Sec. 105. Report on implementation
403 words·~2 min read·
/bill/113/hr/1468/ih/section-105·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Not later than 1 year after the date of enactment of this Act, and biennially thereafter, the heads of each department or agency containing a cybersecurity center shall jointly submit, in coordination with the privacy and civil liberties officials of such departments or agencies and the Privacy and Civil Liberties Oversight Board, a detailed report to Congress concerning the implementation of this title, including— an assessment of the sufficiency of the procedures developed under section 103 of this Act in ensuring that cyber threat information in the possession of the Federal Government is provided in an immediate and adequate manner to appropriate entities or, if appropriate, is made publicly available; an assessment of whether information has been appropriately classified and an accounting of the number of security clearances authorized by the Federal Government for purposes of this title; a review of the type of cyber threat information shared with a cybersecurity center under section 102 of this Act, including whether such information meets the definition of cyber threat information under section 101, the degree to which such information may impact the privacy and civil liberties of individuals, any appropriate metrics to determine any impact of the sharing of such information with the Federal Government on privacy and civil liberties, and the adequacy of any steps taken to reduce such impact; a review of actions taken by the Federal Government based on information provided to a cybersecurity center under section 102 of this Act, including the appropriateness of any subsequent use under section 102(c)(1) of this Act and whether there was inappropriate stovepiping within the Federal Government of any such information; a description of any violations of the requirements of this title by the Federal Government; a classified list of entities that received classified information from the Federal Government under section 103 of this Act and a description of any indication that such information may not have been appropriately handled; a summary of any breach of information security, if known, attributable to a specific failure by any entity or the Federal Government to act on cyber threat information in the possession of such entity or the Federal Government that resulted in substantial economic harm or injury to a specific entity or the Federal Government; and any recommendation for improvements or modifications to the authorities under this title.
The report under subsection
(a)shall be submitted in unclassified form, but shall include a classified annex.