Sec. 3. Cybersecurity certification for rail rolling stock and operations
237 words·~1 min read·
/bill/116/hr/2739/ih/section-3A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Section 5323 of title 49, United States Code, as amended by section 2, is amended by adding at the end the following: As a condition of financial assistance made available under this chapter, a recipient that operates a rail fixed guideway public transportation system shall certify that the recipient has established a process to develop, maintain, and execute a written plan for identifying and reducing cybersecurity risks. For the process required under paragraph (1), a recipient of assistance under this chapter shall— utilize the approach described by the voluntary standards and best practices developed under section 2(c)(15) of the National Institute of Standards and Technology Act ( 15 U.S.C. 272(c)(15) ), as applicable; identify hardware and software that the recipient determines should undergo third-party testing and analysis to mitigate cybersecurity risks, such as hardware or software for rail rolling stock under proposed procurements; and utilize the approach described in any voluntary standards and best practices for rail fixed guideway public transportation systems developed under the authority of the Secretary of Homeland Security, as applicable.
Nothing in this subsection shall be construed to interfere with the authority of— the Secretary of Homeland Security to publish or ensure compliance with requirements or standards concerning cybersecurity for rail fixed guideway public transportation systems; or the Secretary of Transportation under section 5329 to address cybersecurity issues as those issues relate to the safety of rail fixed guideway public transportation systems. .
Connectionstraces to 1
Traces to 1 document
Citation graph
cites case law
Sec. 3
Cybersecurity certification for rail rolling stock and operations
Cites 1Cited by 0 across 0 sources