Sec. 5. Cybersecurity tools and cyber coordinator
313 words·~1 min read·
/bill/116/s/2182/is/section-5A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
In this section: The term Administrator means the Administrator of the Federal Highway Administration. The term cyber incident has the meaning given the term significant cyber incident in Presidential Policy Directive–41 (July 26, 2016, relating to cyber incident coordination). The term transportation authority means— a public authority (as defined in section 101(a) of title 23, United States Code); an owner or operator of a highway (as defined in section 101(a) of title 23, United States Code); a manufacturer that manufactures a product related to transportation; and a division office of the Federal Highway Administration.
Not later than 2 years after the date of enactment of this Act, the Administrator shall develop a tool to assist transportation authorities in identifying, detecting, protecting against, responding to, and recovering from cyber incidents. In developing the tool under paragraph (1), the Administrator shall— use the cybersecurity framework established by the National Institute of Standards and Technology and required by Executive Order 13636 of February 12, 2013 (78 Fed. Reg. 11739; relating to improving critical infrastructure cybersecurity); establish a structured cybersecurity assessment and development program; consult with appropriate transportation authorities, operating agencies, industry stakeholders, and cybersecurity experts; and provide for a period of public comment and review on the tool.
Not later than 2 years after the date of enactment of this Act, the Administrator shall designate an office as a cyber coordinator , which shall be responsible for monitoring, alerting, and advising transportation authorities of cyber incidents. The office designated under paragraph
(1)shall— provide to transportation authorities a secure method of notifying a single Federal entity of cyber incidents; monitor cyber incidents that affect transportation authorities; alert transportation authorities to cyber incidents that affect those transportation authorities; investigate unaddressed cyber incidents that affect transportation authorities; and provide to transportation authorities educational resources, outreach, and awareness on fundamental principles and best practices in cybersecurity for transportation systems.
Connectionstraces to 1
Traces to 1 document
1 reference not yet in our index
- 78 FR 11739
Citation graph
cites case law
Cites 2Cited by 0 across 0 sources