Federal RuleAug 21
62
DOL Rewrites Disability Rules for 'Merit-Based Opportunity' Push
RuleLabor DepartmentFederal Contract Compliance Programs OfficeSignificant Wallet
119-hr-10671119th CongressWALLET
Securing Our Critical Infrastructure Act
Sponsored By: Representative Gottheimer, Josh [D-NJ-5]
Introduced
Summary
This bill would establish a _permanent security vulnerability warning program_ at CISA focused on information-system vulnerabilities for critical utilities, especially water and wastewater systems.
Show full summary
- It defines "covered utility" to include water or wastewater utilities serving not more than 100,000 people, eligible entities under the Infrastructure Investment and Jobs Act section 40124, and operators of public water systems or treatment works under the Safe Drinking Water Act and the Federal Water Pollution Control Act.
- The program expands information sharing and adds explicit exemptions from FOIA and state open-records laws, limits disclosures to purposes under the Cybersecurity Information Sharing Act of 2015, and requires protections for identifiable personal data.
- Each covered utility would be automatically enrolled in applicable CISA cyber hygiene services with an option to disenroll. CISA would be required to provide incident-response assistance to covered utilities and coordinate the program with the Environmental Protection Agency, and the program would sunset after five years unless renewed.
Personalized for You
How does this bill affect your finances?
Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Bill Overview
Analyzed Economic Effects
1 provisions identified: 0 benefits, 0 costs, 1 mixed.
Cyber help for small water utilities
If enacted, the bill would create a CISA security vulnerability warning program for covered utilities. Covered utilities would include water or wastewater utilities serving 100,000 people or fewer, certain IIJA-eligible entities, and public water or treatment operators. CISA would automatically enroll each covered utility in cyber hygiene services, allow a utility to disenroll, and could use CISA incident-response teams and coordinate with EPA if a cyber incident occurs. Information shared for the program would be exempt from federal and State public-records laws, but CISA would have to protect personal data and limit use to purposes allowed under the Cybersecurity Information Sharing Act. The program would terminate five years after enactment.
Sponsors & CoSponsors
Sponsor
Gottheimer, Josh [D-NJ-5]
NJ • D
Cosponsors
Rep. Bacon, Don [R-NE-2]
NE • R
Sponsored 10/1/2026
Rep. Nunn, Zachary [R-IA-3]
IA • R
Sponsored 10/1/2026
Rep. Scholten, Hillary J. [D-MI-3]
MI • D
Sponsored 10/1/2026
Rep. Landsman, Greg [D-OH-1]
OH • D
Sponsored 10/1/2026
Roll Call Votes
No roll call votes available for this bill.
View on Congress.gov