121 STAT. 456
PUBLIC LAW 110–53—AUG. 3, 2007
dkrause on GSDDPC44 with PUBLAW
(2) require amendments to any security plan that does not meet the requirements of this section; and (3) approve any vulnerability assessment or security plan that meets the requirements of this section. (g) INTERIM SECURITY MEASURES.—The Secretary may require over-the-road bus operators, during the period before the deadline established under subsection (c), to submit a security plan to implement any necessary interim security measures essential to providing adequate security of the over-the-road bus operator’s system. An interim plan required under this subsection shall be superseded by a plan required under subsection (c). (h) TIER ASSIGNMENT.—The Secretary shall assign each overthe-road bus operator to a risk-based tier established by the Secretary: (1) PROVISION OF INFORMATION.—The Secretary may request, and an over-the-road bus operator shall provide, information necessary for the Secretary to assign an over-theroad bus operator to the appropriate tier under this subsection. (2) NOTIFICATION.—Not later than 60 days after the date an over-the-road bus operator is assigned to a tier under this section, the Secretary shall notify the operator of the tier to which it is assigned and the reasons for such assignment. (3) HIGH-RISK TIERS.—At least one of the tiers established by the Secretary under this section shall be a tier designated for high-risk over-the-road bus operators. (4) REASSIGNMENT.—The Secretary may reassign an overthe-road bus operator to another tier, as appropriate, in response to changes in risk and the Secretary shall notify the over-the-road bus operator within 60 days after such reassignment and provide the operator with the reasons for such reassignment. (i) EXISTING PROCEDURES, PROTOCOLS, AND STANDARDS.— (1) DETERMINATION.—In response to a petition by an overthe-road bus operator or at the discretion of the Secretary, the Secretary may determine that existing procedures, protocols, and standards meet all or part of the requirements of this section regarding vulnerability assessments and security plans. (2) ELECTION.—Upon review and written determination by the Secretary that existing procedures, protocols, or standards of an over-the-road bus operator satisfy the requirements of this section, the over-the-road bus operator may elect to comply with those procedures, protocols, or standards instead of the requirements of this section. (3) PARTIAL APPROVAL.—If the Secretary determines that the existing procedures, protocols, or standards of an overthe-road bus operator satisfy only part of the requirements of this section, the Secretary may accept such submission, but shall require submission by the operator of any additional information relevant to the vulnerability assessment and security plan of the operator to ensure that the remaining requirements of this section are fulfilled. (4) NOTIFICATION.—If the Secretary determines that particular existing procedures, protocols, or standards of an overthe-road bus operator under this subsection do not satisfy the requirements of this section, the Secretary shall provide to
VerDate Aug 31 2005
13:52 Jan 23, 2009
Jkt 059194
PO 00001
Frm 00454
Fmt 6580
Sfmt 6581
M:\STATUTES\2007\59194PT1.001
APPS10
PsN: 59194PT1
�
