[Congressional Bills 119th Congress]
[From the U.S. Government Publishing Office]
[S. 4699 Introduced in Senate (IS)]

<DOC>






119th CONGRESS
  2d Session
                                S. 4699

To restore funding to the Multi-State Information Sharing and Analysis 
                    Center, and for other purposes.


_______________________________________________________________________


                   IN THE SENATE OF THE UNITED STATES

                              June 8, 2026

  Mr. Warner introduced the following bill; which was read twice and 
referred to the Committee on Homeland Security and Governmental Affairs

_______________________________________________________________________

                                 A BILL


 
To restore funding to the Multi-State Information Sharing and Analysis 
                    Center, and for other purposes.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Guaranteeing Universal Access to 
Cybersecurity Act''.

SEC. 2. RESTORATION OF FUNDING FOR THE MULTI-STATE INFORMATION SHARING 
              AND ANALYSIS CENTER.

    Section 2209 of the Homeland Security Act of 2002 (6 U.S.C. 659) is 
amended by adding at the end the following:
    ``(t) Multi-State Information Sharing and Analysis Center.--
            ``(1) Cooperative agreement.--
                    ``(A) In general.--The Director shall enter into a 
                cooperative agreement with the operator of the Multi-
                State Information Sharing and Analysis Center to 
                provide Federal support for--
                            ``(i) cybersecurity services;
                            ``(ii) cyber threat intelligence collection 
                        and dissemination; and
                            ``(iii) technical assistance to SLTT 
                        entities.
                    ``(B) Requirements.--Any cooperative agreement 
                entered into under subparagraph (A) shall require the 
                operator of the Multi-State Information Sharing and 
                Analysis Center to--
                            ``(i) provide no-cost membership and access 
                        to core cybersecurity services, including cyber 
                        threat intelligence products, real-time 
                        indicator feeds, and incident response support, 
                        to all SLTT entities that apply for membership 
                        in the Multi-State Information Sharing and 
                        Analysis Center;
                            ``(ii) prioritize outreach to and 
                        enrollment of SLTT entities that--
                                    ``(I) lack dedicated cybersecurity 
                                staff;
                                    ``(II) operate on limited budgets; 
                                or
                                    ``(III) have been identified as 
                                covered entities, as defined in section 
                                2240 of the Homeland Security Act of 
                                2002 (6 U.S.C. 681);
                            ``(iii) maintain interoperability and data-
                        sharing arrangements with the Agency, the 
                        Federal Bureau of Investigation, and other 
                        relevant Federal agencies for the purposes of 
                        enhancing the national cyber threat 
                        intelligence ecosystem; and
                            ``(iv) submit annual reports to the 
                        Director and to the appropriate congressional 
                        committees on--
                                    ``(I) membership levels of the 
                                Multi-State Information Sharing and 
                                Analysis Center;
                                    ``(II) threat intelligence 
                                activities;
                                    ``(III) significant cyber incidents 
                                affecting SLTT entities; and
                                    ``(IV) the efficacy of outreach to 
                                under-resourced SLTT entities.
            ``(2) CISA and multi-state information sharing and analysis 
        center plan for sltt assistance.--
                    ``(A) In general.--Not later than 60 days after the 
                date of enactment of the Guaranteeing Universal Access 
                to Cybersecurity Act, the Director, in coordination 
                with the operator of the Multi-State Information 
                Sharing and Analysis Center, shall develop and 
                implement a plan to--
                            ``(i)(I) identify SLTT entities and owners 
                        and operators of critical infrastructure that 
                        previously held membership in the Multi-State 
                        Information Sharing and Analysis Center and 
                        have not enrolled in the Multi-State 
                        Information Sharing and Analysis Center under 
                        the fee-based membership model; and
                            ``(II) conduct targeted outreach to restore 
                        participation by those SLTT entities and owners 
                        and operators of critical infrastructure in the 
                        Multi-State Information Sharing and Analysis 
                        Center;
                            ``(ii)(I) identify SLTT entities and owners 
                        and operators of critical infrastructure that 
                        previously held membership in the Multi-State 
                        Information Sharing and Analysis Center and are 
                        enrolled in the Multi-State Information Sharing 
                        and Analysis Center under the fee-based 
                        membership model; and
                            ``(II) conduct targeted outreach to retain 
                        participation by those SLTT entities and owners 
                        and operators of critical infrastructure in the 
                        Multi-State Information Sharing and Analysis 
                        Center;
                            ``(iii)(I) identify SLTT entities and 
                        owners and operators of critical infrastructure 
                        that have never held membership in the Multi-
                        State Information Sharing and Analysis Center 
                        and that face elevated cyber risk due to 
                        limited cybersecurity resources; and
                            ``(II) conduct targeted outreach to 
                        encourage participation by those SLTT entities 
                        and owners and operators of critical 
                        infrastructure in the Multi-State Information 
                        Sharing and Analysis Center; and
                            ``(iv) provide technical assistance and 
                        cybersecurity capacity-building support to SLTT 
                        entities identified under clauses (i)(I) and 
                        (ii)(I), including through partnerships with 
                        cyber-capable governments and entities.
                    ``(B) Report.--Not later than 1 year after the date 
                of enactment of the Guaranteeing Universal Access to 
                Cybersecurity Act, the Director shall submit to the 
                appropriate congressional committees a report on the 
                implementation of this paragraph, including--
                            ``(i) the number of SLTT entities re-
                        enrolled in the Multi-State Information Sharing 
                        and Analysis Center;
                            ``(ii) the number of new members enrolled 
                        in the Multi-State Information Sharing and 
                        Analysis Center since the date of enactment of 
                        the Guaranteeing Universal Access to 
                        Cybersecurity Act; and
                            ``(iii) any barriers to participation in 
                        the Multi-State Information Sharing and 
                        Analysis Center that remain as of the date of 
                        the report.
            ``(3) Appropriations.--There is appropriated to carry out 
        this subsection $50,000,000 for fiscal year 2027 and each 
        fiscal year thereafter, to remain available until expended.''.
                                 <all>