This bill requires federal agencies to assess how critical infrastructure can continue operating manually if a cyberattack disables computerized systems. Within 180 days of the law's enactment, the Cybersecurity and Infrastructure Security Agency and the Federal Emergency Management Agency must provide Congress with a detailed sector-by-sector report examining whether power plants, water systems, hospitals, and other critical facilities can switch to manual operations during cyber incidents, along with the costs and challenges of doing so. The agencies must also update their emergency planning guidelines to include best practices for manual operations, identify available federal and state resources to help during such transitions, and provide specific guidance for responding to attacks on industrial control systems. The bill affects critical infrastructure owners and operators across multiple sectors, as well as federal emergency response agencies. No specific funding amount is provided in the legislation, but the assessment and updated guidelines must be completed within 180 days of enactment.