Sec. 1549. Strategic assessment relating to innovation of information systems and cybersecurity threats

485 words·~2 min read·/bill/117/s/1605/eah/section-1549

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

Section 2202(c)(3) of the Homeland Security Act of 2002 ( 6 U.S.C. 652 ) is amended by striking the semicolon at the end and adding the following: , including by carrying out a periodic strategic assessment of the related programs and activities of the Agency to ensure such programs and activities contemplate the innovation of information systems and changes in cybersecurity risks and cybersecurity threats; Not later than 240 days after the date of the enactment of this Act and not fewer than once every three years thereafter, the Director of the Cybersecurity and Infrastructure Security Agency shall submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a strategic assessment for the purposes described in paragraph (2).

The purposes described in this paragraph are the following: A description of the existing programs and activities administered in furtherance of section 2202(c)(3) of the Homeland Security Act of 2002 ( 6 U.S.C. 652 ). An assessment of the capability of existing programs and activities administered by the Agency in furtherance of such section to monitor for, manage, mitigate, and defend against cybersecurity risks and cybersecurity threats. An assessment of past or anticipated technological trends or innovation of information systems or information technology that have the potential to affect the efficacy of the programs and activities administered by the Agency in furtherance of such section.

A description of any changes in the practices of the Federal workforce, such as increased telework, affect the efficacy of the programs and activities administered by the Agency in furtherance of section 2202(c)(3). A plan to integrate innovative security tools, technologies, protocols, activities, or programs to improve the programs and activities administered by the Agency in furtherance of such section. A description of any research and development activities necessary to enhance the programs and activities administered by the Agency in furtherance of such section.

A description of proposed changes to existing programs and activities administered by the Agency in furtherance of such section, including corresponding milestones for implementation. Information relating to any new resources or authorities necessary to improve the programs and activities administered by the Agency in furtherance of such section. In this section: The term Agency means the Cybersecurity and Infrastructure Security Agency. The term cybersecurity purpose has the meaning given such term in section 102(4) of the Cybersecurity Information Sharing Act of 2015 ( 6 U.S.C. 1501(4) ).

The term cybersecurity risk has the meaning given such term in section 2209(a)(2) of the Homeland Security Act of 2002 (U.S.C. 659(a)(2)). The term information system has the meaning given such term in section 3502(8) of title 44, United States Code. The term information technology has the meaning given such term in 3502(9) of title 44, United States Code. The term telework has the meaning given the term in section 6501(3) of title 5, United States Code.

Connections2 off-index

2 references not yet in our index

6 USC 652
6 USC 1501(4)

Citation graph

cites case law

Sec. 1549

Strategic assessment relating to innovation of information systems and cybersecurity threats

Cite6 USC 652

Cite6 USC 1501(4)

Cites 2Cited by 0 across 0 sources