A parliamentary energy committee has voted down, at first reading, a bill that would require oil-related critical infrastructure sites to guard against cyber attacks. Bozhidar Bozhanov and a group of MPs brought the bill.

The bill would amend the law on the administrative regulation of economic activities linked to oil and oil products. It covers energy-sector sites that produce, process, store and transport oil, and their equipment.

Under the bill, the sites would have to draw up a detailed list of the software, hardware, information systems and industrial control systems they use. If they plan to bring into use systems with critical components that are not connected to the internet, they would have to tell the State Agency for National Security (DANS) three months beforehand. DANS would check the sites every six months.