H.R. 10671 — Securing Our Critical Infrastructure Act

This section establishes a security vulnerability warning program in the Cybersecurity and Infrastructure Security Agency for covered utilities. It automatically enrolls utilities serving not more than 100,000 individuals, eligible entities under 42 U.S.C. 18723, and operators of public water systems or treatment works in cyber hygiene services, provides incident response assistance, and coordinates with the EPA Administrator. The program terminates five years after enactment and exempts shared information from disclosure under FOIA and similar laws while requiring privacy protections for personal data.