1. Short title This Act may be cited as the Grid Cybersecurity Research and Development Act . 2. Findings Congress finds the following: (1) The Nation, and every other critical infrastructure sector, depends on reliable electricity. (2) Industrial control systems used in the electricity sector are essential to maintain reliable operations of the electric grid. (3) The cybersecurity threat landscape is constantly changing and attacker capabilities are advancing rapidly, requiring ongoing modifications, advancements, and investments in technologies and procedures to maintain security. (4) There are substantial and important differences between cybersecurity approaches needed to protect information technology systems and industrial control systems. (5) It is in the national interest for Federal agencies to invest in industrial control system cybersecurity research that facilitates private sector investment and the ability of the private sector to develop cybersecurity tools and products for control systems. (6) The number of elements connecting to the electric grid is increasing, and designing cybersecurity into communication, data, and control systems when they are built is more effective than modifying products after installation to meet cybersecurity goals. (7) An understanding of human factors can be leveraged to understand the behavior of cyber threat actors, develop strategies to counter threat actors, improve industrial control system cybersecurity training programs, optimize the design of human-machine interfaces and cybersecurity tools, and increase the capacity of the electrical sector workforce to prevent attacks from gaining entry to industrial control systems. 3. Definitions In this Act: (1) Critical electric infrastructure information The term critical electric infrastructure information has the meaning given that term in section 215A(a)(3) of the Federal Power Act ( 16 U.S.C. 824a–1(a)(3) ). (2) Cybersecurity The term cybersecurity means a set of preventative measures to protect information from a