H.R. 370 would require the Cyber Security, Energy Security and Emergency Response office within the Department of Energy (DOE) to pursue a physical security and cybersecurity program for pipelines and liquefied natural gas facilities.
The bill would direct DOE to develop and test advanced cybersecurity technologies for natural gas pipelines using pilot demonstration projects. DOE also would be required to establish energy curricula to help develop a physical security and cybersecurity workforce for the energy sector. In addition to authorizing DOE to provide technical tools to assist the energy sector in pipeline security, H.R. 370 also would specify DOE’s role in coordinating federal, state, and private entities’ responses to and recoveries from physical and cyber incidents that affect the energy sector.
Assuming appropriation of the necessary amounts and using information from DOE, CBO estimates that implementing H.R. 370 would cost $64 million over the 2020-2024 period. About $45 million of that amount would be used to develop the physical infrastructure and technical tools necessary to complete demonstration projects for pipeline security and to develop advanced cybersecurity applications for the energy sector. The remaining amount, $19 million, would be used over the same period to support approximately 30 additional employees at an initial average annual cost of $120,000 each to establish policies, procedures, workforce development curricula, and to coordinate responses and recovery efforts related to cyber incidents that affect the energy sector.
The costs of the legislation fall within budget function 270 (energy).