CYBERSECURITY VULNERABILITIES.

SEC. 1542. CYBERSECURITY VULNERABILITIES. Section 2209 of the Homeland Security Act of 2002 (6 U.S.C. 659) is amended— (1) in subsection (a)— (A) by redesignating paragraphs (4) through (8) as paragraphs (5) through (9), respectively; and (B) by inserting after paragraph (3) the following new paragraph: “(4) the term ‘cybersecurity vulnerability’ has the meaning given the term ‘security vulnerability’ in section 102 of the Cybersecurity Information Sharing Act of 2015 (6 U.S.C. 1501);” . (2) in subsection (c)— (A) in paragraph (5)— (i) in subparagraph (A), by striking “and” after the semicolon at the end; (ii) by redesignating subparagraph (B) as subparagraph (C); (iii) by inserting after subparagraph (A) the following new subparagraph: “(B) sharing mitigation protocols to counter cybersecurity vulnerabilities pursuant to subsection (n), as appropriate; and” ; and (iv) in subparagraph (C), as so redesignated, by inserting “and mitigation protocols to counter cybersecurity vulnerabilities in accordance with subparagraph (B), as appropriate,” before “with Federal”; (B) in paragraph (7)(C), by striking “sharing” and inserting “share”; and (C) in paragraph (9), by inserting “mitigation protocols to counter cybersecurity vulnerabilities, as appropriate,” after “measures,”; (3) by redesignating subsection (o) as subsection (p); and (4) by inserting after subsection (n) following new subsection: “(o) Protocols to Counter Certain Cybersecurity Vulnerabilities.—The Director may, as appropriate, identify, develop, and disseminate actionable protocols to mitigate cybersecurity vulnerabilities to information systems and industrial control systems, including in circumstances in which such vulnerabilities exist because software or hardware is no longer supported by a vendor.” .