Initial Assessments .—
The Secretary shall conduct an assessment of vessel types and United States facilities on or adjacent to the waters subject to the jurisdiction of the United States to identify those vessel types and United States facilities that pose a high risk of being involved in a transportation security incident.
Facility and Vessel Assessments .—
Based on the information gathered under subsection (a) of this section, the Secretary shall conduct a detailed vulnerability assessment of the facilities and vessels that may be involved in a transportation security incident. The vulnerability assessment shall include the following:
Identification and evaluation of critical assets and infrastructures.
Identification of the threats to those assets and infrastructures.
Identification of weaknesses in physical security, security against cybersecurity risks, passenger and cargo security, structural integrity, protection systems, procedural policies, communications systems, transportation infrastructure, utilities, contingency response, and other areas as determined by the Secretary.
Upon completion of an assessment under this subsection for a facility or vessel, the Secretary shall provide the owner or operator with a copy of the vulnerability assessment for that facility or vessel.
The Secretary shall update each vulnerability assessment conducted under this section at least every 5 years.
In lieu of conducting a facility or vessel vulnerability assessment under paragraph (1), the Secretary may accept an alternative assessment conducted by or on behalf of the owner or operator of the facility or vessel if the Secretary determines that the alternative assessment includes the matters required under paragraph (1).
Sharing of Assessment Integration of Plans and Equipment .—
The owner or operator of a facility, consistent with any Federal security restrictions, shall—
make a current copy of the vulnerability assessment conducted under subsection (b) available to the port authority with jurisdiction of the facility and appropriate State or local law enforcement agencies; and
integrate, to the maximum extent practical, any security system for the facility with compatible systems operated or maintained by the appropriate State, law enforcement agencies, and the Coast Guard.
Pub. L. 107–295, title I, § 102(a)116 Stat. 2068 Pub. L. 108–458, title IV, § 4072(b)118 Stat. 3730 Pub. L. 111–281, title VIII, § 822124 Stat. 3003 Pub. L. 115–254, div. J, § 1805(d)(1)132 Stat. 3535 (Added , , ; amended , , ; , , ; , , .)
Editorial Notes
Amendments
Pub. L. 115–254, § 1805(d)(1)(A)2018—Subsec. (b)(1). , struck out “and by not later than ” after “subsection (a) of this section” in introductory provisions.
Pub. L. 115–254, § 1805(d)(1)(B)Subsec. (b)(1)(C). , inserted “security against cybersecurity risks,” after “physical security,”.
Pub. L. 111–2812010—Subsec. (c). added subsec. (c).
Pub. L. 108–4582004—Subsec. (b)(1). substituted “and by not later than , the Secretary” for “, the Secretary” in introductory provisions.
Statutory Notes and Related Subsidiaries
Effective Date of 2018 Amendment
Pub. L. 115–254, div. J, § 1805(d)(3)132 Stat. 3535
section 70103 of this title46 U.S.C. 70112“The amendments made by this subsection [amending this section and ] shall apply to assessments or security plans, or updates to such assessments or plans, submitted after the date that the cybersecurity risk assessment model is developed under subsection (a) [ note].”
, , , provided that:
Coordination with TSA on Maritime Facilities
Pub. L. 115–254, div. J, § 1803132 Stat. 3533
“The Secretary of Homeland Security shall—“(1) “(2)
, , , provided that:
section 70102(b)(3) of title 46 provide the Administrator of the TSA [Transportation Security Administration] with updates to vulnerability assessments required under , United States Code, to avoid any duplication of effort between the Coast Guard and the TSA; and
section 70101 of title 46 identify any security gaps between authorities of operating entities within the Department of Homeland Security that a threat could exploit to cause a transportation security incident (as defined in , United States Code).”
Definitions
Pub. L. 115–254, div. J, § 1802132 Stat. 3533
section 1801 of Pub. L. 115–254section 101 of this title“In this division [see , set out as a Short Title of 2018 Amendment note under ]:“(1)“(A) “(B) “(C) “(D)
“(2)
, , , provided that:
Appropriate committees of congress .—
The term ‘appropriate committees of Congress’ means—
the Committee on Commerce, Science, and Transportation of the Senate;
the Committee on Homeland Security and Governmental Affairs of the Senate;
the Committee on Homeland Security of the House of Representatives; and
the Committee on Transportation and Infrastructure of the House of Representatives.
TSA .—
The term ‘TSA’ means the Transportation Security Administration.”