CYBERSECURITY TOOL; CYBER COORDINATOR.

SEC. 11510. [23 U.S.C. 101 note] CYBERSECURITY TOOL; CYBER COORDINATOR. (a) Definitions.—In this section: (1) Administrator.—The term “Administrator” means the Administrator of the Federal Highway Administration. (2) Cyber incident.—The term “cyber incident” has the meaning given the term “incident” in section 3552 of title 44, United States Code. (3) Transportation authority.—The term “transportation authority” means— (A) a public authority (as defined in section 101(a) of title 23, United States Code); (B) an owner or operator of a highway (as defined in section 101(a) of title 23, United States Code); (C) a manufacturer that manufactures a product related to transportation; and (D) a division office of the Federal Highway Administration. (b) Cybersecurity Tool.— (1) In general.—Not later than 2 years after the date of enactment of this Act, the Administrator shall develop a tool to assist transportation authorities in identifying, detecting, protecting against, responding to, and recovering from cyber incidents. (2) Requirements.—In developing the tool under paragraph (1), the Administrator shall— (A) use the cybersecurity framework established by the National Institute of Standards and Technology and required by Executive Order 13636 of February 12, 2013 (78 Fed. Reg. 11739; relating to improving critical infrastructure cybersecurity); (B) establish a structured cybersecurity assessment and development program; (C) coordinate with the Transportation Security Administration and the Cybersecurity and Infrastructure Security Agency; (D) consult with appropriate transportation authorities, operating agencies, industry stakeholders, and cybersecurity experts; and (E) provide for a period of public comment and review on the tool. (c) Designation of Cyber Coordinator.— (1) In general.—Not later than 2 years after the date of enactment of this Act, the Administrator shall designate an office as a “cyber coordinator”, which shall be responsible for monitoring, alerting, and advising transportation authorities of cyber incidents. (2) Requirements.—The office designated under paragraph (1) shall, in coordination with the Transportation Security Administration and the Cybersecurity and Infrastructure Security Agency— (A) provide to transportation authorities a secure method of notifying the Federal Highway Administration of cyber incidents; (B) share the information collected under subparagraph (A) with the Transportation Security Administration and the Cybersecurity and Infrastructure Security Agency; (C) monitor cyber incidents that affect transportation authorities; (D) alert transportation authorities to cyber incidents that affect those transportation authorities; (E) investigate unaddressed cyber incidents that affect transportation authorities; and (F) provide to transportation authorities educational resources, outreach, and awareness on fundamental principles and best practices in cybersecurity for transportation systems.