Arkansas Legal Resource Navigator

6 U.S.C. § 1509 — Exception to limitation on authority of Secretary of Defense to disseminate certain information

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 1509 — Exception to limitation on authority of Secretary of Defense to disseminate certain information

Notwithstanding subsection (c)(3) of [section 393 of title 10](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title10-section393&num=0&edition=prelim), the Secretary of Defense may authorize the sharing of cyber threat indicators and defensive measures pursuant to the policies, procedures, and guidelines developed or issued under this subchapter.

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 1509

Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.

Original supplied file — preserved unchanged

Download original Markdown file

File SHA-256: da12e2c7024d83da40b25a57c443b4db496ecf67687d0ee5fc35f852d28170bb. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.

Authority boundary: historical or unconfirmed source not current law verified.

Open the recorded source website ↗

Record provenance

Stable record: federal_law:legal_authorities:record_usc_02ea55682ee05a633281a77d
Source file: Laws/federal/codes/united-states-code/title-6/section-1509-exception-to-limitation-on-authority-of-secretary-of-defense-to-dissemin--630620847e.md
Pages: Not recorded – Not recorded
Passage SHA-256: 253ca01347b6a0fe831f40828cd9be15d14bac9345b529a8ba5c287b59a6100e

Source location: Title 6, Chapter 6, § 1509; chapter-006-cybersecurity.md

Stored source content

Notwithstanding subsection (c)(3) of [section 393 of title 10](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title10-section393&num=0&edition=prelim), the Secretary of Defense may authorize the sharing of cyber threat indicators and defensive measures pursuant to the policies, procedures, and guidelines developed or issued under this subchapter.

Cross-references

Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.

Federal law — U.S. Code and appendices · legal_authorities

10 U.S.C. § 393 — Reporting on penetrations of networks and information systems of certain contractors

**(a) Procedures for Reporting Penetrations.—** The Secretary of Defense shall establish procedures that require each cleared defense contractor to report to a component of the Department of Defense designated by the Secretary for purposes of such procedures when a network or information system of such contractor that meets the criteria established pursuant to subsection (b) is successfully penetrated. **(b) Networks and Information Systems Subject to Reporting.—** (1) **Criteria.—** — The Secretary of Defense shall designate a senior official to, in consultation with the officials specified in paragraph (2), establish criteria for covered networks to be subject to the procedures for reporting system penetrations under subsection (a). (2) **Officials.—** — The officials specified in this subsection are the following: (A) The Under Secretary of Defense for Policy. (B) The Under Secretary of Defense for Acquisition and Sustainment. (C) the Under Secretary of Defense for Research and Engineering. (D) The Under Secretary of Defense for Intelligence and Security. (E) The Chief Information Officer of the Department of Defense. (F) The Commander of the United States Cyber Command. **(c) Procedure Requirements.—** (1) **Rapid reporting.—** — The procedures established pursuant to subsection (a) shall require each cleared defense contractor to rapidly report to a component of the Department of Defense designated pursuant to subsection (a) of each successful penetration of the network or information systems of such contractor that meet the criteria established pursuant to subsection (b). Each such report shall include the following: (A) A description of the technique or method used in such penetration. (B) A sample of the malicious software, if discov

Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 393

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 1509 — Exception to limitation on authority of

Page 510 TITLE 6—DOMESTIC SECURITY § 1508 (2) to establish or limit any regulatory au- thority not specifically established or limited under this subchapter; or (3) to authorize regulatory actions that would duplicate or conflict with regulatory re- quirements, mandatory standards, or related processes under another provision of Federal law. (m) Authority of Secretary of Defense to respond to malicious cyber activity carried out by foreign powers Nothing in this subchapter shall be construed to limit the authority of the Secretary of De- fense under section 394 of title 10. (n) Criminal prosecution Nothing in this subchapter shall be construed to prevent the disclosure of a cyber threat indi- cator or defensive measure shared under this subchapter in a case of criminal prosecution, when an applicable provision of Federal, State, tribal, or local law requires disclosure in such case. (Pub. L. 114–113, div. N, title I, § 108, Dec. 18, 2015, 129 Stat. 2953; Pub. L. 115–232, div. A, title XVI, § 1631(b), Aug. 13, 2018, 132 Stat. 2123.) Editorial Notes AMENDMENTS 2018—Subsec. (m). Pub. L. 115–232 substituted ‘‘section 394’’ for ‘‘section 130g’’. § 1508. Report on cybersecurity threats (a) Report required Not later than 180 days after December 18, 2015, the Director of National Intelligence, in co- ordination with the heads of other appropriate elements of the intelligence community, shall submit to the Select Committee on Intelligence of the Senate and the Permanent Select Com- mittee on Intelligence of the House of Rep- resentatives a report on cybersecurity threats, including cyber attacks, theft, and data breaches. (b) Contents The report required by subsection (a) shall in- clude the following: (1) An assessment of the current inte

Source: Supplied 2024 U.S. Code historical extraction · 6 U.S.C. § 1509

Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.