(a) Public transportation security assessments

(1) Submission
Not later than 30 days after August 3, 2007, the Administrator of the Federal Transit Administration of the Department of Transportation shall submit all public transportation security assessments and all other relevant information to the Secretary.

(2) Secretarial review
Not later than 60 days after receiving the submission under paragraph (1), the Secretary shall review and augment the security assessments received, and conduct additional security assessments as necessary to ensure that at a minimum, all high risk public transportation agencies, as determined by the Secretary, will have a completed security assessment.

(3) Content
The Secretary shall ensure that each completed security assessment includes—

(A) identification of critical assets, infrastructure, and systems and their vulnerabilities; and

(B) identification of any other security weaknesses, including weaknesses in emergency response planning and employee training.

(b) Bus and rural public transportation systems
Not later than 180 days after August 3, 2007, the Secretary shall—

(1) conduct security assessments, based on a representative sample, to determine the specific needs of—

(A) local bus-only public transportation systems; and

(B) public transportation systems that receive funds under section 5311 of title 49; and

(2) make the representative assessments available for use by similarly situated systems.

(c) Security plans

(1) Requirement for plan

(A) High risk agencies
The Secretary shall require public transportation agencies determined by the Secretary to be at high risk for terrorism to develop a comprehensive security plan. The Secretary shall provide technical assistance and guidance to public transportation agencies in preparing and implementing security plans under this section.

(B) Other agencies
Provided that no public transportation agency that has not been designated high risk shall be required to develop a security plan, the Secretary may also establish a security program for public transportation agencies not designated high risk by the Secretary, to assist those public transportation agencies which request assistance, including—

(i) guidance to assist such agencies in conducting security assessments and preparing and implementing security plans; and

(ii) a process for the Secretary to review and approve such assessments and plans, as appropriate.

(2) Contents of plan
The Secretary shall ensure that security plans include, as appropriate—

(A) a prioritized list of all items included in the public transportation agency's security assessment that have not yet been addressed;

(B) a detailed list of any additional capital and operational improvements identified by the Department or the public transportation agency and a certification of the public transportation agency's technical capacity for operating and maintaining any security equipment that may be identified in such list;

(C) specific procedures to be implemented or used by the public transportation agency in response to a terrorist attack, including evacuation and passenger communication plans and appropriate evacuation and communication measures for the elderly and individuals with disabilities;

(D) a coordinated response plan that establishes procedures for appropriate interaction with State and local law enforcement agencies, emergency responders, and Federal officials in order to coordinate security measures and plans for response in the event of a terrorist attack or other major incident;

(E) a strategy and timeline for conducting training under section 1137 of this title;

(F) plans for providing redundant and other appropriate backup systems necessary to ensure the continued operation of critical elements of the public transportation system in the event of a terrorist attack or other major incident;

(G) plans for providing service capabilities throughout the system in the event of a terrorist attack or other major incident in the city or region which the public transportation system serves;

(H) methods to mitigate damage within a public transportation system in case of an attack on the system, including a plan for communication and coordination with emergency responders; and

(I) other actions or procedures as the Secretary determines are appropriate to address the security of the public transportation system.

(3) Review
Not later than 6 months after receiving the plans required under this section, the Secretary shall—

(A) review each security plan submitted;

(B) require the public transportation agency to make any amendments needed to ensure that the plan meets the requirements of this section; and

(C) approve any security plan that meets the requirements of this section.

(4) Exemption
The Secretary shall not require a public transportation agency to develop a security plan under paragraph (1) if the agency does not receive a grant under section 1135 of this title.

(5) Waiver
The Secretary may waive the exemption provided in paragraph (4) to require a public transportation agency to develop a security plan under paragraph (1) in the absence of grant funds under section 1135 of this title if not less than 3 days after making the determination the Secretary provides the appropriate congressional committees and the public transportation agency written notification detailing the need for the security plan, the reasons grant funding has not been made available, and the reason the agency has been designated high risk.

(d) Consistency with other plans
The Secretary shall ensure that the security plans developed by public transportation agencies under this section are consistent with the security assessments developed by the Department and the National Strategy for Public Transportation Security developed under section 1133 of this title.

(e) Updates
Not later than September 30, 2008, and annually thereafter, the Secretary shall—

(1) update the security assessments referred to in subsection (a);

(2) update the security improvement priorities required under subsection (f); and

(3) require public transportation agencies to update the security plans required under subsection (c) as appropriate.

(f) Security improvement priorities

(1) In general
Beginning in fiscal year 2008 and each fiscal year thereafter, the Secretary, after consultation with management and nonprofit employee labor organizations representing public transportation employees as appropriate, and with appropriate State and local officials, shall utilize the information developed or received in this section to establish security improvement priorities unique to each individual public transportation agency that has been assessed.

(2) Allocations
The Secretary shall use the security improvement priorities established in paragraph (1) as the basis for allocating risk-based grant funds under section 1135 of this title, unless the Secretary notifies the appropriate congressional committees that the Secretary has determined an adjustment is necessary to respond to an urgent threat or other significant national security factors.

(g) Shared facilities
The Secretary shall encourage the development and implementation of coordinated assessments and security plans to the extent a public transportation agency shares facilities (such as tunnels, bridges, stations, or platforms) with another public transportation agency, a freight or passenger railroad carrier, or over-the-road bus operator that are geographically close or otherwise co-located.

(h) Nondisclosure of information

(1) Submission of information to Congress
Nothing in this section shall be construed as authorizing the withholding of any information from Congress.

(2) Disclosure of independently furnished information
Nothing in this section shall be construed as affecting any authority or obligation of a Federal agency to disclose any record or information that the Federal agency obtains from a public transportation agency under any other Federal law.

(i) Determination
In response to a petition by a public transportation agency or at the discretion of the Secretary, the Secretary may recognize existing procedures, protocols, and standards of a public transportation agency that the Secretary determines meet all or part of the requirements of this section regarding security assessments or security plans.