1. Short title This Act may be cited as the Cyber Sense Act of 2018 . 2. Cyber Sense (a) In general The Secretary of Energy shall establish a voluntary Cyber Sense program to identify and promote cyber-secure products intended for use in the bulk-power system, as defined in section 215(a) of the Federal Power Act ( 16 U.S.C. 824o(a) ). (b) Program requirements In carrying out subsection (a), the Secretary of Energy shall— (1) establish a Cyber Sense testing process to identify products and technologies intended for use in the bulk-power system that are cyber-secure, including products relating to industrial control systems, such as supervisory control and data acquisition systems; (2) for products tested and identified as cyber-secure under the Cyber Sense program, establish and maintain cybersecurity vulnerability reporting processes and a related database; (3) provide technical assistance to electric utilities, product manufacturers, and other electricity sector stakeholders to develop solutions to mitigate identified cybersecurity vulnerabilities in products tested and identified as cyber-secure under the Cyber Sense program; (4) biennially review products tested and identified as cyber-secure under the Cyber Sense program for cybersecurity vulnerabilities and provide analysis with respect to how such products respond to and mitigate cyber threats; (5) develop procurement guidance for electric utilities for products tested and identified as cyber-secure under the Cyber Sense program; (6) provide reasonable notice to the public, and solicit comments from the public, prior to establishing or revising the Cyber Sense testing process; (7) establish procedures for disqualifying products that were tested and identified as cyber-secure under the Cyber Sense program but that no longer meet the qualifications to be identified cyber-secure products under such program; (8) oversee Cyber Sense testing carried out by third parties