Josh Gottheimer (D-NJ)
Securing Our Critical Infrastructure Act
A Democratic bill with 2 Republican cosponsors · See all 4 cosponsors
Last activity — Referred to the House Committee on Homeland Security.
In committee
Introduced and handed to a committee in the chamber it started in.
The committee holds it, and most bills are never heard from again. A hearing or a committee vote would be news; silence is the usual outcome, and it kills the bill without anyone voting against it.
Its path through Congress
- Introduced
- In Committee
What this bill would do
This bill is known as the Securing Our Critical Infrastructure Act. It amends the Cyber Incident Reporting for Critical Infrastructure Act of 2022 to change a ransomware warning pilot program into a permanent security vulnerability warning program within the Cybersecurity and Infrastructure Security Agency. The program specifically focuses on covered utilities, such as certain water and wastewater utilities. It automatically enrolls these covered utilities into cyber hygiene services, while allowing them to disenroll if they choose. The legislation also directs the agency to utilize incident response capabilities if a covered utility is affected by a cyber incident. Finally, the program is set to terminate five years after the enactment of the subsection.
Yes· 3 of 10
- Scored +7
Does this better protect the country from computer attacks?
The legislation reauthorizes and makes permanent a CISA security vulnerability warning program for critical infrastructure like water and wastewater utilities and mandates incident response capabilities.
- Scored +6
Does this protect people from being watched or searched?
The bill adds explicit provisions exempting shared information from FOIA and protecting individuals' personal information from unauthorized use.
- Scored +6
Does this give people more control over their personal data?
The legislation includes specific privacy protections requiring CISA to safeguard personal information shared by covered entities from unauthorized disclosure.
The opposite
No question was scored the opposite.
Who it would affect, and how
Potential Positive Impacts for People
-
Section 2 amends the law to establish a security vulnerability warning program and requires the Director to utilize incident response capabilities on behalf of a covered utility if it is affected by a cyber incident (Section 2, amending subsection (h)). This is positive because it helps protect vital water and wastewater services that people rely on every day from cyber threats.
-
Section 2 includes specific privacy protections requiring the Director to retain information shared by a covered entity in a manner that protects any personal information or information that identifies a specific individual from unauthorized use or disclosure (Section 2, amending subsection (e)(4)). This is beneficial for individuals because it safeguards their personal data from being improperly exposed.
Potential Negative Impacts for People
- Section 2 automatically enrolls each covered utility into applicable cyber hygiene services of the Cybersecurity and Infrastructure Security Agency (Section 2, amending subsection (g)(1)). While intended to help, mandatory enrollment—even with the option to disenroll—could place unexpected administrative burdens on smaller local utilities that are already stretched thin trying to serve the public.
Groups and Interests Ranking
Every group the model scored this bill for, from -10 to +10. Tap or hover a score for the reason it gave.
- Demographic And Interest Groups
- Would farmers be better off under this? — Rural and agricultural communities rely on local water and wastewater utilities that benefit directly from the bill's cybersecurity protections. Would people in rural areas be better off under this? — Rural residents served by smaller water and wastewater utilities gain enhanced cybersecurity support and incident response capabilities. Would people in cities be better off under this? — City residents relying on local water and wastewater systems benefit from improved protection against cyber threats to critical infrastructure.
- Governance And Ideology
- Does this protect people from being watched or searched? — The bill adds explicit provisions exempting shared information from FOIA and protecting individuals' personal information from unauthorized use. Does this give the federal government more power? — The bill expands federal involvement by automatically enrolling covered utilities in CISA cyber hygiene services and directing federal incident response.
- Environment Energy And Infrastructure
- Does this better protect air, water and wildlife? — By protecting water and wastewater utilities from cyber attacks, the bill helps safeguard vital environmental and public health infrastructure. Does this invest in rural communities? — The bill covers smaller water and wastewater utilities, which often serve rural communities, helping them maintain secure critical infrastructure.
- National Security And Foreign Policy
- Does this better protect the country from computer attacks? — The legislation reauthorizes and makes permanent a CISA security vulnerability warning program for critical infrastructure like water and wastewater utilities and mandates incident response capabilities.
- Education And Technology
- Does this give people more control over their personal data? — The legislation includes specific privacy protections requiring CISA to safeguard personal information shared by covered entities from unauthorized disclosure.
- Economy And Finance
- Does this make it easier to run a small business? — The bill provides critical cybersecurity vulnerability warnings and cyber hygiene services to covered utilities, helping protect small local water and wastewater utilities from cyber threats.
- 10/1/2026
- Referred to the House Committee on Homeland Security.
- 4 Cosponsors added.
- Introduced in House
Don BaconRepublican · Nebraska
Greg LandsmanDemocrat · Ohio
Zachary NunnRepublican · Iowa
Hillary ScholtenDemocrat · Michigan