Section 1 Short title
This Act may be cited as the “Port Crane Security and Inspection Act of 2022”.
Port Crane Security and Inspection Act of 2022
A BILL
To require the inspection of certain foreign cranes before use at a United States port, and for other purposes.
Sec. 2 Foreign crane inspection transportation and port security and maritime security enhancement
In general— With respect to newly constructed foreign cranes procured for use at a United States port determined by the Secretary to be of high risk to port security or maritime transportation security and that connect to the cybersecurity network of such port, the Secretary of Homeland Security shall, acting through the Cybersecurity and Infrastructure Security Agency, before such crane is placed into service at such port, inspect such crane for potential security vulnerabilities.
Security vulnerability assessments— Not later than 180 days after the date of enactment of this Act, the Secretary shall assess the threat posed by security vulnerabilities of any existing or newly constructed foreign cranes.
Report to Congress— Not later than 1 year after the date of enactment of this Act, the Secretary shall brief the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate regarding critical and high-risk foreign crane security vulnerabilities posed by existing or newly constructed foreign cranes within United States ports.
Definitions— In this section:
Covered foreign country— The term “covered foreign country” means a country that—
the intelligence community has identified as a foreign adversary in its most recent Annual Threat Assessment; or
the Secretary of Homeland Security, in coordination with the Director of National Intelligence, has identified as a foreign adversary that is not included in such Annual Threat Assessment.
Foreign crane— The term “foreign crane” means a crane for which any software or other technology in such crane that is connected into cyber infrastructure at a port located in the United States was, in whole or in part, manufactured by an entity that is owned or controlled by, is a subsidiary of, or is otherwise related legally or financially to a corporation based in a covered foreign country.
Sec. 3 Foreign crane prohibition
In general— Notwithstanding any other provision of law, a foreign crane—
for which a contract was entered into on or after the date of enactment of this Act may not be operated at a port located in the United States; and
operated at a port located in the United States may not operate foreign software on any date after the date which is 5 years after the date of enactment of this Act.
Definitions— In this section:
Covered foreign country— The term “covered foreign country” means a country that—
the intelligence community has identified as a foreign adversary in its most recent Annual Threat Assessment; or
the Secretary of Homeland Security, in coordination with the Director of National Intelligence, has identified as a foreign adversary that is not included in such Annual Threat Assessment.
Foreign crane— The term “foreign crane” means a crane for which any software or other technology in such crane that is connected into cyber infrastructure at a port located in the United States was, in whole or in part, manufactured by an entity that is owned or controlled by, is a subsidiary of, or is otherwise related legally or financially to a corporation based in a covered foreign country.
Foreign software— The term “foreign software” means software or other technology in a foreign crane that is connected into cyber infrastructure at a port located in the United States was, in whole or in part, manufactured by a company wholly owned by a covered foreign country.