S. 5360 · 119th Congress
Rural and Municipal Utility Cybersecurity Act
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Not yet voted on. This bill is still a proposal: it hasn't reached a floor vote, and its text can change in committee or on the floor before any vote.
R
McCormickSponsor5 cosponsors · 2 D, 3 R
4 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
This bill reauthorizes through FY2031 a program that provides cybersecurity-related assistance and funding to rural electric cooperatives and municipal or small, investor-owned electric utilities. The bill also revises methods of awarding support and expands protections for information shared under the program.
What it does: CRS summary · Introduced in Senate · Aug 7, 2026
Rural and Municipal Utility Cybersecurity Act
This bill reauthorizes through FY2031 a program that provides cybersecurity-related assistance and funding to rural electric cooperatives and municipal or small, investor-owned electric utilities. The bill also revises methods of awarding support and expands protections for information shared under the program.
This program, known as the Rural and Municipal Advanced Cybersecurity Grant and Technical Assistance Program, is administered by the Department of Energy (DOE). Current law requires DOE to provide technical assistance and funding under the program on a competitive basis; under the bill, assistance and funding may be provided on a competitive or noncompetitive basis.
Current law also requires DOE to prioritize providing technical assistance and funding to certain entities, including entities that own defense critical electric infrastructure. The bill specifies that DOE must also prioritize entities that operate such infrastructure. (Defense critical electric infrastructure is electric infrastructure that (1) is located in the contiguous United States, and (2) serves a designated critical defense facility but is not owned or operated by the owner or operator of the critical facility.)
Finally, the bill expands an existing protection against disclosure to cover all information shared under the program by or with the federal government or a state, tribal, or local government. This provision protects against disclosure under the Freedom of Information Act and other state, tribal, or local disclosure laws.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Rural and Municipal Utility Cybersecurity Act
Latest action (Sep 30, 2026): Committee on Energy and Natural Resources. Ordered to be reported without amendment favorably.
Policy area: Science, Technology, Communications · Origin: Senate · Introduced: Aug 7, 2026
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.