6 U.S. Code § 1181 - Over-the-road bus security assessments and plans
prev | next
(a) In general
Not later than 18 months after August 3, 2007, the Secretary shall issue regulations that—
(1) require each over-the-road bus operator assigned to a high-risk tier under this section—
(b) Non high-risk programs
The Secretary may establish a security program for over-the-road bus operators not assigned to a high-risk tier, including—
(1) guidance for such operators in conducting vulnerability assessments and preparing and implementing security plans, as determined appropriate by the Secretary; and
(c) Deadline for submission
Not later than 9 months after the date of issuance of the regulations under subsection (a), the vulnerability assessments and security plans required by such regulations for over-the-road bus operators assigned to a high-risk tier shall be completed and submitted to the Secretary for review and approval.
(d) Vulnerability assessments
The Secretary shall provide technical assistance and guidance to over-the-road bus operators in conducting vulnerability assessments under this section and shall require that each vulnerability assessment of an operator assigned to a high-risk tier under this section includes, as appropriate—
(A) identification and evaluation of critical assets and infrastructure, including platforms, stations, terminals, and information systems;
(C) identification of weaknesses in—
(iii) the security of programmable electronic devices, computers, or other automated systems which are used in providing over-the-road bus transportation;
(v) communications systems and utilities needed for over-the-road bus security purposes, including dispatching systems;
(2) Threat information
The Secretary shall provide in a timely manner to the appropriate employees of an over-the-road bus operator, as designated by the over-the-road bus operator, threat information that is relevant to the operator when preparing and submitting a vulnerability assessment and security plan, including an assessment of the most likely methods that could be used by terrorists to exploit weaknesses in over-the-road bus security.
(e) Security plans
The Secretary shall provide technical assistance and guidance to over-the-road bus operators in preparing and implementing security plans under this section and shall require that each security plan of an over-the-road bus operator assigned to a high-risk tier under this section includes, as appropriate—
(A) the identification of a security coordinator having authority—
(C) procedures to be implemented or used by the over-the-road bus operator in response to a terrorist attack, including evacuation and passenger communication plans that include individuals with disabilities, as appropriate;
(D) the identification of steps taken with State and local law enforcement agencies, emergency responders, and Federal officials to coordinate security measures and plans for response to a terrorist attack;
(E) a strategy and timeline for conducting training under section 1184 of this title;
(F) enhanced security measures to be taken by the over-the-road bus operator when the Secretary declares a period of heightened security risk;
(G) plans for providing redundant and backup systems required to ensure the continued operation of critical elements of the over-the-road bus operator’s system in the event of a terrorist attack or other incident; and
(2) Security coordinator requirements
The Secretary shall require that the individual serving as the security coordinator identified in paragraph (1)(A) is a citizen of the United States. The Secretary may waive this requirement with respect to an individual if the Secretary determines that it is appropriate to do so based on a background check of the individual and a review of the consolidated terrorist watchlist.
(f) Deadline for review process
Not later than 6 months after receiving the assessments and plans required under this section, the Secretary shall—
(1) review each vulnerability assessment and security plan submitted to the Secretary in accordance with subsection (c);
(2) require amendments to any security plan that does not meet the requirements of this section; and
(g) Interim security measures
The Secretary may require over-the-road bus operators, during the period before the deadline established under subsection (c), to submit a security plan to implement any necessary interim security measures essential to providing adequate security of the over-the-road bus operator’s system. An interim plan required under this subsection shall be superseded by a plan required under subsection (c).
(h) Tier assignment
The Secretary shall assign each over-the-road bus operator to a risk-based tier established by the Secretary:
(1) Provision of information
The Secretary may request, and an over-the-road bus operator shall provide, information necessary for the Secretary to assign an over-the-road bus operator to the appropriate tier under this subsection.
Not later than 60 days after the date an over-the-road bus operator is assigned to a tier under this section, the Secretary shall notify the operator of the tier to which it is assigned and the reasons for such assignment.
(3) High-risk tiers
At least one of the tiers established by the Secretary under this section shall be a tier designated for high-risk over-the-road bus operators.
The Secretary may reassign an over-the-road bus operator to another tier, as appropriate, in response to changes in risk and the Secretary shall notify the over-the-road bus operator within 60 days after such reassignment and provide the operator with the reasons for such reassignment.
(i) Existing procedures, protocols, and standards
In response to a petition by an over-the-road bus operator or at the discretion of the Secretary, the Secretary may determine that existing procedures, protocols, and standards meet all or part of the requirements of this section regarding vulnerability assessments and security plans.
Upon review and written determination by the Secretary that existing procedures, protocols, or standards of an over-the-road bus operator satisfy the requirements of this section, the over-the-road bus operator may elect to comply with those procedures, protocols, or standards instead of the requirements of this section.
(3) Partial approval
If the Secretary determines that the existing procedures, protocols, or standards of an over-the-road bus operator satisfy only part of the requirements of this section, the Secretary may accept such submission, but shall require submission by the operator of any additional information relevant to the vulnerability assessment and security plan of the operator to ensure that the remaining requirements of this section are fulfilled.
If the Secretary determines that particular existing procedures, protocols, or standards of an over-the-road bus operator under this subsection do not satisfy the requirements of this section, the Secretary shall provide to the operator a written notification that includes an explanation of the reasons for nonacceptance.
(j) Periodic evaluation by over-the-road bus provider required
(1) Submission of evaluation
Not later than 3 years after the date on which a vulnerability assessment or security plan required to be submitted to the Secretary under subsection (c) is approved, and at least once every 5 years thereafter (or on such a schedule as the Secretary may establish by regulation), an over-the-road bus operator who submitted a vulnerability assessment and security plan and who is still assigned to the high-risk tier shall also submit to the Secretary an evaluation of the adequacy of the vulnerability assessment and security plan that includes a description of any material changes made to the vulnerability assessment or security plan.
(k) Shared facilities
The Secretary may permit under this section the development and implementation of coordinated vulnerability assessments and security plans to the extent that an over-the-road bus operator shares facilities with, or is colocated with, other transportation entities or providers that are required to develop vulnerability assessments and security plans under Federal law.
(l) Nondisclosure of information
(1) Submission of information to Congress
Nothing in this section shall be construed as authorizing the withholding of any information from Congress.