Critical infrastructure operators\u2019 resilience would get federal assessment under new bill | CyberScoop<\/title> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/critical-infrastructure-sectors-resilience-manual-house-bill\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Critical infrastructure operators\u2019 resilience would get federal assessment under new bill\"> <meta property=\"og:description\" content=\"The bipartisan House legislation calls on CISA and FEMA to report on how operators handle the switch to manual mode during cyber incidents.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/critical-infrastructure-sectors-resilience-manual-house-bill\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:published_time\" content=\"2024-06-20T17:03:25+00:00\"> <meta property=\"article:modified_time\" content=\"2024-06-20T17:03:26+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/critical-infrastructure-operators-resilience-would-get-federal-assessment-under-new-bill-2.jpg\"> <meta property=\"og:image:width\" content=\"1024\"> <meta property=\"og:image:height\" content=\"674\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"mbracken\"> <meta name=\"twitter:card\" content=\"summary_large_image\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1717605114g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1718292839g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1716385020g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=74528d75ce0daeb8628a\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/80764\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/cyberscoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.5.4\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=80764\">\n<link rel=\"alternate\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fcritical-infrastructure-sectors-resilience-manual-house-bill%2F\">\n<link rel=\"alternate\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fcritical-infrastructure-sectors-resilience-manual-house-bill%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"post-template-default single single-post postid-80764 single-format-standard\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/critical-infrastructure-sectors-resilience-manual-house-bill\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"25.145194274029\">\n<div class=\"single-article__header-content\" readability=\"30\">\n<ul class=\"single-article__eyebrow\">\n<li class=\"single-article__category\"> <a class=\"single-article__category-link\" href=\"https:\/\/cyberscoop.com\/news\/cybersecurity\/\"> <span>Cybersecurity<\/span> <\/a> <\/li>\n<\/ul>\n<p> The bipartisan House legislation calls on CISA and FEMA to report on how operators handle the switch to manual mode during cyber incidents. <\/p>\n<\/p><\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"421\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/critical-infrastructure-operators-resilience-would-get-federal-assessment-under-new-bill.jpg?resize=640%2C421&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/critical-infrastructure-operators-resilience-would-get-federal-assessment-under-new-bill-2.jpg 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/critical-infrastructure-operators-resilience-would-get-federal-assessment-under-new-bill-2.jpg?resize=300,197 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/critical-infrastructure-operators-resilience-would-get-federal-assessment-under-new-bill-2.jpg?resize=768,506 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/critical-infrastructure-operators-resilience-would-get-federal-assessment-under-new-bill-2.jpg?resize=600,395 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/critical-infrastructure-operators-resilience-would-get-federal-assessment-under-new-bill-2.jpg?resize=255,168 255w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/critical-infrastructure-operators-resilience-would-get-federal-assessment-under-new-bill-2.jpg?resize=512,337 512w\" sizes=\"(max-width: 1024px) 100vw, 1024px\"><figcaption> Rep. Dan Crenshaw, R-Texas, speaks about the U.S. military withdrawal from Afghanistan during a press conference at the U.S. Capitol in Washington, D.C., on Aug. 31, 2021. (Photo by SAUL LOEB\/AFP via Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"34.154168784952\"><body readability=\"69.854047547397\"><\/p>\n<p>How well critical infrastructure sectors are equipped to switch to manual operations in the event of a cyberattack would be assessed and reported to Congress under new legislation from a bipartisan pair of House lawmakers.<\/p>\n<p>The Contingency Plan for Critical Infrastructure Act, introduced this week by Reps. Dan Crenshaw, R-Texas, and Seth Magaziner, D-R.I., would require the Cybersecurity and Infrastructure Security Agency director, the Federal Emergency Management Agency administrator and other sector risk management agencies to deliver a report to Congress that details the risks that sectors face when they are unable to pivot quickly to manual operating mode. <\/p>\n<p>\u201cCyberattacks are the number one threat to America\u2019s critical infrastructure, and it\u2019s not a problem any one government agency can solve or even protect against,\u201d Crenshaw said in a <a href=\"https:\/\/crenshaw.house.gov\/2024\/6\/crensahw-magaziner-introduce-the-contingency-plan-for-critical-infrastructure-act\">statement<\/a>. \u201cThe private sector must be more involved, especially when it comes to our water, our energy, our transportation, and our communications. We need a comprehensive assessment of what more can be done to make critical infrastructure more resilient to future cyberattacks, and we need it immediately.\u201d<\/p>\n<p>As part of the overall assessment, the bill calls for an evaluation of CISA\u2019s capacity and obligations, including how the agency responds to cyber incidents and supports critical infrastructure operators\u2019 essential systems. It would also require an assessment of FEMA\u2019s <a href=\"https:\/\/www.fema.gov\/emergency-managers\/national-preparedness\/frameworks\/response\">National Response Framework<\/a>, with a look specifically at how the agency assists owners and operators with the transition to manual during a cyberattack.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Additionally, the assessment would feature an examination of the costs and challenges tied to sector-wide requirements to switch to manual operation during a cyber incident, covering financial, logistical and operational implications. <\/p>\n<p>The legislation also calls for policy recommendations \u201caimed at ensuring the continuous operation of critical infrastructure\u201d during cyber incidents that affect critical systems. <\/p>\n<p>FEMA, meanwhile, would also be required by the bill to update its <a href=\"https:\/\/www.fema.gov\/sites\/default\/files\/documents\/fema_planning-considerations-cyber-incidents_2023.pdf\">Planning Considerations for Cyber Incidents<\/a>, which includes best practices for personnel, steps that owners and operators should take in response to degraded systems, guidance on response and remediation to industrial control devices impacted by cyber incidents, and the identification of state, local and federal resources that can be of assistance in scenarios of this kind.<\/p>\n<p>\u201cWe need to ensure that the infrastructure Americans depend on to keep the lights on, the water running and commerce flowing, are protected from cyberattacks,\u201d Magaziner said in a statement. \u201cThis bipartisan bill will help ensure that Americans are protected from criminals and adversarial nations who target our country in cyberspace on a daily basis.\u201d<\/p>\n<p>The legislation comes amid a rising chorus of warnings from federal officials that foreign adversaries are <a href=\"https:\/\/cyberscoop.com\/feds-chinese-hacking-operations-have-been-in-critical-infrastructure-networks-for-five-years\/\">already inside critical infrastructure IT networks<\/a> and <a href=\"https:\/\/cyberscoop.com\/fbi-warns-china-preparing-for-disruptive-attacks\/\">planning for increasingly disruptive attacks<\/a>. <\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>National Cyber Director Harry Coker said during an event last month that <a href=\"https:\/\/cyberscoop.com\/harry-coker-china-critical-infrastructure-cyber\/\">resilience has been a focus of the Biden administration<\/a>. \u201cWe need to operate through some of the cyber threats that will persist, and being prepared is a way to do that,\u201d he said.<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"3.9918032786885\">\n<div class=\"author-card\" readability=\"15\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/critical-infrastructure-operators-resilience-would-get-federal-assessment-under-new-bill-1.jpg?w=640&ssl=1\" alt=\"Matt Bracken\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by Matt Bracken<\/h4>\n<p> Matt Bracken is the managing editor of FedScoop and CyberScoop, overseeing coverage of federal government technology policy and cybersecurity. Before joining Scoop News Group in 2023, Matt was a senior editor at Morning Consult, leading data-driven coverage of tech, finance, health and energy. He previously worked in various editorial roles at The Baltimore Sun and the Arizona Daily Star. You can reach him at matt.bracken@scoopnewsgroup.com. <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<p>  <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Geopolitics<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/critical-infrastructure-sectors-resilience-manual-house-bill\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Critical infrastructure operators\u2019 resilience would get federal assessment under new<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[413,78,452,2228,2229],"tags":[415,86,454,2230,2231],"class_list":["post-4126","post","type-post","status-publish","format-standard","hentry","category-critical-infrastructure","category-cybersecurity","category-cybersecurity-and-infrastructure-security-agency-cisa","category-federal-emergency-management-agency","category-resilience","tag-critical-infrastructure","tag-cybersecurity","tag-cybersecurity-and-infrastructure-security-agency-cisa","tag-federal-emergency-management-agency","tag-resilience"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/critical-infrastructure\/\" rel=\"category tag\">critical infrastructure<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybersecurity\/\" rel=\"category tag\">Cybersecurity<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybersecurity-and-infrastructure-security-agency-cisa\/\" rel=\"category tag\">Cybersecurity and Infrastructure Security Agency (CISA)<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/federal-emergency-management-agency\/\" rel=\"category tag\">Federal Emergency Management Agency<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/resilience\/\" rel=\"category tag\">resilience<\/a>","tag_info":"resilience","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/4126","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=4126"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/4126\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=4126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=4126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=4126"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":4126,"date":"2024-06-20T12:03:25","date_gmt":"2024-06-20T17:03:25","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=80764"},"modified":"2024-06-20T12:03:25","modified_gmt":"2024-06-20T17:03:25","slug":"critical-infrastructure-operators-resilience-would-get-federal-assessment-under-new-bill","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/06\/20\/critical-infrastructure-operators-resilience-would-get-federal-assessment-under-new-bill\/","title":{"rendered":"Critical infrastructure operators\u2019 resilience would get federal assessment under new bill"},"content":{"rendered":"