H.R. 9642

[Congressional Bills 118th Congress] [From the U.S. Government Publishing Office] [H.R. 9642 Introduced in House (IH)] <DOC> 118th CONGRESS 2d Session H. R. 9642 To amend title 46, United States Code, to require applicants for grants that propose to use digital infrastructure or a software component to certify the applicant has an approved security plan that addresses the cybersecurity risks of such digital infrastructure or software, and for other purposes. _______________________________________________________________________ IN THE HOUSE OF REPRESENTATIVES September 17, 2024 Mr. Webster of Florida (for himself and Mr. Carbajal) introduced the following bill; which was referred to the Committee on Transportation and Infrastructure _______________________________________________________________________ A BILL To amend title 46, United States Code, to require applicants for grants that propose to use digital infrastructure or a software component to certify the applicant has an approved security plan that addresses the cybersecurity risks of such digital infrastructure or software, and for other purposes. Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, SECTION 1. SHORT TITLE. This Act may be cited as the ``Protecting Investments in Our Ports Act''. SEC. 2. PORT INFRASTRUCTURE DEVELOPMENT PROGRAM APPLICATION PROCESS. Section 54301(a)(5)(A) of title 46, United States Code, is amended-- (1) by striking ``To be eligible'' and inserting the following: ``(i) In general.--To be eligible''; and (2) by adding at the end the following: ``(ii) Ensuring cybersecurity.--If an applicant for a grant under this subsection is applying to use the grant to acquire digital infrastructure or a software component, such applicant shall-- ``(I) certify the applicant has an approved security plan pursuant to section 70103(c) that addresses the cybersecurity risks of such digital infrastructure or software; or ``(II) provide a brief description in the application of how the applicant will address the cybersecurity risks of such digital infrastructure or software if the applicant does not have such approved security plan. ``(iii) Update of facility security plan.-- An applicant for a grant under this subsection applying to use such grant to acquire digital infrastructure or a software component that does not have an approved security plan pursuant to section 70103(c) that addresses the cybersecurity risks of such digital infrastructure or software shall ensure that the security plan under section 70103(c) of such applicant is updated to address the cybersecurity risks described in clause (ii)(II) in the next update required under paragraph (3)(G) of such section.''. <all>