1. Short title This Act may be cited as the Securing Energy Infrastructure Act . 2. Definitions In this Act: (1) Covered entity The term covered entity means an entity identified pursuant to section 9(a) of Executive Order 13636 of February 12, 2013 (78 Fed. Reg. 11742) relating to identification of critical infrastructure where a cybersecurity incident could reasonably result in catastrophic regional or national effects on public health or safety, economic security, or national security. (2) Exploit The term exploit means a software tool designed to take advantage of a security vulnerability. (3) Industrial control system (A) In general The term industrial control system means an operational technology used to measure, control, or manage industrial functions. (B) Inclusions The term industrial control system includes supervisory control and data acquisition systems, distributed control systems, and programmable logic or embedded controllers. (4) National Laboratory The term National Laboratory has the meaning given the term in section 2 of the Energy Policy Act of 2005 ( 42 U.S.C. 15801 ). (5) Program The term Program means the pilot program established under section 3. (6) Secretary The term Secretary means the Secretary of Energy. (7) Security vulnerability The term security vulnerability means any attribute of hardware, software, process, or procedure that could enable or facilitate the defeat of a security control. 3. Pilot program for securing energy infrastructure Not later than 180 days after the date of enactment of this Act, the Secretary shall establish a 2-year control systems implementation pilot program within the National Laboratories for the purposes of— (1) partnering with covered entities in the energy sector (including critical component manufacturers in the supply chain) that voluntarily participate in the Program to identify new classes of security vulnerabilities of the covered entities