This bill requires the Cybersecurity and Infrastructure Security Agency to update security plans for 16 critical infrastructure sectors, including energy, financial services, healthcare, transportation, and water systems, within one year of the law's enactment. The updates must address emerging threats from disruptive technologies like artificial intelligence, including risks to AI systems themselves, AI-enabled cyberattacks, cloud computing vulnerabilities, deepfakes, and social engineering tactics. For the financial sector specifically, the agency must coordinate with the Treasury Department to assess vulnerabilities related to quantum computing threats to digital assets and cryptocurrencies. After completing these initial updates, the agency must reassess and revise the plans every two years, and must report all plans to relevant congressional committees within 30 days of completion. The bill does not specify dedicated funding for these activities.