Bill Summary
The "Rural and Municipal Utility Cybersecurity Act" is a legislative proposal aimed at enhancing the cybersecurity of rural and municipal electric utilities. It amends the Infrastructure Investment and Jobs Act to reauthorize the Rural and Municipal Utility Advanced Cybersecurity Grant and Technical Assistance Program.
Key provisions of the Act include:
1. **Definition of Terms**: It defines key terms such as "advanced cybersecurity technology," "bulk-power system," and "eligible entity," which includes rural electric cooperatives, municipal utilities, and certain investor-owned utilities.
2. **Program Establishment**: The Act mandates the Secretary of Energy to maintain a program that provides funding and technical assistance to eligible entities for improving cybersecurity measures against threats.
3. **Objectives**: The program aims to deploy advanced cybersecurity technologies and increase participation in information sharing regarding cybersecurity threats.
4. **Funding**: The Act authorizes $250 million in appropriations for fiscal years 2026 through 2030 to support the program, with a focus on providing priority assistance to entities with limited cybersecurity resources or those owning critical infrastructure.
5. **Protection of Information**: Information shared with the government under this program is protected from disclosure under freedom of information laws, ensuring confidentiality for participating entities.
Overall, the legislation seeks to bolster the cybersecurity capabilities of essential electric utilities, thereby enhancing the resilience of the nation's energy infrastructure.
Possible Impacts
The "Rural and Municipal Utility Cybersecurity Act" as outlined in the provided legislation can have several effects on individuals and communities. Here are three examples:
1. **Enhanced Cybersecurity for Utility Services**: The act aims to fund advanced cybersecurity technologies for rural and municipal electric utilities. This could lead to improved protection against cyber threats, which, in turn, would enhance the reliability and safety of electricity services for residents in those areas. Individuals would benefit from a more stable power supply, reducing the risk of outages or disruptions caused by cyberattacks.
2. **Increased Awareness and Training**: By providing technical assistance and funding for eligible entities, the program could facilitate training and awareness about cybersecurity best practices among utility workers and local government officials. This increased knowledge will help ensure that personnel are better equipped to handle potential cyber threats, ultimately safeguarding the infrastructure that supports daily life for consumers.
3. **Equitable Access to Resources**: The legislation prioritizes funding for entities with limited cybersecurity resources or those that own critical infrastructure. This focus could help level the playing field for smaller or rural utilities that may lack the necessary funds to invest in robust cybersecurity measures. As a result, residents of underserved areas may receive better protection and service quality similar to that enjoyed by larger urban utilities, fostering greater equity in utility services across regions.
[Congressional Bills 119th Congress]
[From the U.S. Government Publishing Office]
[H.R. 7266 Introduced in House (IH)]
<DOC>
119th CONGRESS
2d Session
H. R. 7266
To amend the Infrastructure Investment and Jobs Act to reauthorize the
Rural and Municipal Utility Advanced Cybersecurity Grant and Technical
Assistance Program, and for other purposes.
_______________________________________________________________________
IN THE HOUSE OF REPRESENTATIVES
January 27, 2026
Mrs. Miller-Meeks (for herself and Ms. McClellan) introduced the
following bill; which was referred to the Committee on Energy and
Commerce
_______________________________________________________________________
A BILL
To amend the Infrastructure Investment and Jobs Act to reauthorize the
Rural and Municipal Utility Advanced Cybersecurity Grant and Technical
Assistance Program, and for other purposes.
Be it enacted by the Senate and House of Representatives of the
United States of America in Congress assembled,
SECTION 1. SHORT TITLE.
This Act may be cited as the ``Rural and Municipal Utility
Cybersecurity Act''.
SEC. 2. RURAL AND MUNICIPAL UTILITY ADVANCED CYBERSECURITY GRANT AND
TECHNICAL ASSISTANCE PROGRAM.
Section 40124 of the Infrastructure Investment and Jobs Act (42
U.S.C. 18723) is amended to read as follows:
``SEC. 40124. RURAL AND MUNICIPAL UTILITY ADVANCED CYBERSECURITY GRANT
AND TECHNICAL ASSISTANCE PROGRAM.
``(a) Definitions.--In this section:
``(1) Advanced cybersecurity technology.--The term
`advanced cybersecurity technology' means any technology,
operational capability, or service, including computer
hardware, software, or a related asset, that enhances the
security posture of electric utilities through improvements in
the ability to protect against, detect, respond to, or recover
from a cybersecurity threat.
``(2) Bulk-power system.--The term `bulk-power system' has
the meaning given the term in section 215(a) of the Federal
Power Act.
``(3) Cybersecurity threat.--The term `cybersecurity
threat' has the meaning given the term in section 2200 of the
Homeland Security Act of 2002.
``(4) Defense critical electric infrastructure.--The term
`defense critical electric infrastructure' has the meaning
given the term in section 215A(a) of the Federal Power Act.
``(5) Eligible entity.--The term `eligible entity' means--
``(A) a rural electric cooperative;
``(B) an electric utility owned by a political
subdivision of a State, such as a municipally owned
electric utility;
``(C) an electric utility owned by any agency,
authority, corporation, or instrumentality of 1 or more
political subdivisions of a State;
``(D) a not-for-profit entity that is in a
partnership with not fewer than 6 entities described in
subparagraph (A), (B), or (C); and
``(E) an investor-owned electric utility that sells
less than 4,000,000 megawatt hours of electricity per
year.
``(6) Program.--The term `Program' means the Rural and
Municipal Utility Advanced Cybersecurity Grant and Technical
Assistance Program established under subsection (b).
``(b) Establishment.--The Secretary shall maintain a program, to be
known as the Rural and Municipal Utility Advanced Cybersecurity Grant
and Technical Assistance Program, to provide technical assistance and
award funding, including grants, cooperative agreements, and prizes, to
eligible entities to protect against, detect, respond to, and recover
from cybersecurity threats.
``(c) Objectives.--The objectives of the Program shall be--
``(1) to deploy advanced cybersecurity technologies for
electric utility systems; and
``(2) to increase the participation of eligible entities in
cybersecurity threat information sharing programs.
``(d) Awards.--
``(1) In general.--In carrying out the Program, the
Secretary--
``(A) shall, subject to the availability of
appropriations, provide technical assistance, and award
funding, including grants, cooperative agreements, and
prizes, to eligible entities on a competitive or
noncompetitive basis;
``(B) shall develop criteria for providing such
technical assistance and awarding such funding;
``(C) may enter into agreements that can facilitate
the objectives described in subsection (c) with
eligible entities to provide technical assistance or
award funding, including grants, cooperative
agreements, and prizes; and
``(D) shall establish a process to ensure, to the
extent practicable, that all eligible entities are
informed about opportunities to receive technical
assistance or funding, including grants, cooperative
agreements, and prizes.
``(2) Priority for funding and technical assistance.--In
providing technical assistance and awarding funding, including
grants, cooperative agreements, and prizes, under the Program,
the Secretary shall give priority to an eligible entity that,
as determined by the Secretary--
``(A) has limited cybersecurity resources;
``(B) owns assets critical to the reliability of
the bulk-power system; or
``(C) owns or operates defense critical electric
infrastructure.
``(e) Protection of Information.--Information shared by or with the
Federal Government or a State, Tribal, or local government under the
Program shall be deemed voluntarily shared information and exempt from
disclosure under section 552 of title 5, United States Code (commonly
known as the Freedom of Information Act), or any provision of any
State, Tribal, or local freedom of information law, open government
law, open meetings law, open records law, sunshine law, or similar law
requiring the disclosure of information or records.
``(f) Authorization of Appropriations.--There is authorized to be
appropriated to the Secretary to carry out this section $250,000,000
for the period of fiscal years 2026 through 2030.''.
<all>