republic-os/legal/us/code/title-42/chapter-162/section-18725.md

type, title, description, jurisdiction, corpus, kind, title_number, title_name, chapter_number, chapter_name, section, citation, status, release_point, release_date, source, source_url, source_identifier, source_file, source_hash, raw_snapshot_hash, text_hash, retrieved_at, confidence, tags

type	title	description	jurisdiction	corpus	kind	title_number	title_name	chapter_number	chapter_name	section	citation	status	release_point	release_date	source	source_url	source_identifier	source_file	source_hash	raw_snapshot_hash	text_hash	retrieved_at	confidence	tags
LegalText	42 U.S.C. § 18725	Cybersecurity plan	us	united_states_code	code_section	42	THE PUBLIC HEALTH AND WELFARE	162	ENERGY INFRASTRUCTURE	18725	42 U.S.C. § 18725	current	119-100	2026-06-26	official	https://uscode.house.gov/download/releasepoints/us/pl/119/100/xml_usc42@119-100.zip	/us/usc/t42/s18725	data/legal/raw/us/code/title-42/usc42.xml	4275e457d5ab0514f36591da8724f3de53e183d70d714a25fb905e92761f5caa	644321055a08eb1f260a6a3e31ac157fa024756abf612a9fd6857e7e400cf24e	dda1a76980f5b4f84f6b3f51df11068ba03de5bc7aa8713f054c5b6440b3c880	2026-07-04	official	legal us-code

42 U.S.C. § 18725 - Cybersecurity plan

Text

(a) In general The Secretary may require, as the Secretary determines appropriate, a recipient of any award or other funding under this division—

(1) to submit to the Secretary, prior to the issuance of the award or other funding, a cybersecurity plan that demonstrates the cybersecurity maturity of the recipient in the context of the project for which that award or other funding was provided; and

(2) establish a plan for maintaining and improving cybersecurity throughout the life of the proposed solution of the project.

(b) Contents of cybersecurity plan A cybersecurity plan described in subsection (a) shall, at a minimum, describe how the recipient described in that subsection—

(1) plans to maintain cybersecurity between networks, systems, devices, applications, or components—

(A) within the proposed solution of the project; and

(B) at the necessary external interfaces at the proposed solution boundaries;

(2) will perform ongoing evaluation of cybersecurity risks to address issues as the issues arise throughout the life of the proposed solution;

(3) will report known or suspected network or system compromises of the project to the Secretary; and

(4) will leverage applicable cybersecurity programs of the Department, including cyber vulnerability testing and security engineering evaluations.

(c) Additional guidance Each recipient described in subsection (a) should—

(1) maximize the use of open guidance and standards, including, wherever possible—

(A) the Cybersecurity Capability Maturity Model of the Department (or a successor model); and

(B) the Framework for Improving Critical Infrastructure Cybersecurity of the National Institute of Standards and Technology; and

(2) document—

(A) any deviation from open standards; and

(B) the utilization of proprietary standards where the recipient determines that such deviation necessary.

(d) Coordination The Office of Cybersecurity, Energy Security, and Emergency Response of the Department shall review each cybersecurity plan submitted under subsection (a) to ensure integration with Department research, development, and demonstration programs.

(e) Protection of information Information provided to, or collected by, the Federal Government pursuant to this section the disclosure of which the Secretary reasonably foresees could be detrimental to the physical security or cybersecurity of any electric utility or the bulk-power system—

(1) shall be exempt from disclosure under section 552(b)(3) of title 5; and

(2) shall not be made available by any Federal agency, State, political subdivision of a State, or Tribal authority pursuant to any Federal, State, political subdivision of a State, or Tribal law, respectively, requiring public disclosure of information or records.

(Pub. L. 117–58, div. D, title I, § 40126, Nov. 15, 2021, 135 Stat. 956.)

Notes

Editorial Notes

References in TextThis division, referred to in subsec. (a), is div. D of Pub. L. 117–58, Nov. 15, 2021, 135 Stat. 923, which enacted this chapter and enacted and amended numerous other sections and notes in the Code. For complete classification of div. D to the Code, see Tables.

Statutory Notes and Related Subsidiaries

Wage Rate RequirementsFor provisions relating to rates of wages to be paid to laborers and mechanics on projects for construction, alteration, or repair work funded under div. D or an amendment by div. D of Pub. L. 117–58, including authority of Secretary of Labor, see section 18851 of this title.