H.R. 10519 (Critical Infrastructure AI Cyber Defense Pilot Program bill)

Properties

jurisdiction: US, federal
level: federal
domain: sectoral
status: proposed
scope: Federal bill directing the Secretary of Homeland Security, acting through the CISA Director, to establish a five-year pilot program letting critical-infrastructure owners and operators securely use AI procured or supported by DHS to protect against, detect, test for, and remediate cybersecurity vulnerabilities.
obligations: DHS/CISA must establish the program within 120 days of enactment, in consultation with Sector Risk Management Agencies, prioritizing not-for-profit, publicly owned, rural, or small-sized infrastructure owners/operators; participants submit annual applications; CISA must issue an initial report within 30 days of program establishment and monthly reports thereafter; the program terminates 5 years after enactment; authorized funding of $100,000,000 for fiscal years 2027 through 2031, with administrative costs capped at 5 percent of appropriations.
effectiveDate: TBD
appliesTo: Owners and operators of critical infrastructure participating in the DHS/CISA pilot program
officialUrl: https://www.govinfo.gov/app/details/BILLS-119hr10519ih
notes: Introduced September 21, 2026 by Rep. Josh Gottheimer (D-NJ), with bipartisan cosponsors including Rep. Don Bacon (R-NE); referred to the House Committee on Homeland Security. Not yet passed by either chamber. No short title clause was found in Section 1 of the bill text (only the section heading Critical Infrastructure AI Cyber Defense Pilot Program), so the entity is named descriptively rather than with an invented Act title. Distinct from all currently tracked entities: a federal, government-run AI-for-cyber-defense assistance program for critical infrastructure operators, not a safety-reporting, disclosure, or procurement-restriction regime like the tracked EOs (eo-14409, eo-14365) and OMB memoranda; included on the same basis as those OMB memos, as a federal-government AI program rather than a private-sector prohibition. Quote independently re-verified against the bill's own HTML text on GovInfo.

Properties

jurisdiction

US, federal

level

federal

domain

sectoral

status

proposed

scope

Federal bill directing the Secretary of Homeland Security, acting through the CISA Director, to establish a five-year pilot program letting critical-infrastructure owners and operators securely use AI procured or supported by DHS to protect against, detect, test for, and remediate cybersecurity vulnerabilities.

obligations

DHS/CISA must establish the program within 120 days of enactment, in consultation with Sector Risk Management Agencies, prioritizing not-for-profit, publicly owned, rural, or small-sized infrastructure owners/operators; participants submit annual applications; CISA must issue an initial report within 30 days of program establishment and monthly reports thereafter; the program terminates 5 years after enactment; authorized funding of $100,000,000 for fiscal years 2027 through 2031, with administrative costs capped at 5 percent of appropriations.

effectiveDate

TBD

appliesTo

Owners and operators of critical infrastructure participating in the DHS/CISA pilot program

officialUrl

https://www.govinfo.gov/app/details/BILLS-119hr10519ih

notes

Introduced September 21, 2026 by Rep. Josh Gottheimer (D-NJ), with bipartisan cosponsors including Rep. Don Bacon (R-NE); referred to the House Committee on Homeland Security. Not yet passed by either chamber. No short title clause was found in Section 1 of the bill text (only the section heading Critical Infrastructure AI Cyber Defense Pilot Program), so the entity is named descriptively rather than with an invented Act title. Distinct from all currently tracked entities: a federal, government-run AI-for-cyber-defense assistance program for critical infrastructure operators, not a safety-reporting, disclosure, or procurement-restriction regime like the tracked EOs (eo-14409, eo-14365) and OMB memoranda; included on the same basis as those OMB memos, as a federal-government AI program rather than a private-sector prohibition. Quote independently re-verified against the bill's own HTML text on GovInfo.