§ 661. Cybersecurity strategy

521 words·~2 min read·/usc/title-6/section-661

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

(a)In general Not later than 90 days after December 23, 2016, the Secretary shall develop a departmental strategy to carry out cybersecurity responsibilities as set forth in law.

(b)Contents The strategy required under subsection

(a)shall include the following:

(1)Strategic and operational goals and priorities to successfully execute the full range of the Secretary’s cybersecurity responsibilities.

(2)Information on the programs, policies, and activities that are required to successfully execute the full range of the Secretary’s cybersecurity responsibilities, including programs, policies, and activities in furtherance of the following:

(A)Cybersecurity functions set forth in section 659 of this title (relating to the national cybersecurity and communications integration center).

(B)Cybersecurity investigations capabilities.

(C)Cybersecurity research and development.

(D)Engagement with international cybersecurity partners.

(c)Considerations In developing the strategy required under subsection (a), the Secretary shall—

(1)consider—

(A)the cybersecurity strategy for the Homeland Security Enterprise published by the Secretary in November 2011;

(B)the Department of Homeland Security Fiscal Years 2014–2018 Strategic Plan; and

(C)the most recent Quadrennial Homeland Security Review issued pursuant to section 347 of this title; and

(2)include information on the roles and responsibilities of components and offices of the Department, to the extent practicable, to carry out such strategy.

(d)Implementation plan Not later than 90 days after the development of the strategy required under subsection (a), the Secretary shall issue an implementation plan for the strategy that includes the following:

(1)Strategic objectives and corresponding tasks.

(2)Projected timelines and costs for such tasks.

(3)Metrics to evaluate performance of such tasks.

(e)Congressional oversight The Secretary shall submit to Congress for assessment the following:

(1)A copy of the strategy required under subsection

(a)upon issuance.

(2)A copy of the implementation plan required under subsection

(d)upon issuance, together with detailed information on any associated legislative or budgetary proposals.

(f)Classified information The strategy required under subsection

(a)shall be in an unclassified form but may contain a classified annex.

(g)Rule of construction Nothing in this section may be construed as permitting the Department to engage in monitoring, surveillance, exfiltration, or other collection activities for the purpose of tracking an individual’s personally identifiable information.

(Pub. L. 107–296, title XXII, § 2211, formerly title II, § 228A, as added Pub. L. 114–328, div. A, title XIX, § 1912(a), Dec. 23, 2016, 130 Stat. 2683; renumbered title XXII, § 2211, and amended Pub. L. 115–278, § 2(g)(2)(I), (9)(A)(v), Nov. 16, 2018, 132 Stat. 4178, 4181; Pub. L. 117–263, div. G, title LXXI, § 7143(b)(2)(F), Dec. 23, 2022, 136 Stat. 3660.)

Connections18 cite this · traces to 5

Cited by 18 sections

public-private-law

U.S. Code

statutes-at-large

statute-compilations

bill

Traces to 5 documents

U.S. Code

public-private-law

6 references not yet in our index

Pub. L. 107–296, title XXII, § 2211
130 Stat. 2683
132 Stat. 4178
136 Stat. 3660
section 149a of this title
section 148 of this title

Citation graph

cites case law

§ 661

Cybersecurity strategy

Bills×9

Stat. Comp.×3

Pub. L.×2

Stat.×2

U.S.C.×2

U.S.C.§ 659

U.S.C.§ 347

Pub. L.Public Law 114-328

Pub. L.Public Law 115-278

Pub. L.Public Law 117-263

Pub. L.Pub. L. 107–296, title XXII, § 2211

Stat.130 Stat. 2683

Stat.132 Stat. 4178

Stat.136 Stat. 3660

Citesection 149a of this title

Cites 11 · showing 10Cited by 18 across 5 sources