HR7305-119

What This Bill Does

The Energy Threat Analysis Center Act of 2026 amends the Energy Sector Operational Support for Cyberresilience Program in the Infrastructure Investment and Jobs Act. It adds a purpose to strengthen the collective defense, response, and resilience of the U.S. energy sector by enhancing collaboration between government and the energy sector to analyze threats and deny, disrupt, and mitigate operational impacts to energy systems.

The bill directs the program to exchange information at classified and unclassified levels, collectively analyze potential and realized threats, and provide mitigation recommendations that benefit the broader energy sector. It also calls for technical infrastructure to house, access, and perform advanced analytics and experimentation, enabling analysis, discovery, alerts, collaboration activities, and sharing of actionable insights from intelligence-driven and intelligence-informed technical data, knowledge, and threat information. The program must advance understanding of national-security risks and vulnerabilities that adversaries could exploit and increase energy-sector understanding of threat actor tactics, techniques, procedures, indicators of compromise, capabilities, and activities.

Who Benefits and How

Electric utilities benefit from classified and unclassified threat information, analytics, alerts, and mitigation recommendations. Pipeline operators benefit from operational collaboration focused on adversary tactics and energy-system impacts. Natural gas operators benefit from shared intelligence and technical data on cyber and physical threats. DOE cybersecurity staff benefit from a clearer statutory mission for an energy threat analysis center function. Energy-sector information-sharing organizations benefit from infrastructure for analysis, discovery, alerts, and collaboration. Energy consumers benefit if better threat analysis reduces disruption risk.

Who Bears the Burden and How

DOE Office of Cybersecurity Energy Security and Emergency Response staff must build or administer technical infrastructure for analytics, experimentation, alerts, and collaboration. Energy companies sharing operational data must manage classified and unclassified information-handling requirements. Utility cybersecurity teams must absorb recommendations and act on threat indicators. Federal intelligence partners must support intelligence-informed technical analysis. Energy-sector operators may face more requests to share data on vulnerabilities, incidents, and mitigation actions.

Key Provisions

• Expands the Energy Sector Operational Support for Cyberresilience Program to strengthen collective energy-sector defense, response, and resilience.
• Requires classified and unclassified information exchange between government and the energy sector.
• Requires collective analysis of potential and realized threats and recommendations to mitigate them.
• Provides for technical infrastructure for advanced analytics, experimentation, discovery, alerts, and collaboration.
• Requires sharing actionable insights from intelligence-driven and intelligence-informed technical data.
• Requires analysis of national-security risks, vulnerabilities, tactics, techniques, procedures, indicators of compromise, capabilities, and adversary activities.