Review - HR 3594 Introduced - Surface Transportation R&D Act of 2021

Back in May, Rep Johnson (D,TX) introduced HR 3594, the Surface Transportation Research and Development Act of 2021. This is the annual authorization bill for R&D operations for surface transportation, funding for which comes mainly from the Highway Trust Fund. There are no cybersecurity sections in the table of contents but there are three instances of ‘cybersecurity in passing’ provisions in the bill.

The three cybersecurity in passing provisions are found in §102, §203 and §208.

Johnson is the Chair of the House Science, Space, and Technology Committee, one of two committees to which this bill was assigned for consideration. Additionally, 14 of the cosponsors of the bill (8 Republicans and 6 Democrats) are also members of the Committee. There is no doubt that this bill will be considered in Committee and that it will receive broad bipartisan support unless there are too many partisan amendments added in Committee.

For a more detailed description of the provisions in the bill, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/hr-3594-introduced - subscription required.

Bills Introduced – 5-28-21

Yesterday with the Senate is Washington and the House meeting in pro forma session, there were 107 bills introduced. Three of those bills may receive additional coverage in this blog:

HR 3594 To authorize appropriations to the Department of Transportation for surface transportation research, development, and deployment, and for other purposes. Rep. Johnson, Eddie Bernice [D-TX-30]

HR 3599 To establish a Federal rotational cyber workforce program for the Federal cyber workforce, and for other purposes. Rep. Khanna, Ro [D-CA-17]

HR 3608 To amend title 41, United States Code, to require information technology contractors to maintain a vulnerability disclosure policy and program, and for other purposes. Rep. Lieu, Ted [D-CA-33]

I will be watching HR 3594 to for language and definitions that would indicate that there are cybersecurity research programs included in the coverage.

 

I will be watching the other two for language and definitions that would include control system security in the covered activities.