Securing Our Critical Infrastructure Act

This bill turns a federal pilot program that warns organizations about ransomware weaknesses into an ongoing security vulnerability warning program run by the Cybersecurity and Infrastructure Security Agency (CISA). The program would cover security weaknesses in information systems in general, not only those tied to ransomware, and would focus on certain utilities, including water and wastewater utilities serving up to 100,000 people. Covered utilities would be automatically enrolled in CISA's cyber hygiene services but could opt out, and CISA would respond to cyber incidents on their behalf when it finds they have been affected. Information that entities share with the program would be exempt from federal, state, local, and Tribal public records laws, and the program would end five years after enactment.

Full text and official record on Congress.gov

Sponsors

• Josh Gottheimer Democrat sponsor
• 4 cosponsors