Sector risk management agencies
Definitions
In this section:
Appropriate congressional committees
The term “appropriate congressional committees” means—
the Committee on Homeland Security and the Committee on Armed Services in the House of Representatives; and
the Committee on Homeland Security and Governmental Affairs and the Committee on Armed Services in the Senate.
Critical infrastructure
Department
Director
Information sharing and analysis organization
Secretary
Sector risk management agency
Critical infrastructure sector designation
Initial review
Not later than 180 days after
review the current framework for securing critical infrastructure, as described in section 652(c)(4) of this title and Presidential Policy Directive 21; and
submit to the President and appropriate congressional committees a report that includes—
information relating to—
the analysis framework or methodology used to—
evaluate the current framework for securing critical infrastructure referred to in subparagraph (A); and
develop recommendations to—
revise the current list of critical infrastructure sectors designated pursuant to Presidential Policy Directive 21, any successor or related document, or policy; or
identify and designate any subsectors of such sectors;
the data, metrics, and other information used to develop the recommendations required under clause (ii); and
recommendations relating to—
revising—
the current framework for securing critical infrastructure referred to in subparagraph (A);
the current list of critical infrastructure sectors designated pursuant to Presidential Policy Directive 21, any successor or related document, or policy; or
the identification and designation of any subsectors of such sectors; and
any revisions to the list of designated Federal departments or agencies that serve as the Sector Risk Management Agency for a sector or subsector of such section, necessary to comply with paragraph (3)(B).
Periodic evaluation by the Secretary
At least once every five years, the Secretary, in consultation with the Director and the heads of Sector Risk Management Agencies, shall—
evaluate the current list of designated critical infrastructure sectors and subsectors of such sectors and the appropriateness of Sector Risk Management Agency designations, as set forth in Presidential Policy Directive 21, any successor or related document, or policy; and
recommend, as appropriate, to the President—
revisions to the current list of designated critical infrastructure sectors or subsectors of such sectors; and
revisions to the designation of any Federal department or agency designated as the Sector Risk Management Agency for a sector or subsector of such sector.
Review and revision by the President
Not later than 180 days after the Secretary submits a recommendation pursuant to paragraph (1) or (2), the President shall—
review the recommendation and revise, as appropriate, the designation of a critical infrastructure sector or subsector or the designation of a Sector Risk Management Agency; and
submit to the appropriate congressional committees, the Majority and Minority Leaders of the Senate, and the Speaker and Minority Leader of the House of Representatives, a report that includes—
an explanation with respect to the basis for accepting or rejecting the recommendations of the Secretary; and
information relating to the analysis framework, methodology, metrics, and data used to—
evaluate the current framework for securing critical infrastructure referred to in paragraph (1)(A); and
develop—
recommendations to revise—
the list of critical infrastructure sectors designated pursuant to Presidential Policy Directive 21, any successor or related document, or policy; or
the designation of any subsectors of such sectors; and
the recommendations of the Secretary.