---
kind: "section"
citation: "42 U.S.C. § 18722"
title: "42"
title_heading: "The Public Health and Welfare"
number: "18722"
heading: "Energy cyber sense program"
release: "119-102"
date: "2026-07-12"
url: "https://uscodex.org/usc/42/18722"
units:
  - "Chapter 162 — Energy Infrastructure"
  - "Subchapter I — Grid Infrastructure and Resiliency"
  - "Part B — Cybersecurity"
---

# §18722. Energy cyber sense program

- (a) **Definitions—** In this section:
  - (1) **Bulk-power system—** The term “bulk-power system” has the meaning given the term in section 824o(a) of title 16.
  - (2) **Program—** The term “[program](/usc/42/18791.md?p=2)” means the voluntary Energy Cyber Sense [program](/usc/42/18791.md?p=2) established under [subsection (b)](#b).
- (b) **Establishment—** The [Secretary](/usc/42/18701.md?p=3), in coordination with the [Secretary](/usc/42/18701.md?p=3) of Homeland Security and in consultation with the heads of other relevant Federal [agencies](/usc/42/8262.md?p=1), shall establish a voluntary Energy Cyber Sense [program](/usc/42/18791.md?p=2) to test the cybersecurity of products and technologies intended for use in the energy sector, including in the bulk-power system.
- (c) **Program requirements—** In carrying out [subsection (b)](#b), the [Secretary](/usc/42/18701.md?p=3), in coordination with the [Secretary](/usc/42/18701.md?p=3) of Homeland Security and in consultation with the heads of other relevant Federal [agencies](/usc/42/8262.md?p=1), shall—
  - (1) establish a testing process under the [program](/usc/42/18791.md?p=2) to test the cybersecurity of products and technologies intended for use in the energy sector, including products relating to industrial control systems and operational technologies, such as supervisory control and data acquisition systems;
  - (2) for products and technologies tested under the [program](/usc/42/18791.md?p=2), establish and maintain cybersecurity vulnerability reporting processes and a related database that are integrated with Federal vulnerability coordination processes;
  - (3) provide technical assistance to electric utilities, product manufacturers, and other energy sector stakeholders to develop solutions to mitigate identified cybersecurity vulnerabilities in products and technologies tested under the [program](/usc/42/18791.md?p=2);
  - (4) biennially review products and technologies tested under the [program](/usc/42/18791.md?p=2) for cybersecurity vulnerabilities and provide analysis with respect to how those products and technologies respond to and mitigate cyber threats;
  - (5) develop guidance that is informed by analysis and testing results under the [program](/usc/42/18791.md?p=2) for electric utilities and other components of the energy sector for the procurement of products and technologies;
  - (6) provide reasonable notice to, and solicit comments from, the public prior to establishing or revising the testing process under the [program](/usc/42/18791.md?p=2);
  - (7) oversee the testing of products and technologies under the [program](/usc/42/18791.md?p=2); and
  - (8) consider incentives to encourage the use of analysis and results of testing under the [program](/usc/42/18791.md?p=2) in the design of products and technologies for use in the energy sector.
- (d) **Protection of information—** Information provided to, or collected by, the Federal Government pursuant to this section the disclosure of which the [Secretary](/usc/42/18701.md?p=3) reasonably foresees could be detrimental to the physical security or cybersecurity of any component of the energy sector, including any electric utility or the bulk-power system—
  - (1) shall be exempt from disclosure under [section 552(b)(3) of title 5](/usc/5/552.md?p=b-3); and
  - (2) shall not be made available by any Federal [agency](/usc/42/8262.md?p=1), [State](/usc/42/18791.md?p=3), political subdivision of a [State](/usc/42/18791.md?p=3), or Tribal authority pursuant to any Federal, [State](/usc/42/18791.md?p=3), political subdivision of a [State](/usc/42/18791.md?p=3), or Tribal law, respectively, requiring public disclosure of information or records.
- (e) **Federal Government liability—** Nothing in this section authorizes the commencement of an action against the United States with respect to the testing of a product or technology under the [program](/usc/42/18791.md?p=2).

## Source credit

(Pub. L. 117–58, div. D, title I, § 40122, Nov. 15, 2021, 135 Stat. 950.)

## Notes

### Statutory Notes and Related Subsidiaries

### Wage Rate Requirements

For provisions relating to rates of wages to be paid to laborers and mechanics on projects for construction, alteration, or repair work funded under div. D or an amendment by div. D of Pub. L. 117–58, including authority of Secretary of Labor, see section 18851 of this title.