HR 3128 Introduced – FY 2016 DHS Spending

Last month Rep. Carter (R,TX) introduced HR 3128, Department of Homeland Security Appropriations Act, 2016. This is the House version of the spending bill. The Senate version is S 1619. There are differences in the spending levels found in the two bills.

As I have come to expect there is no specific mention of chemical facility or transportation security or cybersecurity in the bill itself. Unexpectedly, there is little mention in the Committee Report that accompanies the bill.

The only significant mention is found in the discussion of funding for Infrastructure Security Compliance on page 74. The House Appropriations Committee makes essentially the same comment about the Departments efforts to write regulations for the Ammonium Nitrate Security Program as did the Senate Appropriations Committee in their Report on S 1619. The Committee acknowledges the difficulty that the Department is having writing a cost effective regulation and suggests that ISCD publish a supplemental notice of proposed rulemaking to address the issue.

Moving Forward

It seems highly unlikely at this point if either bill will get considered by the Senate before the end of the current fiscal year. The House could take up HR 3128 when they come back in September, but it will be an exercise in futility as there will have to be a continuing resolution to keep the government in operation after October 1^st and that means that there will be a consolidated spending bill attempted later in the year.

Bills Introduced – 07-21-15

A total of 57 bills were introduced in the House and Senate yesterday. Only two of them may be of specific interest to readers of this blog:

HR 3128 Making appropriations for the Department of Homeland Security for the fiscal year ending September 30, 2016, and for other purposes. Rep. Carter, John R. [R-TX-31]

S 1806 A bill to protect consumers from security and privacy threats to their motor vehicles, and for other purposes. Sen. Markey, Edward J. [D-MA]

A copy of HR 3128 is available from the GPO is available and I will be reviewing it later today for specific information on chemical security and cybersecurity. I don’t expect to find any in the actual bill, but when the Committee Report on the bill is published I will almost certainly find items of interest upon which I will be reporting.

Sen. Markey’s bill introduced yesterday had a significant boost by an article posted on Wired.com about a live hack of a vehicle on a public road way. I suspect that action on this bill (or others sure to come) may be accelerated because of this stunt.

S 1619 Introduced, FY 2016 DHS Spending Bill

As I mentioned yesterday Sen. Hoeven (R,SD) introduced S 1619, the Senate version of the FY 2016 DHS spending bill; the House version has not yet been completed. There are no specific mentions of either cybersecurity or chemical security in the bill. Actually, this is the first DHS spending bill since 2009 that has not included language extending the CFATS; that program was finally authorized in a stand-alone bill last December.

As has become quite common in DHS spending bills there are some very interesting discussions of topics of specific interest to readers of this blog in the Senate Appropriations Committee report accompanying the bill.

MTSA Security

There is a brief mention in the discussion about Coast Guard spending mentioning the Coast Guards impending regulation on facility security officer training. This is one of many DHS bills that is behind on meeting congressionally mandated deadlines. In this report the Committee makes their displeasure known and directs the Coast Guard “to move expeditiously on this effort and the Committee expects the NPRM will be published during calendar year 2015” (Pg 77).

Cybersecurity Spending

Cybersecurity programs in DHS are not a large enough to show up as line items in the actual bill. The Committee Report does provide a breakout of cybersecurity programs in the National Protection and Programs Directorate.

	FY 2015	Budget Request	S 1619
Cybersecurity Coordination	4,311	4,318	4,275
US-CERT	98,573	98,642	97,515
Federal Network Security	171,000	131,202	130,594
Network Security Deployment	377,00	479,760	478,035
Global Cybersecurity Management	25,873	20,321	27,276
CI Cyber Protection and Awareness	70,919	77,584	75,621
Business Operations	5,524	6,516	6,439
Total Cybersecurity	753,200	818,343	819,755

NPPD Cybersecurity Spending in Thousands of Dollars

With the exception of the first two programs in the table the Committee has provided more funds for cybersecurity programs than found in this year’s spending, but not as much as the President requested. There is one program where the Committee exceeded the President’s request the Global Cybersecurity Management program. This includes the DHS Software Assurance Program that the Administration proposed to eliminate (and the Committee continues funding) and the cybersecurity education program for the government. The report makes the following comment about the training program (pg 99):

“For the second consecutive year, the administration’s proposal to reduce funding for cybersecurity education is denied. The cybersecurity education programs are critical to establishing a robust workforce for the future. Should NPPD wish to discontinue or relocate these programs within the Department, such changes should be addressed in a comprehensive manner through the budget process and the Committee should be briefed accordingly so the proposal can be adequately assessed.”

S&T Cybersecurity

There is additional information about cybersecurity issues in the S&T section of the Committee Report. Of special interest to the industrial control system community are the opening comments of that discussion (pg 130):

“The Committee continues to recognize the cyber threats to the Nation’s electric grid and the other control systems vital to our security and economy. In order to address this challenge, the Committee expects that S&T will continue to invest in control systems test beds and associated cyber education.”

The discussion also includes Committee encouragement to DHS S&T to:

∙ Expand the simulation based cyber-war gaming tool for the financial sector into additional critical infrastructure sectors;

∙ Continued development of cybersecurity tools and platforms that facilitate information sharing, threat monitoring, and response initiation at the State and local level;

∙ Consider competitively establishing one or more academic centers of excellence that focus on cybersecurity research and education; and

∙ Consider the use of cyber accelerators to help transition innovative cybersecurity technologies into commercial use.

Finally the S&T discussion closes with mention of the Safety Act application to cybersecurity operations. It states (pg 132):

“The Committee supports efforts to more thoroughly define certain aspects of the SAFETY Act, including those that relate to qualifying cyber-attacks and cyber-incidents and extending SAFETY Act protections to cybersecurity technologies. This support should not be construed to expand the scope of the SAFETY Act protections, but rather clarify the authority of the Secretary in designating events which trigger SAFETY Act protections. The Department shall report to the Committee regarding whether legislative changes are required to achieve such a change.”

Chemical Security

The Committee Report notes (pg 95) that the spending for DHS Infrastructure Security Compliance Division (ISCD, agency responsible for the CFATS program) is higher than the FY 2015 spending but less than what the administration requested. The $89.982 Million provided in the bill for ISCD includes $13 Million for the Ammonium Nitrate Security Program. The requested money for that program was reduced because ISCD has still not completed the final rule establishing that program.

The negative comments about the CFATS program that have been common in the last couple of years in Committee Reports from both Houses have been significantly reduced. This is mainly due to the passage of HR 4007 last year and the changes that that bill required in the program. Those changes are just now starting to take effect. Thus most of the Committee comments on CFATS have been continuing requirements to report to Congress on the status of the program.

Chemical Defense Program

There is a brief discussion about the Chemical Defense Program being run out of the DHS Office of Health Affairs. I briefly mentioned this program in 2013. The Committee Reports describes it this way:

“OHA has selected four cities across the United States for demonstration projects aimed at developing a comprehensive chemical defense framework and best practices to share how the Public Health community engages in large-scale events.”

The Senate bill would continue funding for that program at current levels. It also requires OHA to provide the Appropriations Committee a report on the completion of the projects in 2016.

Crude Oil Trains

There is an interesting heading in the Committee Report discussion of FEMA projects; “Ensuring Rail Security”. It has nothing to do with TSA or security, it actually refers to spending in support of emergency response to crude oil train derailments. While most of the government’s attention have been on actions taken by DOT’s Federal Railroad Administration and the Pipeline and Hazardous Material Safety Administration, the Committee also acknowledges that DHS has an important role to play in increasing crude oil train safety.

The Committee directs DHS to “to provide a briefing to the Committee within 60 days of the date of enactment of this act to outline how NPPD and FEMA programs are addressing the issue of crude oil movement, those actions being taken to address gaps in capabilities at the State and local levels, and any unfulfilled needs in coordinating with other departments and agencies” (pg 108). It also notes:

“When awarding grants and providing training, the Committee expects FEMA to consider the unique needs of first responders in meeting the issues related to crude oil shipping by rail.”

Moving Forward

The discussions, mandates and suggestions found in the Committee Reports form an interesting grey area in the legislation. In as much as they describe the intention of lawmakers in crafting these bills, they have been used by Courts in trying to interpret legislation. In the spending bills, while the numbers may be changed by amendments in subsequent legislative processes, there is very seldom any attempt to amend the Committee instructions. To the extent that executive agencies have to come back to Congress every year for funding, these mandates and suggestions do carry at least some weight with the affected agencies.

Since the House must originate any spending or taxing bills according to the Constitution, S 1619 will never be passed into law. What typically happens is that the Senate will take up this bill and pass it. Then when the House bill arrives the wording from the passed version of the Senate bill is substituted for the House language and the bill is returned to the House. The House then either accepts or rejects the Senate version. If it is rejected the two versions are sent to a Conference Committee to work out the differences.

We are, however, continuing to see the politicization of the spending bill process that has become so common. Unless something changes, neither this bill nor the probable House version will actually make it to the floor of the Senate for consideration. Even though the process in the House will certainly be completed for all twelve spending bills before the summer recess, it is unlikely than any of them will make it to the floor of the Senate because of objections from the Democrats in that body. We will probably see the continuing resolution process again be employed this year, though there is always the possibility that there will be another short term government shutdown until one of the two parties blink.

Committee Hearings – Week of 06-14-15

This week both the House and Senate will be in Washington. Spending bills and the DOD authorization bill are still big priorities this week. There are a number of potentially interesting hearings this week that may be of specific interest to readers of this blog including the intel authorization bill, the OPM hack, surface transportation security, chemical warfare, and the DHS spending bill.

Intel Authorization

The House Rules Committee will be meeting this afternoon to formulate the rule for the consideration of HR 2596; this was postponed from last week. There will only be limited amendments allowed during the consideration of this bill. A total of 27 have been submitted to the Committee to draw from.

Some of the more interesting ones (for readers of this blog) include:

∙ A report on FBI information sharing;

∙ Another attempt to limit NSA influence at NIST;

∙ A report on cyber-threat trends;

∙ Prohibit CIA and NSA from using software backdoors; and

∙ A report on the OPM hack.

 Assad’s Chemical Attacks

The House Foreign Affairs Committee will be holding a hearing on Wednesday about “Assad’s Abhorrent Chemical Weapons Attacks”. An interesting slate of witnesses, but no one from the Organization for the Prohibition of Chemical Weapons. I don’t expect much more than hand wringing and condemnation from this hearing; certainly no action.

OPM Hack

We have been seeing all sorts of news over the weekend about the ‘data breach’ at the Office of Personnel Management. On Tuesday, the House Oversight and Government Reform Committee will hold a hearing on the topic. It will be interesting to watch how the questions and answers slide right past each other in this hearing. There will be no new or insightful information here.

Surface Transportation Security

The Transportation Security Subcommittee of the House Homeland Security Committee will be holding a hearing on Tuesday on “Safeguarding our Nation’s Surface Transportation Systems Against Evolving Terrorist Threats”. The witness list includes:

∙ Stacey Fitzmaurice, Office of Intelligence and Analysis, TSA;

∙ Jennifer Grover, Homeland Security and Justice Team, GAO; and

∙ John Roth,  Inspector General, DHS

Anytime the witness list includes both an IG and GAO representative, there is going to be some bad news. I expect that these two reports may become available later today.

FY 2016 DHS Spending

On Tuesday the Homeland Security Subcommittee of the Senate Appropriations Committee will be holding a markup hearing for the FY 2016 DHS spending bill. We will probably not be able to see the bill until the full committee; probably next week.

On the Floor

The Senate will finish work this week on the FY 2016 DOD authorization bill (HR 1735). That bill will have to come back to the House to determine if they will accept the extensive Senate amendments or whether a conference committee will be required; I expect the later.

The intelligence authorization bill is scheduled to make it to the floor of the House on Tuesday. The only other potentially interesting thing happening in the House is a potential War Powers resolution requiring the removal of US Forces from Iraq. It is unlikely to pass and is almost certainly a political move to pressure the President to more clearly define the role of those forces being employed against IS.