CISA gets new power to train officials on infrastructure security

What it does

This bill establishes a one-year pilot program for state, local, tribal, and territorial officials to receive training from the Cybersecurity and Infrastructure Security Agency (CISA) on how to assess security vulnerabilities and terrorism risks at critical infrastructure facilities. It also amends the Homeland Security Act to authorize CISA to maintain clearinghouses where critical infrastructure owners and operators can access security guidance and best practices, and requires CISA to publish annual reports on its outreach efforts to these stakeholders.

Why we flagged it

The bill's operative mechanism is establishing a training pilot program and information-sharing authority for critical infrastructure security. It is a straightforward public-safety measure with no private carve-outs or narrow beneficiaries.

What the text implies

• The Paperwork Reduction Act exemption for CISA's rulemaking and information collection may allow the agency to gather data from critical infrastructure operators without standard OMB review, potentially reducing transparency in data-collection practices.
• The definition of 'nonprofit organization' includes only those 'determined by the Secretary to be at risk of a terrorist attack,' creating a subjective gatekeeping mechanism that could limit which nonprofits access the clearinghouse.

The full analysis lists 3 implications of this text.

Who it affects

The bill enhances public safety by training officials to identify infrastructure vulnerabilities and terrorism risks, and mandates transparent annual reporting on CISA's outreach to critical infrastructure operators. Citizens benefit from improved infrastructure security and government accountability through required disclosure of outreach methods and coverage across sectors and regions.