McMorris Rodgers, Upton unveil cybersecurity incident reporting bill for nation’s electric grid

U.S. Reps. Cathy McMorris Rodgers (R-WA) and Fred Upton (R-MI) on Oct. 25 introduced legislation that would facilitate timely notifications of cybersecurity incidents and potential cybersecurity incidents impacting the nation’s critical electric infrastructure.

“Our technology, healthcare, and energy infrastructure security require the vigilance of experts across the federal government to ensure Americans are safe,” said Rep. McMorris Rodgers, ranking member of the U.S. House Energy and Commerce (E&C) Committee.

“Cybersecurity is national security, and Congress must act to ensure our grid is secure,” added Rep. Upton, ranking member of the House E&C Energy Subcommittee. 

Rep. Upton on Oct. 25 signed on as the lead original cosponsor of the Critical Electric Infrastructure Cybersecurity Incident Reporting Act of 2022, H.R. 9234, which is sponsored by Rep. McMorris Rodgers.

If enacted, H.R. 9234 would amend the Federal Power Act to add a 24-hour reporting requirement to the U.S. Department of Energy’s (DOE’s) existing critical electric infrastructure protection framework, according to a bill summary provided by the lawmakers.

Additionally, H.R. 9234 would direct DOE to develop a regulation to add more clarity on the scope and scale of cybersecurity incidents that require reporting, and to develop procedures for reporting a potential cybersecurity incident, the summary says.

“H.R. 9234, which I’m leading with leader Rodgers, will allow companies to quickly respond to these increasing attacks and install preventative measures without getting caught up in bureaucratic red tape,” Rep. Upton said. “This bill is another tool in the toolbox to create safer communities, schools, and commerce.”

H.R. 9234 is under consideration in the House E&C Committee, along with several other related bills sponsored by committee Republicans.