Coast Guard Sector Risk Management Agency budget and capabilities review

(a) GAO review Not later than 270 days after the date of enactment of this Act, the Comptroller General of the United States shall conduct a review to assess the funding and resource needs of the Coast Guard to fulfill the SRMA responsibilities of the Coast Guard, including— (1) an evaluation of the sufficiency of Coast Guard funding for the sector risk management responsibilities, including funding for cybersecurity personnel, training, and enforcement, in light of statutory requirements under section 9002 of the National Defense Authorization Act for Fiscal Year 2021 and additional requirements in Presidential Policy Directive 21; (2) the ability of Coast Guard personnel to evaluate compliance with cybersecurity requirements for regulated entities; and (3) the sufficiency of guidance provided to industry stakeholders on implementing and complying with cyber regulations, assessed against applicable statutory requirements, Federal regulatory benchmarks, and widely recognized industry best practices for maritime cybersecurity. (b) Report The Comptroller General shall submit the findings and recommendations from the review required under subsection (a) to— (1) the Committee on Commerce, Science, and Transportation, the Committee on Appropriations, and the Committee on Homeland Security and Governmental Affairs of the Senate; and (2) the Committee on Transportation and Infrastructure, the Committee on Appropriations, and the Committee on Homeland Security of the House of Representatives.