SAFEGUARDS Act of 2025

Overview: S 2378, the SAFEGUARDS Act of 2025, was introduced in the Senate on July 22, 2025.

Purpose and Intent: The bill aims to enhance the security and resilience of critical infrastructure systems, such as energy, transportation, and communications networks, against cyber threats and other disruptions.

Key Provisions:
- Establishes a new federal Cybersecurity and Infrastructure Security Agency (CISA) to coordinate national efforts to protect critical infrastructure
- Requires owners and operators of designated critical infrastructure to develop and implement comprehensive security plans, including incident response and recovery measures
- Authorizes CISA to conduct risk assessments, provide technical assistance, and issue binding cybersecurity directives to critical infrastructure entities
- Creates a grant program to help state, local, and tribal governments enhance the security of their critical infrastructure assets

Affected Parties and Impacts: Owners and operators of designated critical infrastructure systems, as well as state, local, and tribal governments responsible for critical infrastructure. The bill aims to improve the overall security and resilience of the nation's most vital systems and assets.

Procedural and Timeline Considerations: The bill has been introduced in the Senate and will now proceed through the normal legislative process. If passed and signed into law, CISA would be required to establish the new agency and begin implementing the bill's provisions within a specified timeframe.