§ 18723. Rural and municipal utility advanced cybersecurity grant and technical assistance program

Legislative history

Reconstructed from this section’s Code source credit and amendment notes, resolved against the local Statutes at Large. Editorial notes are evidence, not the law that made the change.

1. 2021

   Infrastructure Investment and Jobs Act

   Pub. L. 117–58 div. D title I § 40124 · 135 Stat. 429

   Enacted · 42 U.S.C. § 18723

   Pub. L. 117–58, div. D, title I, § 40124, Nov. 15, 2021, 135 Stat. 953

   Source evidence

   Code source credit
   Pub. L. 117–58, div. D, title I, § 40124, Nov. 15, 2021, 135 Stat. 953

   Enacted provision · exact public law section
   SEC. 40124. RURAL AND MUNICIPAL UTILITY ADVANCED CYBERSECURITY GRANT AND TECHNICAL ASSISTANCE PROGRAM. (a) Definitions.— In this section: (1) Advanced cybersecurity technology.— The term “advanced cybersecurity technology” means any technology, operational capability, or service, including computer hardware, software, or a related asset, that enhances the security posture of electric utilities through improvements in the ability to protect against, detect, respond to, or recover from a cybersecurity threat (as defined in section 102 of the Cybersecurity Act of 2015 (6 U.S.C. 1501)). (2) Bulk-power system.— The term “bulk-power system” has the meaning given the term in section 215(a) of the Federal Power Act (16 U.S.C. 824o(a)). (3) Eligible entity.— The term “eligible entity” means— (A) a rural electric cooperative; (B) a utility owned by a political subdivision of a State, such as a municipally owned electric utility; (C) a utility owned by any agency, authority, corporation, or instrumentality of 1 or more political subdivisions of a State; (D) a not-for-profit entity that is in a partnership with not fewer than 6 entities described in subparagraph (A), (B), or (C); and (E) an investor-owned electric utility that sells less than 4,000,000 megawatt hours of electricity per year. (4) Program.— The term “Program” means the Rural and Municipal Utility Advanced Cybersecurity Grant and Technical Assistance Program established under subsection (b). (b) Establishment.— Not later than 180 days after the date of enactment of this Act, the Secretary, in coordination with the Secretary of Homeland Security and in consultation with the Federal Energy Regulatory Commission, the North American Electric Reliability Corporation, and the Electricity Subsector Coordinating Council, shall establish a program, to be known as the “Rural and Municipal Utility Advanced Cybersecurity Grant and Technical Assistance Program”, to provide grants and technical assistance to, and enter into cooperative agreements with, eligible entities to protect against, detect, respond to, and recover from cybersecurity threats. (c) Objectives.— The objectives of the Program shall be— (1) to deploy advanced cybersecurity technologies for electric utility systems; and (2) to increase the participation of eligible entities in cybersecurity threat information sharing programs. (d) Awards.— (1) In general.— The Secretary— (A) shall award grants and provide technical assistance under the Program to eligible entities on a competitive basis; (B) shall develop criteria and a formula for awarding grants and providing technical assistance under the Program; (C) may enter into cooperative agreements with eligible entities that can facilitate the objectives described in subsection (c); and (D) shall establish a process to ensure that all eligible entities are informed about and can become aware of opportunities to receive grants or technical assistance under the Program. (2) Priority for grants and technical assistance.— In awarding grants and providing technical assistance under the Program, the Secretary shall give priority to an eligible entity that, as determined by the Secretary— (A) has limited cybersecurity resources; (B) owns assets critical to the reliability of the bulk-power system; or (C) owns defense critical electric infrastructure (as defined in section 215A(a) of the Federal Power Act (16 U.S.C. 824o–1(a))). (e) Protection of Information.— Information provided to, or collected by, the Federal Government pursuant to this section the disclosure of which the Secretary reasonably foresees could be detrimental to the physical security or cybersecurity of any electric utility or the bulk-power system— (1) shall be exempt from disclosure under section 552(b)(3) of title 5, United States Code; and (2) shall not be made available by any Federal agency, State, political subdivision of a State, or Tribal authority pursuant to any Federal, State, political subdivision of a State, or Tribal law, respectively, requiring public disclosure of information or records. (f) Authorization of Appropriations.— There is authorized to be appropriated to the Secretary to carry out this section $250,000,000 for the period of fiscal years 2022 through 2026.

2. 2022

   James M. Inhofe National Defense Authorization Act for Fiscal Year 2023

   Pub. L. 117–263 div. G title LXXI § 7143(d)(3) · 136 Stat. 2395

   Substituted · 42 U.S.C. § 18723(a)(1)

   Pub. L. 117–263 substituted “section 650 of title 6” for “section 1501 of title 6”

   Source evidence

   Code amendment note
   Subsec. (a)(1). Pub. L. 117–263 substituted “section 650 of title 6” for “section 1501 of title 6”.

   Enacted provision · exact public law section
   (3) Infrastructure investment and jobs act.— Section 40124(a)(1) of the Infrastructure Investment and Jobs Act (42 U.S.C. 18723(a)(1)) is amended by striking “section 102 of the Cybersecurity Act of 2015 (6 U.S.C. 1051)” and inserting “section 2200 of the Homeland Security Act of 2002)”.

2 of 2 references resolved to an enrolled provision