Sec. 2. Definitions
395 words·~2 min read·
/bill/118/s/4630/rs/section-2·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
In this Act: The term agency has the meaning given that term in section 551 of title 5, United States Code. The term appropriate congressional committees means— the Committee on Homeland Security and Governmental Affairs of the Senate; the Committee on Oversight and Accountability of the House of Representatives; each committee of Congress with jurisdiction over the activities of a regulatory agency; and each committee of Congress with jurisdiction over the activities of a Sector Risk Management Agency with respect to a sector regulated by a regulatory agency.
The term Committee means the Harmonization Committee established under section 3(a). The term cybersecurity requirement means an administrative, technical, or physical safeguard, requirement, or supervisory activity, including regulations, guidance, bulletins or examinations, relating to information security, information technology, cybersecurity, or cyber risk or resilience. The term harmonization means the process of aligning cybersecurity requirements issued by regulatory agencies such that the requirements consist of— a common set of minimum requirements that apply across sectors and that can be updated periodically to address new or evolving risks relating to information security or cybersecurity; and sector-specific requirements that— are necessary to address sector-specific risks that are not adequately addressed by the minimum requirements in clause (i); and are substantially similar, where appropriate, to other requirements in that sector or a similar sector.
Nothing in this definition shall be construed to exempt regulatory agencies from any otherwise applicable processes or laws relating to updating regulations, including subchapter II of chapter 5, and chapter 7, of title 5, United States Code (commonly known as the Administrative Procedure Act ). The term independent regulatory agency has the meaning given that term in section 3502 of title 44, United States Code. The term reciprocity means the recognition or acceptance by 1 regulatory agency of an assessment, determination, examination, finding, or conclusion of another regulatory agency for determining that a regulated entity has complied with a cybersecurity requirement.
The term regulatory agency means— any independent regulatory agency that has the statutory authority to issue or enforce any mandatory cybersecurity requirement; or any other agency that has the statutory authority to issue or enforce any cybersecurity requirement. The term regulatory framework means the framework developed under section 3(e)(1). The term Sector Risk Management Agency has the meaning given that term in section 2200 of the Homeland Security Act of 2002 ( 6 U.S.C. 650 ).
Connectionstraces to 1
Traces to 1 document
U.S. Code