Sponsor
Lauren Underwood
Representative · D-IL
Representative · D-IL
The bill enhances local preparedness and access to CISA security guidance for critical infrastructure, but it reduces some paperwork oversight, raises privacy concerns for infrastructure operators, and relies on a short pilot that may limit lasting benefits.
State, local, Tribal, and territorial officials will receive training and resources to conduct vulnerability and terrorism risk assessments, improving local preparedness for critical infrastructure threats.
Owners and operators of critical infrastructure (e.g., utilities, hospitals, nonprofits) gain a centralized CISA clearinghouse to access voluntary security guidance and best practices, making expert resources easier to obtain and implement.
Stakeholders (state/local governments and nonprofits) will have access to annual public reports from CISA summarizing outreach and engagement by sector and region, increasing transparency and aiding coordination planning.
State, local, tribal governments and nonprofits could face increased unreviewed data collection and reduced public oversight because related rulemakings and information collections are exempted from the Paperwork Reduction Act.
Owners and operators of critical infrastructure (utilities, hospitals) may face privacy and information-sharing risks if clearinghouses aggregate or disseminate sensitive operational details.
The program is structured as a one-year pilot, which may be too short to build sustained local capacity without additional funding or an extension, limiting long-term impact.
Based on analysis of 2 sections of legislative text.
Directs CISA to run a one-year training pilot for subnational officials, authorize voluntary security guidance clearinghouses, and require annual outreach reporting.
Official title: To establish a pilot program for State, local, Tribal, and territorial government officials to be trained by the Cybersecurity and Infrastructure Security Agency regarding carrying out security vulnerability or terrorism risk assessments of critical infrastructure facilities, and for other purposes.
Introduced July 21, 2026 by Lauren Underwood · Last progress July 21, 2026
Requires CISA to run a one-year pilot program (a “force multiplier”) within one year of enactment to train appropriate State, local, Tribal, and territorial officials, then report results to relevant congressional committees. Authorizes CISA to maintain voluntary clearinghouses of trusted security guidance and requires an annual public report on outreach activities, while exempting related rulemakings and information collections from the Paperwork Reduction Act.