Sec. 103. Information sharing by the Federal Government
469 words·~2 min read·
/bill/113/hr/1468/ih/section-103·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Consistent with the protection of intelligence sources and methods, and as otherwise determined appropriate, the Director of National Intelligence and the Secretary of Defense, in consultation with the heads of the appropriate Federal departments or agencies, shall develop and promulgate procedures to facilitate and promote— the immediate sharing, through the cybersecurity centers, of classified cyber threat information in the possession of the Federal Government with appropriately cleared representatives of any appropriate entity; and the declassification and immediate sharing, through the cybersecurity centers, with any entity or, if appropriate, public availability of cyber threat information in the possession of the Federal Government.
The procedures developed under paragraph
(1)shall ensure that each entity receiving classified cyber threat information pursuant to this section has acknowledged in writing the ongoing obligation to comply with all laws, Executive orders, and procedures concerning the appropriate handling, disclosure, or use of classified information. The heads of each department or agency containing a cybersecurity center shall jointly develop and promulgate procedures that ensure that, consistent with the provisions of this section, unclassified, including controlled unclassified, cyber threat information in the possession of the Federal Government— is shared, through the cybersecurity centers, in an immediate and adequate manner with appropriate entities; and if appropriate, is made publicly available. The procedures developed under this section shall incorporate, to the greatest extent possible, existing processes utilized by sector specific information sharing and analysis centers. In developing the procedures required under this section, the Director of National Intelligence and the heads of each department or agency containing a cybersecurity center shall coordinate with appropriate entities to ensure that protocols are implemented that will facilitate and promote the sharing of cyber threat information by the Federal Government. Consistent with section 102, a cybersecurity center shall— facilitate information sharing, interaction, and collaboration among and between cybersecurity centers and— other Federal entities; any entity; and international partners, in consultation with the Secretary of State; disseminate timely and actionable cybersecurity threat, vulnerability, mitigation, and warning information, including alerts, advisories, indicators, signatures, and mitigation and response measures, to improve the security and protection of information systems; and coordinate with other Federal entities, as appropriate, to integrate information from across the Federal Government to provide situational awareness of the cybersecurity posture of the United States. The heads of appropriate Federal departments and agencies shall ensure that cyber threat information in the possession of such Federal departments or agencies that relates to the prevention, investigation, or mitigation of threats to information security across the Federal Government is shared effectively with the cybersecurity centers. Not later than 60 days after the date of enactment of this Act, the Director of National Intelligence, in coordination with the appropriate head of a department or an agency containing a cybersecurity center, shall submit the procedures required by this section to Congress.