Sec. 315. Cybersecurity and Infrastructure Security Agency review
564 words·~3 min read·
/bill/116/hr/8309/ih/section-315A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
The Director of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security shall conduct a review of the ability of the Cybersecurity and Infrastructure Security Agency to carry out its mission requirements, as well as the recommendations detailed in the U.S. Cyberspace Solarium Commission’s Report regarding the Agency. The review conducted in accordance with subsection
(a)shall include the following elements: An assessment of how additional budget resources could be used by the Cybersecurity and Infrastructure Security Agency for projects and programs that— support the national risk management mission; support public and private-sector cybersecurity; promote public-private integration; and provide situational awareness of cybersecurity threats. A force structure assessment of the Cybersecurity and Infrastructure Security Agency, including— a determination of the appropriate size and composition of personnel to carry out the mission requirements of the Agency, as well as the recommendations detailed in the U.S. Cyberspace Solarium Commission’s Report regarding the Agency; as assessment of whether existing personnel are appropriately matched to the prioritization of threats in the cyber domain and risks to critical infrastructure; an assessment of whether the Agency has the appropriate personnel and resources to— perform risk assessments, threat hunting, and incident response to support both private and public cybersecurity; carry out its responsibilities related to the security of Federal information and Federal information systems (as such term is defined in section 3502 of title 44, United States Code); and carry out its critical infrastructure responsibilities, including national risk management; an assessment of whether current structure, personnel, and resources of regional field offices are sufficient to carry out Agency responsibilities and mission requirements; and an assessment of current Cybersecurity and Infrastructure Security Agency facilities, including a review of the suitability of such facilities to fully support current and projected mission requirements nationally and regionally, and recommendations regarding future facility requirements. Not later than one year after the date of the enactment of this Act, the Secretary of Homeland Security shall submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report detailing the result of the review conducted in accordance with subsection (a), including recommendations to address any identified gaps. Upon submission to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate of the report required under subsection (c), the Director of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security shall submit to the Administrator of the General Services Administration the results of the assessment required under subsection (b)(2)(E). The Administrator of the General Services Administration shall— conduct a review of Cybersecurity and Infrastructure Security Agency assessment required under subsection (b)(2)(E); and make recommendations regarding resources needed to procure or build a new facility or augment existing facilities to ensure sufficient size and accommodations to fully support current and projected mission requirements, including the integration of personnel from the private sector and other Federal departments and agencies. Not later than 30 days after receipt of the assessment in accordance with paragraph (1), the Administrator of the General Services Administration shall submit to the President, the Secretary of Homeland Security, the Committee on Homeland Security and Governmental Affairs of the Senate, and the Committee on Homeland Security of the House of Representatives the review required under paragraph (2).