Summary:
FEMA Reauthorization Act of 2013 - Title I: Reauthorization of FEMA and Modernization of Integrated Public Alert and Warning System - (Sec. 101) Amends the Department of Homeland Security Appropriations Act, 2007 to authorize appropriations for the Federal Emergency Management Agency (FEMA) for FY2014-FY2016 for management and administration.

(Sec. 102) - Integrated Public Alert and Warning System Modernization Act of 2013 - Directs the Administrator of FEMA to modernize and implement the integrated public alert and warning system of the United States to ensure that the President is able, under all conditions, to alert governmental authorities and the civilian population in areas endangered by disasters, including by:

 establishing common alerting and warning protocols, standards, terminology, and operating procedures for such system; including in such system the capability to adapt the distribution and content of communications on the basis of geographic location, risks, or personal user preferences and to alert individuals with disabilities and individuals with access and functional needs; ensuring that training, tests, and exercises are conducted for such system; establishing and integrating into the National Incident Management System a comprehensive and periodic training program to instruct and educate federal, state, tribal, and local government officials in the use of the Common Alerting Protocol enabled Emergency Alert System; conducting nationwide tests of the system at least every three years; and ensuring that the system is resilient, secure, and can withstand acts of terrorism and other external attacks. Requires the system to:

 incorporate multiple communications technologies, be designed to incorporate future technologies for communicating directly with the public to provide alerts to the largest portion of the affected population feasible and to improve the ability of remote areas to receive alerts, promote local and regional partnerships to enhance community preparedness and response, provide redundant alert mechanisms, and protect individual privacy. Directs the Administrator to submit to specified congressional committees a detailed plan to implement the system, including a time line, a spending plan, and recommendations for any additional authority necessary.

Directs the FEMA Administrator to establish the Integrated Public Alert and Warning System Advisory Committee to develop recommendations for the system. Terminates the Advisory Committee not later than six years after this Act's enactment.

Title II: Stafford Act and Other Programs - (Sec. 201) Amends the Robert T. Stafford Disaster Relief and Emergency Assistance Act (Stafford Act) to direct the Administrator to:

 continue to administer the National Urban Search and Rescue Response System, provide for a national network of standardized search and rescue resources to assist states and local governments in responding to hazards, designate task forces to participate in the System, enter into an agreement with the state or local government sponsoring a task force (sponsoring agency) with respect to participation, and maintain such management and other technical teams as necessary to administer the System. Authorizes the Administrator to appoint a System member for a period of federal service to participate in sponsored or sanctioned exercises, pre-incident staging, major disaster and emergency response activities, and training events.

Directs the Administrator to: (1) establish and maintain an advisory committee to provide expert recommendations to assist the Administrator in administering the System; (2) enter into an annual preparedness cooperative agreement with each sponsoring agency for training and exercises, equipment acquisition and maintenance, and medical monitoring required for responder safety and health; and (3) enter into response cooperative agreements under which the Administrator agrees to reimburse sponsoring agencies for costs incurred in responding to a major disaster or emergency.

Authorizes appropriations to carry out the System for FY2014-FY2016.

(Sec. 202) Includes public broadcasting facilities and community centers, including tax-exempt houses of worship, within the definition of a "private nonprofit facility," and public broadcasting within the definition of a "critical service," for purposes of provisions concerning eligibility for disaster assistance.

(Sec. 203) Makes a church, synagogue, mosque, temple, or other house of worship, and a private nonprofit facility operated by a religious organization, eligible for disaster assistance contributions from the President, without regard to the religious character of the facility or the primary religious use of the facility. Makes this section applicable to the provision of assistance in response to a major disaster or emergency declared on or after October 28, 2012.

(Sec. 204) Authorizes appropriations for grants for implementation of the Emergency Management Assistance Compact for FY2014-FY2016. Makes states and the Administrator of the Compact eligible to receive such grants.

(Sec. 205) Directs the FEMA Administrator to study and report to Congress on the differences between: (1) the physical testing standards that the Administrator applies with respect to electric utility facilities as a condition for federal assistance, and (2) the physical testing standards that are applied to electric utility facilities by the electric utilities industry and by the Rural Utilities Service of the Department of Agriculture (USDA).

(Sec. 206) Directs the FEMA Administrator, using funds from FEMA's management and expenses account, to review and report on options available to housing cooperatives and condominium associations to assist in repairing and rebuilding common areas following a major disaster. Requires such report to include information on:

 the current eligibility of housing cooperative and condominium association owners and residents to receive funds under FEMA disaster relief programs, the availability of individual assistance for such owners and residents to help cover the costs of repairing disaster-related damage to common areas, and options for addressing gaps in available assistance to address disaster-related damage to common areas. (Sec. 207) Directs the FEMA Administrator to issue a rule that limits the time frame of any audit conducted under the Stafford Act.

fema reauthorization act title reauthorization fema modernization integrated public alert warning system sec amends department_of_homeland_security appropriations act authorize appropriations federal_emergency_management_agency fema fy2014-fy2016 management administration sec integrated public alert warning system modernization act directs administrator fema modernize implement integrated public alert warning system united_states ensure president able conditions alert governmental authorities civilian population areas endangered disasters including establishing common warning protocols standards terminology operating procedures system including system capability adapt distribution content communications basis geographic location risks personal user preferences alert individuals disabilities individuals access functional needs ensuring training tests exercises conducted system establishing integrating national incident management system comprehensive periodic training program instruct educate federal state tribal local government officials use common protocol enabled emergency alert system conducting nationwide tests system years ensuring system resilient secure withstand acts terrorism external attacks requires system incorporate multiple communications technologies designed incorporate future technologies communicating directly public provide alerts largest portion affected population feasible improve ability remote areas receive alerts promote local regional partnerships enhance community preparedness response provide redundant alert mechanisms protect individual privacy directs administrator submit specified congressional committees detailed plan implement system including time line spending plan recommendations additional authority necessary directs fema administrator establish integrated public alert warning system advisory_committee develop recommendations system terminates advisory_committee later years act enactment title stafford act programs sec amends robert stafford disaster relief emergency assistance_act stafford act direct administrator continue administer national urban search rescue response system provide national network standardized search rescue resources assist states local governments responding hazards designate task forces participate system enter agreement state local government sponsoring task_force sponsoring agency respect participation maintain management technical teams necessary administer system authorizes administrator appoint system member period federal service participate sponsored sanctioned exercises pre incident major disaster emergency response activities training events directs administrator establish maintain advisory_committee provide expert recommendations assist administrator administering system enter annual preparedness cooperative agreement sponsoring agency training exercises equipment acquisition maintenance medical monitoring required responder safety health enter response cooperative agreements administrator agrees reimburse sponsoring agencies costs incurred responding major disaster emergency authorizes appropriations carry system fy2014-fy2016 sec includes public broadcasting facilities community centers including tax exempt houses worship definition private nonprofit facility public broadcasting definition critical service purposes provisions concerning eligibility disaster assistance sec makes church house worship private nonprofit facility operated religious organization eligible disaster assistance contributions president regard religious character facility primary religious use facility makes section applicable provision assistance response major disaster emergency declared october sec authorizes appropriations grants implementation emergency management assistance compact fy2014-fy2016 makes states administrator compact eligible receive grants sec directs fema administrator study report congress differences physical testing standards administrator applies respect electric utility facilities condition federal assistance physical testing standards applied electric utility facilities electric utilities industry rural_utilities_service department_of_agriculture usda sec directs fema administrator funds fema management expenses account review report options available housing cooperatives condominium associations assist repairing rebuilding common areas following major disaster requires report include information current eligibility housing cooperative condominium association owners residents receive funds fema disaster relief programs availability individual assistance owners residents help cover costs repairing disaster related damage common areas options addressing gaps available assistance address disaster related damage common areas sec directs fema administrator issue rule limits time frame audit conducted stafford act


Summary:
Critical Infrastructure Protection Act or CIPA - Amends the Homeland Security Act of 2002 to require the Secretary of Homeland Security (DHS) to: (1) include in national planning scenarios the threat of electromagnetic pulse (EMP) events; and (2) conduct outreach to educate owners and operators of critical infrastructure, emergency planners, and emergency responders at all levels of government of the threat of EMP events.

Directs the Secretary, acting through the Under Secretary for Science and Technology to conduct research and development to mitigate the consequences of EMP events, including: (1) an objective scientific analysis of the risks to critical infrastructures from a range of EMP events; (2) determination of the critical national security assets and vital civic utilities and infrastructures that are at risk from EMP events; (3) an evaluation of emergency planning and response technologies that would address the findings and recommendations of experts, including those of the Commission to Assess the Threat to the United States from Electromagnetic Pulse Attack; (4) an analysis of available technology options to improve the resiliency of critical infrastructure to EMP; and (5) the restoration and recovery capabilities of critical infrastructure under differing levels of damage and disruption from various EMP events.

Includes among the responsibilities of the Secretary of Homeland Security relating to intelligence and analysis and infrastructure protection to prepare and submit to specified congressional committees: (1) a recommended strategy to protect and prepare the critical infrastructure of the American homeland against EMP events, including from acts of terrorism; and (2) biennial updates on the status of such strategy. Authorizes the Secretary to incorporate such strategy into a broader recommendation developed by the Department of Homeland Security (DHS) to help protect and prepare critical infrastructure from terrorism and other threats.

critical infrastructure protection act amends homeland_security act require secretary homeland_security dhs include national planning scenarios threat electromagnetic pulse emp events conduct outreach educate owners operators critical infrastructure emergency planners emergency responders levels government threat emp events directs secretary acting secretary science_and_technology conduct research development mitigate consequences emp events including objective scientific analysis risks critical infrastructures range emp events determination critical national security assets vital civic utilities infrastructures risk emp events evaluation emergency planning response technologies address findings recommendations experts including commission assess threat united_states electromagnetic pulse attack analysis available technology options improve resiliency critical infrastructure emp restoration recovery capabilities critical infrastructure levels damage disruption emp events includes responsibilities secretary homeland_security relating intelligence analysis infrastructure protection prepare submit specified congressional committees recommended strategy protect prepare critical infrastructure american homeland emp events including acts terrorism biennial updates status strategy authorizes secretary incorporate strategy broader recommendation developed department_of_homeland_security dhs help protect prepare critical infrastructure terrorism threats


Summary:
(This measure has not been amended since it was introduced. The summary of that version is repeated here.)

National Laboratories Mean National Security Act - Amends the Homeland Security Act of 2002 to authorize recipients of grants under the Urban Area Security Initiative and the State Homeland Security Grant Program to work in conjunction with a National Laboratory to achieve target capabilities related to preventing, preparing for, protecting against, and responding to acts of terrorism.

measure amended introduced summary version repeated national_laboratories mean national security act_-_amends homeland_security act authorize recipients grants urban_area_security_initiative state_homeland_security_grant_program work conjunction national_laboratory achieve target capabilities related preventing preparing protecting responding acts terrorism


Summary:
Border Patrol Pay Reform Act of 2013 - Sets forth additional requirements relating to the rates of pay and terms of employment for U.S. Border Patrol agents (i.e., federal employees who detect and prevent illegal entry and smuggling of aliens, commercial goods, narcotics, weapons, or contraband into the United States).

Requires Border Patrol agents to elect each year to: (1) be assigned to either a specified level one or level two border patrol rate of pay governing regular rates of pay and overtime work requirements, or (2) decline both levels. Expresses the sense of Congress that U.S. Customs and Border Protection (CBP) should ensure that not more than 10% of agents stationed at a location decline to be assigned to either the level 1 or level 2 border patrol rate of pay. Empowers CBP, without limitation, to require agents to perform overtime work in accordance with agency needs, including if needed in the event of a local or national emergency.

border_patrol pay reform_act sets forth additional requirements relating rates pay terms employment border_patrol agents federal employees detect prevent illegal entry smuggling aliens commercial goods narcotics weapons contraband united_states requires border_patrol agents elect year assigned specified level level border_patrol rate pay governing regular rates pay overtime work requirements decline levels expresses sense congress customs border_protection cbp ensure agents stationed location decline assigned level level border_patrol rate pay empowers cbp limitation require agents perform overtime work accordance agency needs including needed event local national emergency


Summary:
National Cybersecurity and Critical Infrastructure Protection Act of 2014 - Title I: Securing the Nation Against Cyber Attack - (Sec. 102) Amends the Homeland Security Act of 2002 (HSA) to require the Secretary of Homeland Security to conduct cybersecurity activities, including the provision of shared situational awareness among federal entities to enable real-time, integrated, and operational actions to protect from, prevent, mitigate, respond to, and recover from cyber incidents.

Defines “cyber incident” as an incident, or an attempt to cause an incident, that if successful, would: (1) jeopardize the security, integrity, confidentiality, or availability of an information system or network or any information stored on, processed on, or transiting such a system; (2) violate laws or procedures relating to system security, acceptable use policies, or acts of terrorism against such a system or network; or (3) deny access to or degrade, disrupt, or destruct such a system or network or defeat an operations or technical control of such a system or network.

(Sec. 103) Directs the Secretary to coordinate with federal, state, and local governments, national laboratories, critical infrastructure owners and operators, and other cross-sector coordinating entities to: (1) facilitate a national effort to strengthen and maintain critical infrastructure from cyber threats; (2) ensure that Department of Homeland Security (DHS) policies and procedures enable critical infrastructure owners and operators to receive appropriate and timely cyber threat information; (3) seek industry sector-specific expertise to develop voluntary security and resiliency strategies and to ensure that the allocation of federal resources is cost effective and reduces burdens on critical infrastructure owners and operators; (4) upon request, provide risk management assistance to entities and education to critical infrastructure owners and operators; and (5) coordinate a research and development strategy for cybersecurity technologies.

Directs the Secretary: (1) to manage federal efforts to secure federal civilian information systems (excluding national security, Department of Defense [DOD], military, and intelligence community systems) using a risk-based and performance-based approach and, upon request, to support the efforts of critical infrastructure owners and operators to protect against cyber threats; (2) to direct a DHS entity to serve as a federal civilian entity by and among federal, state, and local governments, private entities, and critical infrastructure sectors to share cyber threat information; (3) to promote national awareness and educate the public regarding information system security; (4) upon request, to facilitate cyber incident response and recovery assistance and provide analysis and warnings related to threats to, and vulnerabilities of, critical information systems, crisis and consequence management support, and other remote or on-site technical assistance to federal, state, and local government entities and private entities for cyber incidents affecting critical infrastructure; and (5) to engage with international partners and conduct outreach to educational institutions.

Requires the Secretary to: (1) designate critical infrastructure sectors; and (2) recognize, for each sector, a previously designated Sector Specific Agency (SSA), a Sector Coordinating Council (SCC), and at least one Information Sharing and Analysis Center (ISAC).

Permits to be included as critical infrastructure sectors:

 chemical; commercial facilities; communications; critical manufacturing; dams; Defense Industrial Base; emergency services; energy; financial services; food and agriculture; government facilities; health care and public health; information technology; nuclear reactors, materials, and waste; transportation systems; and water and wastewater systems. Requires SCCs to: (1) be comprised of small, medium, and large critical infrastructure owners and operators, private entities, and representative trade associations; and (2) serve as a self-governing, self-organized, primary policy, planning, and strategic communications entity for coordinating with DHS, SSAs, and ISACs on security and resilience activities and emergency response and recovery efforts.

Prohibits a government entity with regulating authority from being an SCC member. Bars the Secretary from having any role in the determination of SCC membership.

Directs the Secretary to implement procedures for continuous, collaborative, and effective interactions between DHS and critical infrastructure owners and operators.

(Sec. 104) Establishes the National Cybersecurity and Communications Integration Center (NCCIC) as a federal civilian information sharing interface to: (1) provide shared situational awareness to enable real-time, integrated, and operational actions across the federal government; and (2) share cyber threat information among federal, state, and local government entities, ISACs, private entities, and critical infrastructure owners and operators that have information sharing relationships.

Requires the NCCIC to include: (1) at least one ISAC, (2) the Multi-State Information Sharing and Analysis Center to collaborate with state and local governments, (3) the U.S. Computer Emergency Readiness Team, (4) the Industrial Control System Cyber Emergency Response Team, and (5) the National Coordinating Center for Telecommunications.

Requires the NCCIC to: (1) promote ongoing multi-directional sharing among entities and provide technical assistance as well as crisis management support; (2) identify requirements for data and information formats and accessibility, system interoperability, redundant systems, and alternative capabilities in the event of a disruption in NCCIC's primary information sharing mechanisms; (3) cooperate with international partners to share information and respond to cyber incidents; (4) safeguard sensitive cyber threat information from unauthorized disclosure; and (5) participate in appropriate exercises run by the National Exercise Program.

Directs the NCCIC to require other federal civilian agencies to provide NCCIC with: (1) reports and information about cyber incidents, threats, and vulnerabilities affecting federal civilian information systems and critical infrastructure systems; (2) cyber incident detection, analysis, mitigation, and response information; and (3) cyber threat information received by such agencies. Requires the NCCIC, in the event a private vendor product or service of such an agency is implicated, to first notify such private vendor of a vulnerability before further disclosing such information.

Directs the NCCIC to require federal civilian agencies with data breaches involving unauthorized acquisition or access of personally identifiable information to notify: (1) the NCCIC without unreasonable delay after discovery of the breach; and (2) potential victims without unreasonable delay, based on the risk of harm and consistent with the needs of law enforcement.

 Requires the NCCIC to: (1) collaborate with SCCs, ISACs, SSAs, and relevant critical infrastructure sectors on the development of prioritized federal response efforts to support the defense and recovery of critical infrastructure from cyber incidents; and (2) facilitate continuous improvements to the security and resiliency of public safety communications networks.

Directs the Secretary to report annually to Congress and the Comptroller General (GAO) regarding: (1) major cyber incidents involving federal civilian agency information systems, including aggregate statistics on the number of breaches, the extent of any personally identifiable information involved, the volume of data exfiltrated, the consequential impact, and the estimated cost of remedies; (2) the capacity of the NCCIC to carry out its cybersecurity mission; (3) DHS's interactions with critical infrastructure sectors, SCCs, and SSAs; and (4) the volume and range of voluntary technical assistance sought and provided by DHS to critical infrastructure owners and operators.

Requires a Comptroller General report on the effectiveness of NCCIC.

(Sec. 105) Requires the Secretary to establish Cyber Incident Response Teams to provide technical assistance and recommendations to federal, state, and local government entities, private entities, and critical infrastructure owners and operators.

Directs the Secretary, in coordination with SCCs, ISACs, and federal, state, and local governments, to develop, regularly update, and exercise a National Cybersecurity Incident Response Plan that: (1) includes emergency response plans associated with cyber threats to critical infrastructure, information systems, or networks; (2) adapts to a changing cyber threat environment; (3) incorporates best practices from exercises, training, and after-action reports; and (4) facilitates coordination between DHS and each critical infrastructure sector.

(Sec. 106) Redesignates the National Protection and Programs Directorate as the Cybersecurity and Infrastructure Protection Directorate.

Requires the President, with the advice and consent of the Senate, to appoint: (1) the Under Secretary for Cybersecurity and Infrastructure Protection, (2) the Deputy Under Secretary for Cybersecurity, and (3) the Deputy Under Secretary for Infrastructure Protection.

Requires the Secretary to report to Congress with recommendations for: (1) making the Cybersecurity and Communications Office an operational component of DHS; and (2) restructuring the SAFETY Act Office (the office implementing the Support Anti-terrorism by Fostering Effective Technologies Act of 2002) within DHS to provide incentives for the development and deployment of anti-terrorism technologies, including the use of third-party registrars to improve the certification process.

Directs the Secretary to report to Congress regarding the effectiveness of DHS's acquisition processes for cybersecurity technologies.

Title II: Public-Private Collaboration on Cybersecurity - (Sec. 201) Directs the National Institute of Standards and Technology (NIST) to facilitate and support the development of a voluntary, industry-led set of standards and processes to reduce cyber risks to critical infrastructure. Prohibits NIST from requiring the use of specific solutions, products, services, or manufacturing or design techniques.

Requires the Secretary to: (1) meet biannually with each SCC, and (2) submit annual reports to Congress on the state of cybersecurity in each sector.

(Sec. 202) Expands liability protections for technology providers under the Support Anti-terrorism by Fostering Effective Technologies Act of 2002 to include designated cybersecurity technologies deployed in defense of qualifying cyber incidents, which include: (1) unlawful or unauthorized access incidents; (2) disruption of the integrity, operation, confidentiality, or availability of programmable electronic devices or communication networks; (3) misappropriation, corruption, or disruption of data, assets, information, or intellectual property; and (4) harm inside or outside the United States that results in damages, disruptions, or casualties severely affecting the U.S. population, infrastructure, economy, national morale, or federal, state, local, or tribal government functions.

(Sec. 203) Prohibits this Act from being construed to create or authorize any new regulations or additional federal government regulatory authority.

(Sec. 204) Declares that no additional funds are authorized to be appropriated to carry out this Act.

(Sec. 205) Prohibits this Act from permitting DHS to engage in monitoring, surveillance, exfiltration, or other collection activities for the purpose of tracking an individual's personally identifiable information.

(Sec. 206) Directs the Secretary to determine the feasibility and potential benefit of developing a visiting security researchers program from academia, including cybersecurity scholars at DHS's Centers of Excellence.

(Sec. 207) Directs the Secretary to enter into an agreement with the National Research Council (NRC) to research the future resilience and reliability of the nation's electric power transmission and distribution system. Names such research the "Saving More American Resources Today Study" or "SMART Study."

Requires the NRC to report to the Secretary and Congress regarding its findings.

Title III: Homeland Security Cybersecurity Workforce - (Sec. 301) Amends the HSA to add provisions entitled the Homeland Security Cybersecurity Boots-on-the-Ground Act, which require the Secretary to: (1) develop occupation categories for individuals performing activities in furtherance of DHS's cybersecurity mission, (2) ensure that such categories may be used throughout DHS and are made available to other federal agencies, and (3) conduct an annual assessment of the readiness and capacity of the DHS workforce to meet its cybersecurity mission.

Directs the Secretary to include in such readiness assessment information on which cybersecurity positions are performed by: (1) permanent full time departmental employees (together with demographic information about such employees' race, ethnicity, gender, disability status, and veterans status); (2) individuals employed by independent contractors; and (3) individuals employed by other federal agencies, including the National Security Agency (NSA). Requires the assessment to address vacancies within the supervisory workforce, job training, and recruiting costs.

Directs the Secretary to develop: (1) a workforce strategy that enhances the readiness, capacity, training, recruitment, and retention of the DHS cybersecurity workforce, including a multi-phased recruitment plan, a 5-year implementation plan, and a 10-year projection of DHS workforce needs; and (2) a process to verify that employees of independent contractors who serve in DHS cybersecurity positions receive initial and recurrent information security and role-based security training commensurate with assigned responsibilities.

Requires the Secretary to provide Congress with annual updates regarding such strategies, assessments, and training. Requires the Comptroller General to study and report to the Secretary and Congress with respect to such assessments and strategies.

Directs the Secretary to report to Congress regarding the feasibility of establishing a Cybersecurity Fellowship Program to offer a tuition payment plan for undergraduate and doctoral candidates who agree to work for DHS for an agreed-upon period of time.

(Sec. 302) Authorizes the Secretary to exercise personnel authorities (in the same manner as the DOD Secretary exercises authority with respect to civilian intelligence personnel and scholarship programs) to establish positions in the excepted service, appoint individuals, fix pay, and pay retention bonuses if needed to retain essential DHS employees who perform functions relating to the security of federal civilian information systems, critical infrastructure information systems, or related networks. Requires the Secretary to provide an explanation to Congress before announcing a bonus.

Requires the Secretary to provide an annual report to Congress for a specified period regarding the processes used in accepting applications, assessing candidates, ensuring adherence to veterans' preference, and selecting applicants for vacancies to be filled by a qualified employee.

national cybersecurity critical infrastructure protection act title securing nation cyber attack sec amends homeland_security act hsa require secretary homeland_security conduct cybersecurity activities including provision shared situational awareness federal entities enable real time integrated operational actions protect prevent mitigate respond recover cyber incidents defines cyber incident incident attempt cause incident successful jeopardize security integrity confidentiality availability information system network information stored processed transiting system violate laws procedures relating system security acceptable use policies acts terrorism system network deny access degrade disrupt system network defeat operations technical control system network sec directs secretary coordinate federal state local governments national_laboratories critical infrastructure owners operators cross sector coordinating entities facilitate national effort strengthen maintain critical infrastructure cyber threats ensure department_of_homeland_security dhs policies procedures enable critical infrastructure owners operators receive appropriate timely cyber threat information seek industry sector specific expertise develop voluntary security resiliency strategies ensure allocation federal resources cost effective reduces burdens critical infrastructure owners operators request provide risk management assistance entities education critical infrastructure owners operators coordinate research development strategy cybersecurity technologies directs secretary manage federal efforts secure federal civilian information systems excluding national security department_of_defense dod military intelligence_community systems risk based performance based approach request support efforts critical infrastructure owners operators protect cyber threats direct dhs entity serve federal civilian entity federal state local governments private entities critical infrastructure sectors share cyber threat information promote national awareness educate public information system security request facilitate cyber incident response recovery assistance provide analysis warnings related threats vulnerabilities critical information systems crisis consequence management support remote site technical assistance federal state local government entities private entities cyber incidents affecting critical infrastructure engage international partners conduct outreach educational institutions requires secretary designate critical infrastructure sectors recognize sector previously designated sector specific agency ssa sector coordinating council information sharing analysis center permits included critical infrastructure sectors chemical commercial facilities communications critical manufacturing dams defense industrial base emergency services energy financial_services food agriculture government facilities health_care public health information technology nuclear reactors materials waste transportation systems water wastewater systems requires comprised small medium large critical infrastructure owners operators private entities representative trade associations serve self governing self organized primary policy planning strategic communications entity coordinating dhs security resilience activities emergency response recovery efforts prohibits government entity regulating authority member bars secretary having role determination membership directs secretary implement procedures continuous collaborative effective interactions dhs critical infrastructure owners operators sec establishes national cybersecurity communications integration center federal civilian information sharing interface provide shared situational awareness enable real time integrated operational actions federal_government share cyber threat information federal state local government entities private entities critical infrastructure owners operators information sharing relationships requires include multi state information sharing analysis center collaborate state local governments computer emergency readiness team industrial control system cyber emergency response team national coordinating center telecommunications requires promote ongoing multi directional sharing entities provide technical assistance crisis management support identify requirements data information formats accessibility system interoperability redundant systems alternative capabilities event disruption primary information sharing mechanisms cooperate international partners share information respond cyber incidents safeguard sensitive cyber threat information unauthorized disclosure participate appropriate exercises run national exercise program directs require federal civilian agencies provide reports information cyber incidents threats vulnerabilities affecting federal civilian information systems critical infrastructure systems cyber incident detection analysis mitigation response information cyber threat information received agencies requires event private vendor product service agency notify private vendor vulnerability disclosing information directs require federal civilian agencies data breaches involving unauthorized acquisition access personally identifiable information notify unreasonable delay discovery breach potential victims unreasonable delay based risk harm consistent needs law enforcement requires collaborate relevant critical infrastructure sectors development prioritized federal response efforts support defense recovery critical infrastructure cyber incidents facilitate continuous improvements security resiliency public safety communications networks directs secretary report annually congress comptroller_general gao major cyber incidents involving federal civilian agency information systems including aggregate statistics number breaches extent personally identifiable information involved volume data impact estimated cost remedies capacity carry cybersecurity mission dhs interactions critical infrastructure sectors volume range voluntary technical assistance sought provided dhs critical infrastructure owners operators requires comptroller_general report effectiveness sec requires secretary establish cyber incident response teams provide technical assistance recommendations federal state local government entities private entities critical infrastructure owners operators directs secretary coordination federal state local governments develop regularly update exercise national cybersecurity incident response plan includes emergency response plans associated cyber threats critical infrastructure information systems networks changing cyber threat environment incorporates best practices exercises training action reports facilitates coordination dhs critical infrastructure sector sec redesignates national protection programs directorate cybersecurity infrastructure protection directorate requires president advice consent senate appoint secretary cybersecurity infrastructure protection deputy secretary cybersecurity deputy secretary infrastructure protection requires secretary report congress recommendations making cybersecurity communications office operational component dhs restructuring safety act office office implementing support anti terrorism fostering effective technologies act dhs provide incentives development deployment anti terrorism technologies including use party improve certification process directs secretary report congress effectiveness dhs acquisition processes cybersecurity technologies title public private collaboration cybersecurity sec directs national_institute_of_standards_and_technology nist facilitate support development voluntary industry led set standards processes reduce cyber risks critical infrastructure prohibits nist requiring use specific solutions products services manufacturing design techniques requires secretary meet biannually submit annual reports congress state cybersecurity sector sec expands liability protections technology providers support anti terrorism fostering effective technologies act include designated cybersecurity technologies deployed defense qualifying cyber incidents include unlawful unauthorized access incidents disruption integrity operation confidentiality availability programmable electronic devices communication networks misappropriation corruption disruption data assets information intellectual property harm inside outside united_states results damages disruptions casualties severely affecting population infrastructure economy national morale federal state local tribal government functions sec prohibits act construed create authorize new regulations additional federal_government regulatory authority sec declares additional funds authorized appropriated carry act sec prohibits act permitting dhs engage monitoring surveillance collection activities purpose tracking individual personally identifiable information sec directs secretary determine feasibility potential benefit developing visiting security researchers program academia including cybersecurity scholars dhs centers_of_excellence sec directs secretary enter agreement national_research_council nrc research future resilience reliability nation electric power transmission distribution system names research saving american resources today study smart study requires nrc report secretary congress findings title iii homeland_security cybersecurity workforce sec amends hsa add provisions entitled homeland_security cybersecurity boots ground act require secretary develop occupation categories individuals performing activities furtherance dhs cybersecurity mission ensure categories dhs available federal agencies conduct annual assessment readiness capacity dhs workforce meet cybersecurity mission directs secretary include readiness assessment information cybersecurity positions performed permanent time departmental employees demographic information employees race ethnicity gender disability status veterans status individuals employed independent contractors individuals employed federal agencies including national_security_agency nsa requires assessment address vacancies supervisory workforce job training recruiting costs directs secretary develop workforce strategy enhances readiness capacity training recruitment retention dhs cybersecurity workforce including multi phased recruitment plan year implementation plan year projection dhs workforce needs process verify employees independent contractors serve dhs cybersecurity positions receive initial recurrent information security role based security training commensurate assigned responsibilities requires secretary provide congress annual updates strategies assessments training requires comptroller_general study report secretary congress respect assessments strategies directs secretary report congress feasibility establishing cybersecurity fellowship program offer tuition payment plan undergraduate doctoral candidates agree work dhs agreed period time sec authorizes secretary exercise personnel authorities manner dod secretary exercises authority respect civilian intelligence personnel scholarship programs establish positions excepted service appoint individuals fix pay pay retention bonuses needed retain essential dhs employees perform functions relating security federal civilian information systems critical infrastructure information systems related networks requires secretary provide explanation congress announcing bonus requires secretary provide annual report congress specified period processes accepting applications assessing candidates ensuring adherence veterans preference selecting applicants vacancies filled qualified employee


Summary: Amends the Homeland Security Act of 2002 to authorize the Secretary of Homeland Security (DHS) to award Urban Area Security Initiative grants to nonprofit organizations located in areas that are not designated as high-risk urban areas.

amends homeland_security act authorize secretary homeland_security dhs award urban_area_security_initiative grants nonprofit organizations located areas designated high risk urban areas


Summary:
(This measure has not been amended since it was passed by the Senate on December 10, 2014. The summary of that version is repeated here.)

Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014 - Amends the Homeland Security Act of 2002 to: (1) reestablish the Chemical Facility Anti-Terrorism Standards (CFATS) Program in the Department of Homeland Security (DHS), and (2) authorize such Program for four years.

Directs the Secretary of Homeland Security to:

 identify chemical facilities of interest and covered chemical facilities; require each chemical facility of interest to submit a Top-Screen and any other information the Secretary determines necessary to enable DHS to assess the facility's security risks; establish risk-based performance standards designed to address high levels of security risk at covered chemical facilities; and require each covered chemical facility to submit a security vulnerability assessment and develop, submit, and implement a site security plan.. Defines: (1) a "chemical facility of interest" to mean a facility that holds a chemical of interest at a threshold quantity set pursuant to relevant risk-related security principles and that is not an excluded facility; (2) a "covered chemical facility" to mean a chemical facility of interest that the Secretary determines meets risk criteria under this Act based upon a review of the facility's Top-Screen; and (3) an "excluded facility" to mean a facility regulated under the Maritime Transportation Security Act of 2002, a public water system, a treatment works, a facility owned or operated by the Department of Defense (DOD) or the Department of Energy (DOE), or a facility subject to regulation by the Nuclear Regulatory Commission (NRC).

Requires a covered chemical facility, in developing a site security plan, to include security measures that appropriately address the security vulnerability assessment and the risk-based performance standards for security for the facility.

Directs the Secretary to review and approve or disapprove each site security plan. Authorizes the Secretary to approve an alternative security program established by a private sector entity or a federal, state, or local authority that meets the requirements of this Act.

Provides for expedited approval of site security plans for covered chemical facilities assigned to tier 3 or 4 (expedited approval facilities). Directs the Secretary to issue guidance for expedited approval facilities that identifies specific security measures that are sufficient to meet the risk-based performance standards. Requires the owner or operator of an expedited approval facility to certify that: (1) its site security plan includes required security measures, (2) such security measures do not materially deviate from such guidance except where indicated, (3) any deviations meet the risk-based performance standards for the tier to which the facility is assigned, (4) the owner or operator will commit necessary resources to fully implement the plan, and (5) planned measures include an adequate procedure for addressing events beyond the control of the owner or operator.

Authorizes the Secretary: (1) to audit and inspect an expedited approval facility to verify its compliance with its site security plan; (2) to enforce compliance with such plan; (3) to suspend the facility's authority to certify a site security plan upon determining that its plan is facially deficient; (4) upon determining that security measures in such plan are insufficient to meet risk-based performance standards, to require additional security measures or suspend the facility's certification and provide the facility an opportunity to submit a new or modified site security plan and certification; and (5) revoke a facility's certification if it does not agree to include recommended additional security measures in its site security plan or does not submit a new or modified plan. Prohibits a facility whose certification has been revoked from being eligible to certify a site security plan.

Authorizes the Secretary to develop prescriptive site security plan templates with specific security measures to meet risk-based performance standards for adoption and certification by a covered chemical facility assigned to tier 3 or 4 in lieu of developing and certifying its own plan.

Directs the Secretary, within 18 months after this Act's enactment, to evaluate the expedited approval program and report to specified congressional committees on any costs and efficiencies of such program and on its impact on the backlog for site security plan approval and authorization inspections and on the security of chemical facilities.

Directs the Secretary to: (1) conduct audits or inspections using DHS employees or nondepartmental or nongovernmental personnel approved by the Secretary, and (2) prescribe standards for the training and retraining of each individual used by DHS as an auditor or inspector.

Directs the Secretary to establish and carry out a Personnel Surety Program (a program used by covered chemical facilities to determine whether persons with access to their facility may have ties to terrorism) that: (1) does not require an owner or operator of a facility that voluntarily participates in the Program to submit information about an individual more than one time, (2) provides a participating owner or operator with relevant information based on vetting the individual against the terrorist screening database, and (3) provides redress to an individual who believes that the personally identifiable information submitted to DHS by a facility for such vetting was inaccurate.

Requires the Secretary to consult with the heads of other federal agencies, states, political subdivisions, relevant business associations, and public and private labor organizations to identify all chemical facilities of interest.

Directs the Secretary to develop a security risk assessment approach and corresponding tiering methodology for covered chemical facilities that incorporates the relevant elements of risk, including threat, vulnerability, and consequence. Requires the criteria for determining the security risk of terrorism associated with a covered chemical facility to take into account: (1) relevant threat information; (2) potential economic consequences and the potential loss of human life in the event of the facility being subject to an act of terrorism; and (3) vulnerability of the facility to an act of terrorism.

Requires the Secretary to document the basis for each instance in which: (1) tiering for a covered chemical facility is changed, or (2) a covered chemical facility is determined to no longer be subject to the requirements under this Act.

Directs the Secretary to report every six months on: (1) the number of covered chemical facilities in the United States, (2) the number of instances in which the Secretary placed a facility in a lower risk tier or determined that a facility that had previously met the criteria for a covered chemical facility no longer met the criteria, (3) the average number of days spent reviewing site security or an alternative security program for a covered chemical facility prior to approval, and (4) the number of facilities inspected and the average number of facilities inspected per inspector.

Requires that information developed under this Act be given protection from public disclosure consistent with the protection of similar information in the National Maritime Transportation Security Plan. Exempts any such protected information from disclosure under the Freedom of Information Act.

Permits the sharing of information under this Act, as the Secretary determines appropriate, with state and local government officials possessing a need to know and the necessary security clearances, including law enforcement officials and first responders. Directs the Secretary to provide to state, local, and regional fusion centers and state and local government officials such information as is necessary to help ensure that first responders are properly prepared and provided with the situational awareness needed to respond to security incidents at covered chemical facilities.

Directs the Secretary, upon determining that a covered chemical facility is not in compliance with this Act, to: (1) provide the facility owner or operator a written notification of noncompliance that includes a clear explanation of any deficiency in the security vulnerability assessment or site security plan and an opportunity for consultation with the Secretary; and (2) issue to the owner or operator an order to comply by a specified date. Authorizes the Secretary to enter an order assessing a civil penalty, an order to cease operations, or both if an owner or operator continues to be in noncompliance after such date. Directs the Secretary, upon determining that there is a reasonable likelihood that a violation of this Act or the CFATS regulations by a chemical facility could result in death, serious illness, severe personal injury, or substantial endangerment to the public, to direct the facility to cease some or all operations or to implement appropriate emergency security measures.

Directs the Secretary to:

 establish a procedure under which any employee or contractor of a chemical facility of interest may report a violation of a requirement under this Act, keep confidential the identity of an individual who makes such a report and treat any such report as protected information to the extent it does not consist of publicly available information, respond to and acknowledge receipt of the report promptly, and review the information provided in such report and take steps necessary to address any violation. Prohibits an owner or operator of a covered chemical facility from discharging or otherwise discriminating against an employee because the employee makes such a report, with exceptions for reports involving fraudulent statements or documents.

Directs the Secretary to make publicly available the rights that an individual who discloses information regarding problems, deficiencies, or vulnerabilities at a covered chemical facility would have under federal whistleblower protection laws or this Act.

Authorizes the Secretary to promulgate regulations or amend existing CFATS regulations to implement this Act. Provides that each existing CFATS regulation shall remain in effect unless the Secretary amends, consolidates, or repeals it. Directs the Secretary to repeal any existing CFATS regulation that is duplicative of, or that conflicts with, this Act.

Authorizes the Secretary to provide guidance and tools, methodologies, or computer software to assist small covered chemical facilities (chemical facilities with fewer than 100 employees that are owned and operated by a small business concern) in developing physical security, cybersecurity, recordkeeping, and reporting procedures required under this Act. Directs the Secretary to report on best practices that may assist such facilities in the development of physical security best practices.

Directs the Secretary to: (1) establish an outreach implementation plan to identify chemical facilities of interest and make available compliance assistance materials and information on education and training, and (2) commission a third-party study to assess vulnerabilities of covered chemical facilities to acts of terrorism.

Requires the Secretary, within 18 months after enactment of this Act, to report to specified congressional committees on the Chemical Facility Anti-Terrorism Standards Program, including: (1) a certification that the Secretary has made significant progress in the identification of all chemical facilities of interest, (2) a certification that the Secretary has developed a risk assessment approach and corresponding tiering methodology, (3) an assessment of DHS implementation of the recommendations made by the Homeland Security Studies and Analysis Institute as outlined in the Institute's Tiering Methodology Peer Review, and (4) a description of best practices that may assist small covered chemical facilities in the development of physical security best practices.

Requires the Comptroller General, during the three-year period beginning with this Act's enactment, to submit annual reports assessing the implementation of this Act.

measure amended passed senate december summary version repeated protecting securing chemical facilities terrorist attacks act amends homeland_security act reestablish chemical facility anti terrorism standards program department_of_homeland_security dhs authorize program years directs secretary homeland_security identify chemical facilities interest covered chemical facilities require chemical facility interest submit screen information secretary determines necessary enable dhs assess facility security risks establish risk based performance standards designed address high levels security risk covered chemical facilities require covered chemical facility submit security vulnerability assessment develop submit implement site security plan defines chemical facility interest mean facility holds chemical interest threshold quantity set pursuant relevant risk related security principles excluded facility covered chemical facility mean chemical facility interest secretary determines meets risk criteria act based review facility screen excluded facility mean facility regulated maritime transportation security act public water system treatment works facility owned operated department_of_defense dod department_of_energy doe facility subject regulation nuclear_regulatory_commission nrc requires covered chemical facility developing site security plan include security measures appropriately address security vulnerability assessment risk based performance standards security facility directs secretary review approve disapprove site security plan authorizes secretary approve alternative security program established private sector entity federal state local authority meets requirements act provides expedited approval site security plans covered chemical facilities assigned tier expedited approval facilities directs secretary issue guidance expedited approval facilities identifies specific security measures sufficient meet risk based performance standards requires owner operator expedited approval facility certify site security plan includes required security measures security measures materially guidance indicated deviations meet risk based performance standards tier facility assigned owner operator commit necessary resources fully implement plan planned measures include adequate procedure addressing events control owner operator authorizes secretary audit inspect expedited approval facility verify compliance site security plan enforce compliance plan suspend facility authority certify site security plan determining plan deficient determining security measures plan insufficient meet risk based performance standards require additional security measures suspend facility certification provide facility opportunity submit new modified site security plan certification revoke facility certification agree include recommended additional security measures site security plan submit new modified plan prohibits facility certification revoked eligible certify site security plan authorizes secretary develop site security plan specific security measures meet risk based performance standards adoption certification covered chemical facility assigned tier lieu developing certifying plan directs secretary months act enactment evaluate expedited approval program report specified congressional committees costs efficiencies program impact backlog site security plan approval authorization inspections security chemical facilities directs secretary conduct audits inspections dhs employees nongovernmental personnel approved secretary prescribe standards training retraining individual dhs auditor inspector directs secretary establish carry personnel surety program program covered chemical facilities determine persons access facility ties terrorism require owner operator facility voluntarily participates program submit information individual time provides participating owner operator relevant information based vetting individual terrorist screening database provides redress individual believes personally identifiable information submitted dhs facility vetting inaccurate requires secretary consult heads federal agencies states political subdivisions relevant business associations public private labor organizations identify chemical facilities interest directs secretary develop security risk assessment approach corresponding methodology covered chemical facilities incorporates relevant elements risk including threat vulnerability consequence requires criteria determining security risk terrorism associated covered chemical facility account relevant threat information potential economic consequences potential loss human life event facility subject act terrorism vulnerability facility act terrorism requires secretary document basis instance covered chemical facility changed covered chemical facility determined longer subject requirements act directs secretary report months number covered chemical facilities united_states number instances secretary placed facility lower risk tier determined facility previously met criteria covered chemical facility longer met criteria average number days spent reviewing site security alternative security program covered chemical facility prior approval number facilities inspected average number facilities inspected inspector requires information developed act given protection public disclosure consistent protection similar information national maritime transportation security plan exempts protected information disclosure freedom information act permits sharing information act secretary determines appropriate state local government officials possessing need know necessary security clearances including law enforcement officials responders directs secretary provide state local regional fusion centers state local government officials information necessary help ensure responders properly prepared provided situational awareness needed respond security incidents covered chemical facilities directs secretary determining covered chemical facility compliance act provide facility owner operator written notification noncompliance includes clear explanation deficiency security vulnerability assessment site security plan opportunity consultation secretary issue owner operator order comply specified date authorizes secretary enter order assessing civil penalty order cease operations owner operator continues noncompliance date directs secretary determining reasonable likelihood violation act regulations chemical facility result death illness severe personal injury substantial endangerment public direct facility cease operations implement appropriate emergency security measures directs secretary establish procedure employee contractor chemical facility interest report violation requirement act confidential identity individual makes report treat report protected information extent consist publicly available information respond acknowledge receipt report promptly review information provided report steps necessary address violation prohibits owner operator covered chemical facility discharging discriminating employee employee makes report exceptions reports involving fraudulent statements documents directs secretary publicly available rights individual discloses information problems deficiencies vulnerabilities covered chemical facility federal whistleblower protection laws act authorizes secretary promulgate regulations amend existing regulations implement act provides existing regulation shall remain effect secretary amends consolidates repeals directs secretary repeal existing regulation duplicative conflicts act authorizes secretary provide guidance tools methodologies computer software assist small covered chemical facilities chemical facilities fewer employees owned operated small business concern developing physical security cybersecurity recordkeeping reporting procedures required act directs secretary report best practices assist facilities development physical security best practices directs secretary establish outreach implementation plan identify chemical facilities interest available compliance assistance materials information education training commission party study assess vulnerabilities covered chemical facilities acts terrorism requires secretary months enactment act report specified congressional committees chemical facility anti terrorism standards program including certification secretary significant progress identification chemical facilities interest certification secretary developed risk assessment approach corresponding methodology assessment dhs implementation recommendations homeland_security studies analysis institute outlined institute methodology peer_review description best practices assist small covered chemical facilities development physical security best practices requires comptroller_general year period beginning act enactment submit annual reports assessing implementation act