STB Information Security Improvement Act
Public Law 115–269
STB Information Security Improvement Act
269
115–269
Statute Compilation
United States House of Representatives
Office of the Legislative Counsel
text/xml
EN
Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.
GPO Statute Compilations USLM converter, version 20210527.1
2021-10-15
STB Information Security Improvement Act
14306
115
2018-10-16
STB Information Security Improvement Act
[(Public Law 115–269)]
[This law has not been amended]
[Currency: This publication is a compilation of the text of Public Law 115–269. It was last amended by the public law listed in the As Amended Through note above and below at the bottom of each page of the pdf version and reflects current law through the date of the enactment of the public law listed at https://www.govinfo.gov/app/collection/comps/]
[Note: While this publication does not represent an official version of any Federal statute, substantial efforts have been made to ensure the accuracy of its contents. The official version of Federal law is found in the United States Statutes at Large and in the United States Code. The legal effect to be given to the Statutes at Large and the United States Code is established by statute (1 U.S.C. 112, 204).]
AN ACTTo require the Surface Transportation Board to implement certain recommendations of the Inspector General of the Department of Transportation.Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled,
SECTION 1. SHORT TITLE. This Act may be cited as the “STB Information Security Improvement Act”.
SEC. 2. REQUIREMENTS.
(a) In General.—The Surface Transportation Board (in this section referred to as the “STB”) shall develop a timeline and plan to implement the recommendations of the Inspector General of the Department of Transportation in Report No. FI2018002, including improvements—
(1) to identify controls, including risk management, weakness remediation, and security authorization;
(2) to protect controls, including configuration management, user identity and access management, and security training;
(3) to detect controls, including continuous monitoring;
(4) to respond controls, including incident handling and reporting;
(5) to recover controls for contingency planning; and
(6) any additional tools that will improve the implementation of the recommendations.
(b) Implementation.—
(1) In general.—Not later than 180 days after the date of enactment of this Act, the STB shall submit the plan and timeline developed under subsection (a) to the Committee on Transportation and Infrastructure of the House of Representatives and the Committee on Commerce of the Senate.
(2) Report.—The STB shall report annually to such Committees on the progress on implementation of the recommendations until the implementation is complete.
(3) Plan implementation.—The STB shall designate an individual to implement the plan developed under subsection (a).
SEC. 3. NO ADDITIONAL FUNDS AUTHORIZED. No additional funds are authorized to carry out the requirements of this Act. Such requirements shall be carried out using amounts otherwise authorized.