

Subtitle G of title VIII of the Homeland Security Act of 2002 (6 U.S.C. 441 et seq.) is amended—

(1)

in section 862(b) (6 U.S.C. 441(b))—

(A)

in the heading, by striking Designation of qualified anti-terrorism technologies and inserting Designation of anti-Terrorism and cybersecurity technologies;

(B)

in the matter preceding paragraph (1), by inserting or cybersecurity after anti-terrorism;

(C)

in paragraphs (3), (4), and (5), by inserting or cybersecurity after anti-terrorism each place that term appears; and

(D)

in paragraph (7)—

(i)

by inserting “or cybersecurity” after “Anti-terrorism”; and

(ii)

by inserting or qualifying cyber incidents after acts of terrorism;

(2)

in section 863 (6 U.S.C. 442)—

(A)

by inserting or cybersecurity after anti-terrorism each place that term appears;

(B)

by inserting or qualifying cyber incident after act of terrorism each place that term appears;

(C)

by inserting or qualifying cyber incidents after acts of terrorism each place that term appears; and

(D)

in subsection (d)(3)—

(i)

by striking (3) Certificate.— and inserting the following:

(3) Certificates.—

(A)

Certificates for anti-terrorism technologies

; and

(ii)

by adding at the end the following:

(B)

Certificates for cybersecurity technologies

(i)

In general

For cybersecurity technology reviewed and approved by the Secretary, the Secretary will issue a certificate of conformance to the Seller and place the cybersecurity technology on an Approved Product List for Homeland Security.

(ii)

Subsequent review

Not less frequently than once every 2 years, the Secretary shall conduct a new review of any cybersecurity technology for which the Secretary issued a certification under clause (i).

;

(3)

in section 864 (6 U.S.C. 443)—

(A)

by inserting or cybersecurity after anti-terrorism each place that term appears; and

(B)

by inserting or qualifying cyber incident after act of terrorism each place that term appears; and

(4)

in section 865 (6 U.S.C. 444)—

(A)

in paragraph (1)—

(i)

in the heading, by inserting or cybersecurity after anti-terrorism;

(ii)

by inserting or cybersecurity after anti-terrorism;

(iii)

by inserting or qualifying cyber incidents after acts of terrorism; and

(iv)

by inserting or incidents after such acts; and

(B)

by adding at the end the following:

(7)

Qualifying cyber incident

The term qualifying cyber incident has the meaning given the term incident in section 3552(b) of title 44, United States Code.

(8)

Final agency action

The determination by the Secretary that an act of terrorism or qualifying cyber incident has occurred shall constitute a final agency action subject to review under chapter 7 of title 5, United States Code.