HouseH.R. 10569119th Congress

Protecting Biotechnology and Biomanufacturing as Critical Infrastructure Act

Full Text

Official text as published. Use Ctrl+F / Cmd+F to search within the document.

[Congressional Bills 119th Congress]
[From the U.S. Government Publishing Office]
[H.R. 10569 Introduced in House (IH)]

<DOC>

119th CONGRESS
  2d Session
                               H. R. 10569

     To amend the Homeland Security Act of 2002 to provide for the 
protection of biotechnology and biomanufacturing infrastructure by the 
 Cybersecurity and Infrastructure Security Agency of the Department of 
               Homeland Security, and for other purposes.

_______________________________________________________________________

                    IN THE HOUSE OF REPRESENTATIVES

                           September 24, 2026

  Mr. Khanna (for himself, Mrs. Bice, and Mr. Peters) introduced the 
    following bill; which was referred to the Committee on Homeland 
                                Security

_______________________________________________________________________

                                 A BILL

 
     To amend the Homeland Security Act of 2002 to provide for the 
protection of biotechnology and biomanufacturing infrastructure by the 
 Cybersecurity and Infrastructure Security Agency of the Department of 
               Homeland Security, and for other purposes.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Protecting Biotechnology and 
Biomanufacturing as Critical Infrastructure Act''.

SEC. 2. BIOTECHNOLOGY AND BIOMANUFACTURING INFRASTRUCTURE.

    (a) In General.--Section 2202 of the Homeland Security Act of 2002 
(6 U.S.C. 652) is amended--
            (1) in subsection (c)--
                    (A) in paragraph (2), by inserting ``and 
                biotechnology and biomanufacturing infrastructure 
                owners and operators'' after ``international 
                entities'';
                    (B) in paragraph (5), by inserting before the 
                semicolon the following: ``, and with respect to 
                critical infrastructure, including biotechnology and 
                biomanufacturing infrastructure, with no designated 
                Sector-Specific Agency, designate staff of the Agency 
                to provide those analyses, expertise, and other 
                technical assistance'';
                    (C) in paragraph (10), by inserting before the 
                semicolon the following: ``, and for critical 
                infrastructure, including biotechnology and 
                biomanufacturing infrastructure, with no designated 
                Sector-Specific Agency, direct staff designated in 
                accordance with paragraph (5) to carry out that 
                outreach and engagement, including, as appropriate, 
                convening relevant Sector-Specific Agencies'';
                    (D) in paragraph (13), by striking ``and'' after 
                the semicolon;
                    (E) by redesignating paragraph (14) as paragraph 
                (15); and
                    (F) by inserting after paragraph (13) the following 
                new paragraph:
                    ``(14) take such actions as may be necessary to 
                ensure the protection of biotechnology and 
                biomanufacturing infrastructure with no designated 
                Sector-Specific Agency; and''; and
            (2) in subsection (e)(1)--
                    (A) in subparagraph (B), by adding at the end the 
                following new sentence: ``With respect to critical 
                infrastructure, including biotechnology and 
                biomanufacturing infrastructure, with no designated 
                Sector-Specific Agency, such assessments shall be 
                carried out in coordination with existing relevant 
                Information Sharing and Analysis Organizations, such as 
                BIO-ISAC and H-ISAC, and industry member 
                associations.''; and
                    (B) in subparagraph (E)--
                            (i) by inserting ``biotechnology and 
                        biomanufacturing infrastructure,'' after 
                        ``emergency communications systems,''; and
                            (ii) by adding at the end the following new 
                        sentence: ``Such comprehensive national plan 
                        shall be informed by the assessments required 
                        under subparagraph (B).''.
    (b) Reporting.--
            (1) In general.--Not later than 45 days after the date of 
        the enactment of this Act, the Director of the Cybersecurity 
        and Infrastructure Security Agency of the Department of 
        Homeland Security shall submit to the Committee on Homeland 
        Security of the House of Representatives and the Committee on 
        Homeland Security and Governmental Affairs of the Senate a work 
        plan to protect biotechnology and biomanufacturing 
        infrastructure. Such work plan shall include the following:
                    (A) An identification of biotechnology and 
                biomanufacturing infrastructure stakeholders, including 
                Information Sharing and Analysis Organizations.
                    (B) An outreach plan to ensure such stakeholders 
                are aware, if applicable, of their protection under 
                existing critical infrastructure sectors.
                    (C) An action plan to ensure such stakeholders are 
                represented at appropriate consortia and sector 
                coordinating councils.
                    (D) An action plan to update, by September 30, 
                2027, strategic plans under section 2202(e)(1)(E) of 
                the Homeland Security Act of 2002 (6 U.S.C. 
                652(e)(1)(E)) with input from such stakeholders.
            (2) Implementation report.--Not later than one year after 
        the submission of the work plan under paragraph (1), the 
        Director of the Cybersecurity and Infrastructure Security 
        Agency of the Department of Homeland Security shall submit to 
        the Committee on Homeland Security of the House of 
        Representatives and the Committee on Homeland Security and 
        Governmental Affairs of the Senate a report on the 
        implementation of such work plan.
            (3) Report on the protection of emerging biotechnology as 
        critical infrastructure.--Not later than the earlier of two 
        years after the submission of the work plan under paragraph 
        (1), or the first evaluation and recommendation carried out 
        pursuant to subsection (b)(2) of section 9002 of the William M. 
        (Mac) Thornberry National Defense Authorization Act for Fiscal 
        Year 2021 (6 U.S.C. 652a) that occurs after the date of the 
        enactment of this Act, the Director of the Cybersecurity and 
        Infrastructure Security Agency of the Department of Homeland 
        security shall submit to the Committee on Homeland Security of 
        the House of Representatives and the Committee on Homeland 
        Security and Governmental Affairs of the Senate a report 
        addressing whether there are any critical biotechnology areas 
        that remain unprotected.
                                 <all>