Policy vets: Mandatory cyber-risk plans, other steps could ensure security is addressed in infrastructure improvement bill

Requiring operators in key sectors to develop cyber risk-reduction plans is one way that Congress could fold security into a massive infrastructure improvement package, as policy veterans begin looking for options to address cyber in upcoming legislation that will focus extensively on transportation and telecom systems.

President Biden last week unveiled $2-trillion infrastructure proposal, “The American Jobs Plan,” with a heavy emphasis on upgrading and expanding transportation systems and broadband internet service, but without specific cybersecurity elements.

On transportation,...