National cybersecurity and communications integration center
Definitions
In this section—
the term “cybersecurity risk” means threats to and vulnerabilities of information or information systems and any related consequences caused by or resulting from unauthorized access, use, disclosure, degradation, disruption, modification, or destruction of information or information systems, including such related consequences caused by an act of terrorism;
the term “incident” means an occurrence that—
actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information on an information system; or
constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies;
the term “information sharing and analysis organization” has the meaning given that term in section 131(5) of this title; and
the term “information system” has the meaning given that term in section 3502(8) of title 44.
Center
Functions
The cybersecurity functions of the Center shall include—
being a Federal civilian interface for the multi-directional and cross-sector sharing of information related to cybersecurity risks, incidents, analysis, and warnings for Federal and non-Federal entities;
providing shared situational awareness to enable real-time, integrated, and operational actions across the Federal Government and non-Federal entities to address cybersecurity risks and incidents to Federal and non-Federal entities;
coordinating the sharing of information related to cybersecurity risks and incidents across the Federal Government;
facilitating cross-sector coordination to address cybersecurity risks and incidents, including cybersecurity risks and incidents that may be related or could have consequential impacts across multiple sectors;
conducting integration and analysis, including cross-sector integration and analysis, of cybersecurity risks and incidents; and
sharing the analysis conducted under subparagraph (A) with Federal and non-Federal entities;
upon request, providing timely technical assistance, risk management support, and incident response capabilities to Federal and non-Federal entities with respect to cybersecurity risks and incidents, which may include attribution, mitigation, and remediation; and
providing information and recommendations on security and resilience measures to Federal and non-Federal entities, including information and recommendations to—
facilitate information security; and
strengthen information systems against cybersecurity risks and incidents.
Composition
In general
The Center shall be composed of—
appropriate representatives of Federal entities, such as—
sector-specific agencies;
civilian and law enforcement agencies; and
elements of the intelligence community, as that term is defined under section 3003(4) of title 50;
appropriate representatives of non-Federal entities, such as—
State and local governments;
information sharing and analysis organizations; and
owners and operators of critical information systems;
components within the Center that carry out cybersecurity and communications activities;
a designated Federal official for operational coordination with and across each sector; and
other appropriate representatives or entities, as determined by the Secretary.
Incidents
Principles
In carrying out the functions under subsection (c), the Center shall ensure—
to the extent practicable, that—
timely, actionable, and relevant information related to cybersecurity risks, incidents, and analysis is shared;
when appropriate, information related to cybersecurity risks, incidents, and analysis is integrated with other relevant information and tailored to the specific characteristics of a sector;
activities are prioritized and conducted based on the level of risk;
industry sector-specific, academic, and national laboratory expertise is sought and receives appropriate consideration;
continuous, collaborative, and inclusive coordination occurs—
across sectors; and
with—
sector coordinating councils;
information sharing and analysis organizations; and
other appropriate non-Federal partners;
as appropriate, the Center works to develop and use mechanisms for sharing information related to cybersecurity risks and incidents that are technology-neutral, interoperable, real-time, cost-effective, and resilient; and
the Center works with other agencies to reduce unnecessarily duplicative sharing of information related to cybersecurity risks and incidents;
that information related to cybersecurity risks and incidents is appropriately safeguarded against unauthorized access; and
that activities conducted by the Center comply with all policies, regulations, and laws that protect the privacy and civil liberties of United States persons.
No right or benefit
In general
Certain assistance or information
Source
(Pub. L. 107–296, title II, § 226, as added Pub. L. 113–282, § 3(a),Notes
Codification
Rules of Construction
Prohibition on New Regulatory Authority.—
Nothing in this Act [see section 1 of Pub. L. 113–282, set out as a Short Title of 2014 Amendment note under section 101 of this title] or the amendments made by this Act shall be construed to grant the Secretary [of Homeland Security] any authority to promulgate regulations or set standards relating to the cybersecurity of private sector critical infrastructure that was not in effect on the day before the date of enactment of this Act [
Private Entities.—
Nothing in this Act or the amendments made by this Act shall be construed to require any private entity—
to request assistance from the Secretary; or
that requested such assistance from the Secretary to implement any measure or recommendation suggested by the Secretary.”
Definitions
the term ‘Center’ means the national cybersecurity and communications integration center under section 226 of the Homeland Security Act of 2002 [6 U.S.C. 148], as added by section 3;
the term ‘critical infrastructure’ has the meaning given that term in section 2 of the Homeland Security Act of 2002 (6 U.S.C. 101);
the term ‘cybersecurity risk’ has the meaning given that term in section 226 of the Homeland Security Act of 2002, as added by section 3;
the term ‘information sharing and analysis organization’ has the meaning given that term in section 212(5) of the Homeland Security Act of 2002 (6 U.S.C. 131(5));
the term ‘information system’ has the meaning given that term in section 3502(8) of title 44, United States Code; and
the term ‘Secretary’ means the Secretary of Homeland Security.”