; and (B) a process for taking preventive and corrective action to mitigate against vulnerabilities in a highly automated vehicle or a vehicle that performs partial driving automation, including incident response plans, intrusion detection and prevention systems that safeguard key controls, systems, and procedures through testing or monitoring, and updates to such process based on changed circumstances. (2) The identification of an officer or other individual of the manufacturer as the point of contact with responsibility for the management of cybersecurity. (3) A process for limiting access to automated driving systems. (4) A process for employee training and supervision for implementation and maintenance of the policies and procedures required by this section, including controls on employee access to automated driving systems. (b) Effective date This section shall take effect 180 days after the date of enactment of this section. . (b) Enforcement authority Section 30165(a)(1) of title 49, United States Code, is amended by inserting 30130, after 30127, . (c) Clerical amendment The analysis for chapter 301 of subtitle VI of title 49, United States Code, is amended by inserting after the item relating to section 30129 (as added by section 4) the following new item: 30130. Cybersecurity of automated driving systems. . (d) Definitions Section 30102 of title 49, United States Code, is amended— (1) in subsection (a)— (A) by redesignating paragraphs (1) through (13) as paragraphs (2), (3), (4), (5), (8), (9), (10), (11), (12), (13), (15), (16), and (17), respectively; (B) by inserting before paragraph (2) (as so redesignated) the following: (1) automated driving system means the hardware and software that are collectively capable of performing the entire dynamic driving task on a sustained basis, regardless of whether such system is limited to a specific operational design domain.