§18722 Energy cyber sense program

Summary

The Secretary must create a voluntary Energy Cyber Sense program, working with the Secretary of Homeland Security and consulting other federal agency heads, to test the cybersecurity of products and technologies used in the energy sector, including the bulk-power system (as defined in section 824o(a) of title 16). The law defines two terms: "bulk-power system" — see section 824o(a) of title 16 for its meaning, and "program" — the voluntary Energy Cyber Sense program. Under the program, the Secretary will set up testing for energy products (including industrial control and SCADA systems); run a vulnerability reporting process and database tied to federal coordination; give technical help to utilities and manufacturers; review tested products every two years and report on defenses; make guidance for buying products; give public notice and take comments before changing testing; oversee testing; consider incentives to use test results; and protect collected information from public release (exempt under section 552(b)(3) of title 5 and not subject to federal, State, or Tribal public-disclosure laws). The law does not allow suing the United States over program testing.