Sec. 1547. National cyber exercise program

785 words·~4 min read·/bill/117/s/1605/eah/section-1547

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

Subtitle A of title XXII of the Homeland Security Act of 2002 ( 6 U.S.C. 651 et seq. ) is amended by adding at the end the following new section: There is established in the Agency the National Cyber Exercise Program (referred to in this section as the Exercise Program ) to evaluate the National Cyber Incident Response Plan, and other related plans and strategies. The Exercise Program shall be— based on current risk assessments, including credible threats, vulnerabilities, and consequences; designed, to the extent practicable, to simulate the partial or complete incapacitation of a government or critical infrastructure network resulting from a cyber incident; designed to provide for the systematic evaluation of cyber readiness and enhance operational understanding of the cyber incident response system and relevant information sharing agreements; and designed to promptly develop after-action reports and plans that can quickly incorporate lessons learned into future operations.

The Exercise Program shall— include a selection of model exercises that government and private entities can readily adapt for use; and aid such governments and private entities with the design, implementation, and evaluation of exercises that— conform to the requirements described in subparagraph (A); are consistent with any applicable national, State, local, or Tribal strategy or plan; and provide for systematic evaluation of readiness. In carrying out the Exercise Program, the Director may consult with appropriate representatives from Sector Risk Management Agencies, the Office of the National Cyber Director, cybersecurity research stakeholders, and Sector Coordinating Councils.

In this section: The term State means any State of the United States, the District of Columbia, the Commonwealth of Puerto Rico, the Northern Mariana Islands, the United States Virgin Islands, Guam, American Samoa, and any other territory or possession of the United States. The term private entity has the meaning given such term in section 102 of the Cybersecurity Information Sharing Act of 2015 ( 6 U.S.C. 1501 ). Nothing in this section shall be construed to affect the authorities or responsibilities of the Administrator of the Federal Emergency Management Agency pursuant to section 648 of the Post-Katrina Emergency Management Reform Act of 2006 ( 6 U.S.C. 748 ). .

Subtitle A of title XXII of the Homeland Security Act of 2002 ( 6 U.S.C. 651 et seq. ) is amended— in section 2202(c) ( 6 U.S.C. 652(c) )— in paragraph (11), by striking and after the semicolon; in the first paragraph

(12)(relating to appointment of a Cybersecurity State Coordinator) by striking as described in section 2215; and and inserting as described in section 2217; ; by redesignating the second paragraph

(12)(relating to the .gov internet domain) as paragraph (13); and by redesignating the third paragraph

(12)(relating to carrying out such other duties and responsibilities) as paragraph (14); in the first section 2215 ( 6 U.S.C. 665 ; relating to the duties and authorities relating to .gov internet domain), by amending the section enumerator and heading to read as follows: ; in the second section 2215 ( 6 U.S.C. 665b ; relating to the joint cyber planning office), by amending the section enumerator and heading to read as follows: ; in the third section 2215 ( 6 U.S.C. 665c ; relating to the Cybersecurity State Coordinator), by amending the section enumerator and heading to read as follows: ; in the fourth section 2215 ( 6 U.S.C. 665d ; relating to Sector Risk Management Agencies), by amending the section enumerator and heading to read as follows: ; in section 2216 ( 6 U.S.C. 665e ; relating to the Cybersecurity Advisory Committee), by amending the section enumerator and heading to read as follows: ; in section 2217 ( 6 U.S.C. 665f ; relating to Cybersecurity Education and Training Programs), by amending the section enumerator and heading to read as follows: ; and in section 2218 ( 6 U.S.C. 665g ; relating to the State and Local Cybersecurity Grant Program), by amending the section enumerator and heading to read as follows: . Paragraph

(1)of section 904(b) of division U of the Consolidated Appropriations Act, 2021 ( Public Law 116–260 ) is amended, in the matter preceding subparagraph (A), by inserting of 2002 after Homeland Security Act . The table of contents in section 1(b) of the Homeland Security Act of 2002 is further amended by striking the items relating to sections 2214 through 2218 and inserting the following new items: Sec. 2214. National Asset Database. Sec. 2215. Duties and authorities relating to .gov internet domain. Sec. 2216. Joint cyber planning office. Sec. 2217. Cybersecurity State Coordinator. Sec. 2218. Sector Risk Management Agencies. Sec. 2219. Cybersecurity Advisory Committee. Sec. 2220. Cybersecurity Education and Training Programs. Sec. 2220A. State and Local Cybersecurity Grant Program. Sec. 2220B. National cyber exercise program. .

Connectionstraces to 12

Traces to 12 documents

U.S. Code