Sponsors (2)
The bill strengthens national cybersecurity for the energy sector and speeds public‑private deployment of defenses, but does so with reduced transparency, limited external oversight, and centralized discretion that may favor larger providers over smaller or rural utilities.
Utilities and federal cyber teams get a centralized Energy Threat Analysis Center that provides real‑time threat analysis, alerts, and mitigation recommendations to improve detection and response to cyberattacks on the energy system.
The program is reauthorized and funded ($250M) through FY2027–2031, sustaining operations and resilience activities so defenses and services can be maintained over multiple years.
Pre‑approved contracting mechanisms and expedited reviews let utilities and state partners form faster public‑private partnerships to deploy defenses and services more quickly.
Information shared under the program is exempt from FOIA and state/local disclosure laws, reducing public transparency about program activities and possible misuse.
Expanded contracting authorities combined with secrecy risk concentrating decision‑making and operational control within the Department, which could leave smaller providers and rural communities with unequal access to assistance.
Provision of assistance and information is at the Secretary's sole, unreviewable discretion and creates no legal right, leaving applicants little recourse if aid or information is denied.
Based on analysis of 2 sections of legislative text.
Creates an Energy Threat Analysis Center, expands DOE authorities for threat sharing and operations, exempts shared info from FOIA, allows flexible contracting, and extends authorization to FY2027–2031.
Expands and restructures an existing Department of Energy program to create an Energy Threat Analysis Center (ETAC) that supports collective defense of the energy sector by sharing classified and unclassified threat information, conducting operational collaboration and analytics, and improving understanding of adversary tactics. It clarifies that participation and receipt of assistance are discretionary, exempts shared information from public disclosure, allows flexible contracting and partnership authorities to speed work, and extends the program's authorization period through FY2027–2031. The bill reorganizes statutory authorities, authorizes one or more physical ETAC locations, removes an older statutory paragraph, and keeps the program outside the Federal Advisory Committee Act while directing withholding of covered information from FOIA and comparable state/tribal/local disclosure laws.
Official title: To amend the Infrastructure Investment and Jobs Act to reauthorize the Department of Energy's Energy Sector Operational Support for Cyberresilience Program to provide operational support for energy sector cybersecurity and resilience.
Introduced February 2, 2026 by Kathy Castor · Last progress July 13, 2026