A bill to require the Director of the Cybersecurity and Infrastructure Security Agency to work with Sector Risk Management Agencies to update sector-specific plans, and for other purposes.
About This Bill
Committee
Latest Action · June 10, 2026
Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
This bill requires the Cybersecurity and Infrastructure Security Agency to update security plans for 16 critical infrastructure sectors, including energy, financial services, healthcare, transportation, and water systems, within one year of the law's enactment. The updates must address emerging threats from disruptive technologies like artificial intelligence, including risks to AI systems themselves, AI-enabled cyberattacks, cloud computing vulnerabilities, deepfakes, and social engineering tactics. For the financial sector specifically, the agency must coordinate with the Treasury Department to assess vulnerabilities related to quantum computing threats to digital assets and cryptocurrencies. After completing these initial updates, the agency must reassess and revise the plans every two years, and must report all plans to relevant congressional committees within 30 days of completion. The bill does not specify dedicated funding for these activities.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.