Sec. 11510. Cybersecurity tool; cyber coordinator
354 words·~2 min read·
/bill/117/hr/3684/eas/section-11510·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
In this section: The term Administrator means the Administrator of the Federal Highway Administration. The term cyber incident has the meaning given the term incident in section 3552 of title 44, United States Code. The term transportation authority means— a public authority (as defined in section 101(a) of title 23, United States Code); an owner or operator of a highway (as defined in section 101(a) of title 23, United States Code); a manufacturer that manufactures a product related to transportation; and a division office of the Federal Highway Administration.
Not later than 2 years after the date of enactment of this Act, the Administrator shall develop a tool to assist transportation authorities in identifying, detecting, protecting against, responding to, and recovering from cyber incidents. In developing the tool under paragraph (1), the Administrator shall— use the cybersecurity framework established by the National Institute of Standards and Technology and required by Executive Order 13636 of February 12, 2013 (78 Fed. Reg. 11739; relating to improving critical infrastructure cybersecurity); establish a structured cybersecurity assessment and development program; coordinate with the Transportation Security Administration and the Cybersecurity and Infrastructure Security Agency; consult with appropriate transportation authorities, operating agencies, industry stakeholders, and cybersecurity experts; and provide for a period of public comment and review on the tool.
Not later than 2 years after the date of enactment of this Act, the Administrator shall designate an office as a cyber coordinator , which shall be responsible for monitoring, alerting, and advising transportation authorities of cyber incidents. The office designated under paragraph
(1)shall, in coordination with the Transportation Security Administration and the Cybersecurity and Infrastructure Security Agency— provide to transportation authorities a secure method of notifying the Federal Highway Administration of cyber incidents; share the information collected under subparagraph
(A)with the Transportation Security Administration and the Cybersecurity and Infrastructure Security Agency; monitor cyber incidents that affect transportation authorities; alert transportation authorities to cyber incidents that affect those transportation authorities; investigate unaddressed cyber incidents that affect transportation authorities; and provide to transportation authorities educational resources, outreach, and awareness on fundamental principles and best practices in cybersecurity for transportation systems.
Connectionstraces to 1
Traces to 1 document
1 reference not yet in our index
- 78 FR 11739
Citation graph
cites case law
Cites 2Cited by 0 across 0 sources