S.Amdt. 1185

1. Adds SEC. 519. ASSISTANT SECRETARY FOR CYBERSECURITY on page 100, between lines 11 and 12

   Adds a sectionPrinted page

   Inserted: SEC. 519. ASSISTANT SECRETARY FOR CYBERSECURITY.

   Inserted: (a)(1) Subtitle A of title II of the Homeland Security Act of 2002 (6 U.S.C. 121 et seq.) is amended by adding at the end the following:

   Inserted: "SEC. 203. ASSISTANT SECRETARY FOR CYBERSECURITY.

   Inserted: "(a) In General.--There shall be in the Directorate for Information Analysis and Infrastructure Protection a National Cybersecurity Office headed by an Assistant Secretary for Cybersecurity (in this section referred to as the 'Assistant Secretary'), who shall assist the Secretary in promoting cybersecurity for the Nation.

   Inserted: "(b) General Authority.--The Assistant Secretary, subject to the direction and control of the Secretary, shall have primary authority within the Department for all cybersecurity-related critical infrastructure protection programs of the Department, including with respect to policy formulation and program management.

   Inserted: "(c) Responsibilities.--The responsibilities of the Assistant Secretary shall include the following:

   Inserted: "(1) To establish and manage--

   Inserted: "(A) a national cybersecurity response system that includes the ability to--

   Inserted: "(i) analyze the effect of cybersecurity threat information on national critical infrastructure; and

   Inserted: "(ii) aid in the detection and warning of attacks on, and in the restoration of, cybersecurity infrastructure in the aftermath of such attacks;

   Inserted: "(B) a national cybersecurity threat and vulnerability reduction program that identifies cybersecurity vulnerabilities that would have a national effect on critical infrastructure, performs vulnerability assessments on information technologies, and coordinates the mitigation of such vulnerabilities;

   Inserted: "(C) a national cybersecurity awareness and training program that promotes cybersecurity awareness among the public and the private sectors and promotes cybersecurity training and education programs;

   Show 21 more inserted paragraphsShow less

   Inserted: "(D) a government cybersecurity program to coordinate and consult with Federal, State, and local governments to enhance their cybersecurity programs; and

   Inserted: "(E) a national security and international cybersecurity cooperation program to help foster Federal efforts to enhance international cybersecurity awareness and cooperation.

   Inserted: "(2) To coordinate with the private sector on the programs under paragraph (1) as appropriate, and to promote cybersecurity information sharing, vulnerability assessment, and threat warning regarding critical infrastructure.

   Inserted: "(3) To coordinate with other directorates and offices within the Department on the cybersecurity aspects of their missions.

   Inserted: "(4) To coordinate with the Under Secretary for Emergency Preparedness and Response to ensure that the National Response Plan developed pursuant to section 502(6) of the Homeland Security Act of 2002 (6 U.S.C. 312(6)) includes appropriate measures for the recovery of the cybersecurity elements of critical infrastructure.

   Inserted: "(5) To develop processes for information sharing with the private sector, consistent with section 214, that--

   Inserted: "(A) promote voluntary cybersecurity best practices, standards, and benchmarks that are responsive to rapid technology changes and to the security needs of critical infrastructure; and

   Inserted: "(B) consider roles of Federal, State, local, and foreign governments and the private sector, including the insurance industry and auditors.

   Inserted: "(6) To coordinate with the Chief Information Officer of the Department in establishing a secure information sharing architecture and information sharing processes, including with respect to the Department's operation centers.

   Inserted: "(7) To consult with the Electronic Crimes Task Force of the United States Secret Service on private sector outreach and information activities.

   Inserted: "(8) To consult with the Office for Domestic Preparedness to ensure that realistic cybersecurity scenarios are incorporated into tabletop and recovery exercises.

   Inserted: "(9) To consult and coordinate, as appropriate, with other Federal agencies on cybersecurity-related programs, policies, and operations.

   Inserted: "(10) To consult and coordinate within the Department and, where appropriate, with other relevant Federal agencies, on security of digital control systems, such as Supervisory Control and Data Acquisition (SCADA) systems.

   Inserted: "(d) Authority Over the National Communications System.--The Assistant Secretary shall have primary authority within the Department over the National Communications System.".

   Inserted: (2) The table of contents in section 1(b) of such Act is amended by adding at the end of the items relating to subtitle A of title II the following:

   Inserted: "203. Assistant Secretary for Cybersecurity.".

   Inserted: (b) Section 2 of the Homeland Security Act of 2002 (6 U.S.C. 101) is amended by adding at the end the following:

   Inserted: "(17)(A) The term 'cybersecurity' means the prevention of damage to, the protection of, and the restoration of computers, electronic communications systems, electronic communication services, wire communication, and electronic communication, including information contained therein, to ensure its availability, integrity, authentication, confidentiality, and nonrepudiation.

   Inserted: "(B) In this paragraph--

   Inserted: "(i) each of the terms 'damage' and 'computer' has the meaning that term has in section 1030 of title 18, United States Code; and

   Inserted: "(ii) each of the terms 'electronic communications system', 'electronic communication service', 'wire communication', and 'electronic communication' has the meaning that term has in section 2510 of title 18, United States Code.".

   Original wording

   On page 100, between lines 11 and 12, add the following:

Read automatically from the Congressional Record. Check the original before relying on it.

As printed