[Congressional Record Volume 166, Number 116 (Wednesday, June 24, 2020)]
[Senate]
[Pages S3239-S3240]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]

  SA 1719. Mr. KING (for himself and Mr. Sasse) submitted an amendment 
intended to be proposed by him to the bill S. 4049, to authorize 
appropriations for fiscal year 2021 for military activities of the 
Department of Defense, for military construction, and for defense 
activities of the Department of Energy, to prescribe military personnel 
strengths for such fiscal year, and for other purposes; which was 
ordered to lie on the table; as follows:

       At the appropriate place in title X, insert the following:

     SEC. ___. STRENGTHENING PROCESSES FOR IDENTIFYING CRITICAL 
                   INFRASTRUCTURE CYBERSECURITY INTELLIGENCE NEEDS 
                   AND PRIORITIES.

       (a) Critical Infrastructure Cybersecurity Intelligence 
     Needs and Priorities.--
       (1) In general.--Not later than 180 days after the date of 
     the enactment of this Act, the Director of National 
     Intelligence, in coordination with the Director of the 
     Cybersecurity and Infrastructure Security Agency and the 
     heads of appropriate Sector-Specific Agencies (as defined in 
     section 2201 of the Homeland Security Act of 2002 (6 U.S.C. 
     651)), shall establish a formal process to solicit and 
     compile critical infrastructure input to inform national 
     intelligence collection and analysis priorities.
       (2) Recurrent input.--Not later than 30 days following the 
     establishment of the process required pursuant to paragraph 
     (1), and biennially thereafter, the Director of National 
     Intelligence, in coordination with the Director of the 
     Cybersecurity and Infrastructure Security Agency, shall 
     solicit information from critical infrastructure utilizing 
     the process established pursuant to paragraph (1).
       (b) Intelligence Needs Evaluation and Planning.--Utilizing 
     the information received through the process established 
     pursuant to subsection (a), as well as existing intelligence 
     information and processes, the Director of National 
     Intelligence, in coordination with the Director of the 
     Cybersecurity and Infrastructure Security Agency, shall--
       (1) identify common technologies or interdependencies that 
     are likely to be targeted by nation-state adversaries;
       (2) identify intelligence gaps across critical 
     infrastructure cybersecurity efforts;
       (3) identify and execute methods of empowering sector-
     specific agencies--
       (A) to identify specific critical lines of businesses, 
     technologies, and processes within their respective sectors; 
     and
       (B) to coordinate directly with the intelligence community 
     to convey specific information relevant to the operation of 
     each sector; and

[[Page S3240]]

       (4) refocus information collection and analysis activities, 
     as necessary to address identified gaps and mitigate threats 
     to the cybersecurity of critical infrastructure of the United 
     States.
       (c) Report to Congress.--Not later than 90 days after the 
     completion of the identification and refocusing required by 
     subsection (b), and annually thereafter, the Director of 
     National Intelligence and the Director of the Cybersecurity 
     and Infrastructure Security Agency shall jointly submit to 
     the appropriate committees of Congress a report that--
       (1) assesses how the information obtained from critical 
     infrastructure is shaping intelligence collection activities;
       (2) evaluates the success of the intelligence community in 
     sharing relevant, actionable intelligence with critical 
     infrastructure; and
       (3) addresses any legislative or policy changes necessary 
     to enable the intelligence community to increase sharing of 
     actionable intelligence with critical infrastructure.
       (d) Definitions.--In this section:
       (1) The term ``appropriate committees of Congress'' means--
       (A) Select Committee on Intelligence and the Committee on 
     Homeland Security and Governmental Affairs of the Senate; and
       (B) Permanent Select Committee on Intelligence and the 
     Committee on Homeland Security of the House of 
     Representatives.
       (2) The term ``critical infrastructure'' has the meaning 
     given that term in the Critical Infrastructures Protection 
     Act of 2001 (42 U.S.C. 5195c).
       (3) The term ``intelligence community'' has the meaning 
     given such term in section 3 of the National Security Act of 
     1947 (50 U.S.C. 3003).
                                 ______