H.R. 9642

[Congressional Bills 118th Congress]
[From the U.S. Government Publishing Office]
[H.R. 9642 Introduced in House (IH)]

<DOC>

118th CONGRESS
2d Session
H. R. 9642

To amend title 46, United States Code, to require applicants for grants 
that propose to use digital infrastructure or a software component to 
certify the applicant has an approved security plan that addresses the 
cybersecurity risks of such digital infrastructure or software, and for 
other purposes.

_______________________________________________________________________

IN THE HOUSE OF REPRESENTATIVES

September 17, 2024

Mr. Webster of Florida (for himself and Mr. Carbajal) introduced the 
following bill; which was referred to the Committee on Transportation 
and Infrastructure

_______________________________________________________________________

A BILL

To amend title 46, United States Code, to require applicants for grants 
that propose to use digital infrastructure or a software component to 
certify the applicant has an approved security plan that addresses the 
cybersecurity risks of such digital infrastructure or software, and for 
other purposes.

Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

This Act may be cited as the ``Protecting Investments in Our Ports 
Act''.

SEC. 2. PORT INFRASTRUCTURE DEVELOPMENT PROGRAM APPLICATION PROCESS.

Section 54301(a)(5)(A) of title 46, United States Code, is 
amended--
(1) by striking ``To be eligible'' and inserting the 
following:
``(i) In general.--To be eligible''; and
(2) by adding at the end the following:
``(ii) Ensuring cybersecurity.--If an 
applicant for a grant under this subsection is 
applying to use the grant to acquire digital 
infrastructure or a software component, such 
applicant shall--
``(I) certify the applicant has an 
approved security plan pursuant to 
section 70103(c) that addresses the 
cybersecurity risks of such digital 
infrastructure or software; or
``(II) provide a brief description 
in the application of how the applicant 
will address the cybersecurity risks of 
such digital infrastructure or software 
if the applicant does not have such 
approved security plan.
``(iii) Update of facility security plan.--
An applicant for a grant under this subsection 
applying to use such grant to acquire digital 
infrastructure or a software component that 
does not have an approved security plan 
pursuant to section 70103(c) that addresses the 
cybersecurity risks of such digital 
infrastructure or software shall ensure that 
the security plan under section 70103(c) of 
such applicant is updated to address the 
cybersecurity risks described in clause 
(ii)(II) in the next update required under 
paragraph (3)(G) of such section.''.
<all>