This legislation mandates that the Director of the Cybersecurity and Infrastructure Security Agency (CISA) update the sector-specific plans for all 16 critical infrastructure sectors within one year of the bill's enactment. These updates are crucial for enhancing the resilience and security of vital national assets. The bill emphasizes the need to address evolving threats by incorporating new risk management practices into each sector's plan. A primary focus of these updated plans is to address risks exacerbated or facilitated by disruptive technologies , including artificial intelligence (AI), cloud-based architecture, robotics, and advanced social engineering techniques. The plans must specifically cover malicious activity targeting AI systems, AI-leveraged cyber campaigns, and vulnerabilities in digital assets, particularly cryptographic risks from quantum computing for the Financial Services Sector. The Director is required to coordinate closely with relevant Sector Risk Management Agencies throughout this updating process. Upon completion of the updates, the Director must provide copies of the revised sector-specific plans to various Congressional committees , ensuring legislative oversight. Additionally, the bill establishes a requirement for a biennial reassessment and revision of these plans, with subsequent notifications to Congress, to ensure they remain current and effective against emerging threats.