Browse Arkansas Code titles and sections

6 U.S.C. § 1524 — Assessment; reports

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 1524 — Assessment; reports

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 1524

Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.

Original supplied file — preserved unchanged

Download original Markdown file

File SHA-256: b8cf1e8dd86bb40f351a3aaef7ece5fc62c954a5256a50eb2904a021a07e7e39. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.

Authority boundary: historical or unconfirmed source not current law verified.

Open the recorded source website ↗

Record provenance

Stable record: federal_law:legal_authorities:record_usc_75f90ca483c920e0280f9b00
Source file: Laws/federal/codes/united-states-code/title-6/section-1524-assessment-reports--8f438c8775.md
Pages: Not recorded – Not recorded
Passage SHA-256: bb0d034b49d8f6750cfdec58448d03ee3a31c32e5569181ba72318996226afba

Source location: Title 6, Chapter 6, § 1524; chapter-006-cybersecurity.md

Stored source content

**(a) Definitions** In this section: (1) **Agency information** — The term “agency information” has the meaning given the term in section 2213 of the Homeland Security Act of 2002 [[6 U.S.C. 663](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section663&num=0&edition=prelim)]. (2) **Cyber threat indicator; defensive measure** — The terms “cyber threat indicator” and “defensive measure” have the meanings given those terms in [section 650 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section650&num=0&edition=prelim). (3) **Intrusion assessments** — The term “intrusion assessments” means actions taken under the intrusion assessment plan to identify and remove intruders in agency information systems. (4) **Intrusion assessment plan** — The term “intrusion assessment plan” means the plan required under section 2210(b)(1) of the Homeland Security Act of 2002 [[6 U.S.C. 660(b)(1)](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section660/b/1&num=0&edition=prelim)]. (5) **Intrusion detection and prevention capabilities** — The term “intrusion detection and prevention capabilities” means the capabilities required under section 2213(b) of the Homeland Security Act of 2002 [[6 U.S.C. 663(b)](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section663/b&num=0&edition=prelim)]. **(b) Third-party assessment** Not later than 3 years after December 18, 2015, the Comptroller General of the United States shall conduct a study and publish a report on the effectiveness of the approach and strategy of the Federal Government to securing agency information systems, including the intrusion detection and prevention capabilities and the intrusion assessment plan. **(c) Reports to Congress** (1) **Intrusion detection and prevention capabilities** (A) *Secretary of Homeland Security report* — Not later than 6 months after December 18, 2015, and annually thereafter, the Secretary shall submit to the appropriate congressional committees a report on the status of implementation of the intrusion detection and prevention capabilities, including— (i) a description of privacy controls; (ii) a description of the technologies and capabilities utilized to detect cybersecurity risks in network traffic, including the extent to which those technologies and capabilities include existing commercial and noncommercial technologies; (iii) a description of the technologies and capabilities utilized to prevent network traffic associated with cybersecurity risks from transiting or traveling to or from agency information systems, including the extent to which those technologies and capabilities include existing commercial and noncommercial technologies; (iv) a list of the types of indicators or other identifiers or techniques used to detect cybersecurity risks in network traffic transiting or traveling to or from agency information systems on each iteration of the intrusion detection and prevention capabilities and the number of each such type of indicator, identifier, and technique; (v) the number of instances in which the intrusion detection and prevention capabilities detected a cybersecurity risk in network traffic transiting or traveling to or from agency information systems and the number of times the intrusion detection and prevention capabilities blocked network traffic associated with cybersecurity risk; and (vi) a description of the pilot established under section 2213(c)(5) of the Homeland Security Act of 2002 [[6 U.S.C. 663(c)(5)](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section663/c/5&num=0&edition=prelim)], including the number of new technologies tested and the number of participating agencies. (B) *OMB report* — Not later than 18 months after December 18, 2015, and annually thereafter, the Director shall submit to Congress, as part of the report required under [section 3553(c) of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3553/c&num=0&edition=prelim), an analysis of agency application of the intrusion detection and prevention capabilities, including— (i) a list of each agency and the degree to which each agency has applied the intrusion detection and prevention capabilities to an agency information system; and (ii) a list by agency of— (I) the number of instances in which the intrusion detection and prevention capabilities detected a cybersecurity risk in network traffic transiting or traveling to or from an agency information system and the types of indicators, identifiers, and techniques used to detect such cybersecurity risks; and (II) the number of instances in which the intrusion detection and prevention capabilities prevented network traffic associated with a cybersecurity risk from transiting or traveling to or from an agency information system and the types of indicators, identifiers, and techniques used to detect such agency information systems. (C) *Chief information officer* — Not earlier than 18 months after December 18, 2015, and not later than 2 years after December 18, 2015, the Federal Chief Information Officer shall review and submit to the appropriate congressional committees a report assessing the intrusion detection and intrusion prevention capabilities, including— (i) the effectiveness of the system in detecting, disrupting, and preventing cyber-threat actors, including advanced persistent threats, from accessing agency information and agency information systems; (ii) whether the intrusion detection and prevention capabilities, continuous diagnostics and mitigation, and other systems deployed under subtitle D 11 See References in Text note below. of title II of the Homeland Security Act of 2002 ([6 U.S.C. 231](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section231&num=0&edition=prelim) et seq.) are effective in securing Federal information systems; (iii) the costs and benefits of the intrusion detection and prevention capabilities, including as compared to commercial technologies and tools and including the value of classified cyber threat indicators; and (iv) the capability of agencies to protect sensitive cyber threat indicators and defensive measures if they were shared through unclassified mechanisms for use in commercial technologies and tools. (2) **OMB report on development and implementation of intrusion assessment plan, advanced internal defenses, and Federal cybersecurity requirements** — The Director shall— (A) not later than 6 months after December 18, 2015, and 30 days after any update thereto, submit the intrusion assessment plan to the appropriate congressional committees; (B) not later than 1 year after December 18, 2015, and annually thereafter, submit to Congress, as part of the report required under [section 3553(c) of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3553/c&num=0&edition=prelim)— (i) a description of the implementation of the intrusion assessment plan; (ii) the findings of the intrusion assessments conducted pursuant to the intrusion assessment plan; (iii) a description of the advanced network security tools included in the efforts to continuously diagnose and mitigate cybersecurity risks pursuant to [section 1522(a)(1) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section1522/a/1&num=0&edition=prelim); and (iv) a list by agency of compliance with the requirements of [section 1523(b) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section1523/b&num=0&edition=prelim); and (C) not later than 1 year after December 18, 2015, submit to the appropriate congressional committees— (i) a copy of the plan developed pursuant to [section 1522(a)(2) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section1522/a/2&num=0&edition=prelim); and (ii) the improved metrics developed pursuant to [section 1522(c) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section1522/c&num=0&edition=prelim). **(d) Form** Each report required under this section shall be submitted in unclassified form, but may include a classified annex.

Cross-references

Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 663 — Enhancement of Federal and non-Federal cybersecurity

In carrying out the responsibilities under [section 652 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section652&num=0&edition=prelim), the Director of the Cybersecurity and Infrastructure Security Agency shall— (1) as appropriate, provide to State and local government entities, and upon request to private entities that own or operate critical information systems— (A) analysis and warnings related to threats to, and vulnerabilities of, critical information systems; and (B) in coordination with the Under Secretary for Emergency Preparedness and Response, crisis management support in response to threats to, or attacks on, critical information systems; (2) as appropriate, provide technical assistance, upon request, to the private sector and other government entities, in coordination with the Under Secretary for Emergency Preparedness and Response, with respect to emergency recovery plans to respond to major failures of critical information systems; and (3) fulfill the responsibilities of the Secretary to protect Federal information systems under subchapter II of chapter 35 of title 44.

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 663

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 1501 — Definitions

In this subchapter: (1) **Agency** — The term “agency” has the meaning given the term in [section 3502 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3502&num=0&edition=prelim). (2) **Antitrust laws** — The term “antitrust laws”— (A) has the meaning given the term in [section 12 of title 15](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section12&num=0&edition=prelim); (B) includes [section 45 of title 15](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section45&num=0&edition=prelim) to the extent that [section 45 of title 15](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section45&num=0&edition=prelim) applies to unfair methods of competition; and (C) includes any State antitrust law, but only to the extent that such law is consistent with the law referred to in subparagraph (A) or the law referred to in subparagraph (B). (3) **Appropriate Federal entities** — The term “appropriate Federal entities” means the following: (A) The Department of Commerce. (B) The Department of Defense. (C) The Department of Energy. (D) The Department of Homeland Security. (E) The Department of Justice. (F) The Department of the Treasury. (G) The Office of the Director of National Intelligence. (4) **Cybersecurity purpose** — The term “cybersecurity purpose” has the meaning given the term in [section 650 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section650&num=0&edition=prelim). (5) **Cybersecurity threat** — The term “cybersecurity threat” has the meaning given the term in [section 650 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section650&num=0&edition=prelim). (6) *

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 1501

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 231 — Methamphetamine and methamphetamine precursor chemicals

**(a) Compliance with performance plan requirements** As part of the annual performance plan required in the budget submission of the United States Customs and Border Protection under [section 1115 of title 31](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title31-section1115&num=0&edition=prelim), the Commissioner shall establish performance indicators relating to the seizure of methamphetamine and methamphetamine precursor chemicals in order to evaluate the performance goals of the United States Customs and Border Protection with respect to the interdiction of illegal drugs entering the United States. **(b) Study and report relating to methamphetamine and methamphetamine precursor chemicals** (1) **Analysis** — The Commissioner shall, on an ongoing basis, analyze the movement of methamphetamine and methamphetamine precursor chemicals into the United States. In conducting the analysis, the Commissioner shall— (A) consider the entry of methamphetamine and methamphetamine precursor chemicals through ports of entry, between ports of entry, through international mails, and through international courier services; (B) examine the export procedures of each foreign country where the shipments of methamphetamine and methamphetamine precursor chemicals originate and determine if changes in the country’s customs over time provisions would alleviate the export of methamphetamine and methamphetamine precursor chemicals; and (C) identify emerging trends in smuggling techniques and strategies. (2) **Report** — Not later than September 30, 2007, and each 2-year period thereafter, the Commissioner, in the consultation with the Attorney General, United States Immigration and Customs Enforcement, the United States Drug Enforcement Administration, and the United

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 231

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 650 — Definitions

In this part: (1) **Center** — The term “Center” means the center established under [section 659 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section659&num=0&edition=prelim). (2) **Council** — The term “Council” means the Cyber Incident Reporting Council described in [section 681f of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681f&num=0&edition=prelim). (3) **Covered cyber incident** — The term “covered cyber incident” means a substantial cyber incident experienced by a covered entity that satisfies the definition and criteria established by the Director in the final rule issued pursuant to [section 681b(b) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681b/b&num=0&edition=prelim). (4) **Covered entity** — The term “covered entity” means an entity in a critical infrastructure sector, as defined in Presidential Policy Directive 21, that satisfies the definition established by the Director in the final rule issued pursuant to [section 681b(b) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681b/b&num=0&edition=prelim). (5) **Cyber incident** — The term “cyber incident”— (A) has the meaning given the term “incident” in section 659 11 See References in Text note below. of this title; and (B) does not include an occurrence that imminently, but not actually, jeopardizes— (i) information on information systems; or (ii) information systems. (6) **Cyber threat** — The term “cyber threat” has the meaning given the term “cybersecurity threat” in [section 650 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section650&num=0&edition=prelim). (7) **Federal entit

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 650

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 1524 — Assessment; reports

Page 512 TITLE 6—DOMESTIC SECURITY § 1524 (b) Cybersecurity requirements at agencies (1) In general Consistent with policies, standards, guide- lines, and directives on information security under subchapter II of chapter 35 of title 44 and the standards and guidelines promulgated under section 11331 of title 40 and except as provided in paragraph (2), not later than 1 year after December 18, 2015, the head of each agen- cy shall— (A) identify sensitive and mission critical data stored by the agency consistent with the inventory required under the first sub- section (c) (relating to the inventory of major information systems) and the second subsection (c) (relating to the inventory of information systems) of section 3505 of title 44; (B) assess access controls to the data de- scribed in subparagraph (A), the need for readily accessible storage of the data, and individuals’ need to access the data; (C) encrypt or otherwise render indecipher- able to unauthorized users the data de- scribed in subparagraph (A) that is stored on or transiting agency information systems; (D) implement a single sign-on trusted identity platform for individuals accessing each public website of the agency that re- quires user authentication, as developed by the Administrator of General Services in collaboration with the Secretary; and (E) implement identity management con- sistent with section 7464 of title 15, including multi-factor authentication, for— (i) remote access to an agency informa- tion system; and (ii) each user account with elevated privileges on an agency information sys- tem. (2) Exception The requirements under paragraph (1) shall not apply to an agency information system for which— (A) the head of the agency has personally certified to the Direct

Source: Supplied 2024 U.S. Code historical extraction · 6 U.S.C. § 1524

Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 231 — Transfer of certain agricultural inspection

Page 123 TITLE 6—DOMESTIC SECURITY § 231 current policies and manuals of the Office of Field Operations related to inspections at ports of entry to ensure the uniform implementation of inspection practices that will effectively re- spond to technological and methodological changes designed to disguise illegal activity, such as the smuggling of drugs and humans, along the border. (b) Reporting requirement Shortly after each update required under sub- section (a), the Commissioner of U.S. Customs and Border Protection shall submit a report to the Committee on Homeland Security and Gov- ernmental Affairs of the Senate and the Com- mittee on Homeland Security of the House of Representatives that summarizes the policy and manual changes implemented by such update. (Pub. L. 118–43, § 2, Mar. 18, 2024, 138 Stat. 453.) Editorial Notes CODIFICATION Section was enacted as part of the Eradicating Nar- cotic Drugs and Formulating Effective New Tools to Address National Yearly Losses of life Act, also known as the END FENTANYL Act, and not as part of the Homeland Security Act of 2002 which comprises this chapter. PART C—MISCELLANEOUS PROVISIONS § 231. Transfer of certain agricultural inspection functions of the Department of Agriculture (a) Transfer of agricultural import and entry in- spection functions There shall be transferred to the Secretary the functions of the Secretary of Agriculture relat- ing to agricultural import and entry inspection activities under the laws specified in subsection (b). (b) Covered animal and plant protection laws The laws referred to in subsection (a) are the following: (1) The Act commonly known as the Virus- Serum-Toxin Act (the eighth paragraph under the heading ‘‘Bureau of Animal Industry’’ in the Act of March 4, 19

Source: Supplied 2024 U.S. Code historical extraction · 6 U.S.C. § 231

Stored review status: historical_2024_not_currentness_verified. The source passage cites 6 U.S.C. § 231. This identifies an authority to review, not proof of applicability.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 660 — Sector Risk Management Agencies

**(a) Definitions** In this section: (1) **Appropriate congressional committees** — The term “appropriate congressional committees” means— (A) the Committee on Homeland Security and the Committee on Armed Services in the House of Representatives; and (B) the Committee on Homeland Security and Governmental Affairs and the Committee on Armed Services in the Senate. (2) **Critical infrastructure** — The term “critical infrastructure” has the meaning given that term in [section 5195c(e) of title 42](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title42-section5195c/e&num=0&edition=prelim). (3) **Department** — The term “Department” means the Department of Homeland Security. (4) **Director** — The term “Director” means the Director of the Cybersecurity and Infrastructure Security Agency of the Department. (5) **Secretary** — The term “Secretary” means the Secretary of Homeland Security. (7) **11 So in original. Probably should be “(6)”. Sector Risk Management Agency** — The term “Sector Risk Management Agency” has the meaning given the term in [section 650 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section650&num=0&edition=prelim). **(b) Critical infrastructure sector designation** (1) **Initial review** — Not later than 180 days after January 1, 2021, the Secretary, in consultation with the heads of Sector Risk Management Agencies, shall— (A) review the current framework for securing critical infrastructure, as described in [section 652(c)(4) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section652/c/4&num=0&edition=prelim) and Presidential Policy Directive 21; and (B) submit to the President and appropriate congressional committees a report that includes— (i

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 660

Stored review status: release_metadata_unconfirmed. The source passage cites 6 U.S.C. § 660. This identifies an authority to review, not proof of applicability.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 660 — Cybersecurity plans

Page 348 TITLE 6—DOMESTIC SECURITY § 660 ‘‘(2) the term ‘critical infrastructure’ has the mean- ing given that term in section 2 of the Homeland Se- curity Act of 2002 (6 U.S.C. 101); ‘‘(3) the term ‘cybersecurity risk’ has the meaning given that term in section 226 [2209] of the Homeland Security Act of 2002, as added by section 3; ‘‘(4) the term ‘information sharing and analysis or- ganization’ has the meaning given that term in sec- tion 212(5) [renumbered 2222(5) by section 2(g)(2)(H) of Pub. L. 115–278] of the Homeland Security Act of 2002 ([former] 6 U.S.C. 131(5)) [now 6 U.S.C. 671(5); see 6 U.S.C. 650(13)]; ‘‘(5) the term ‘information system’ has the meaning given that term in section 3502(8) of title 44, United States Code; and ‘‘(6) the term ‘Secretary’ means the Secretary of Homeland Security.’’ § 660. Cybersecurity plans (a) Definitions In this section, the term ‘‘agency information system’’ means an information system used or operated by an agency or by another entity on behalf of an agency. (b) Intrusion assessment plan (1) Requirement The Secretary, in coordination with the Di- rector of the Office of Management and Budg- et, shall— (A) develop and implement an intrusion assessment plan to proactively detect, iden- tify, and remove intruders in agency infor- mation systems on a routine basis; and (B) update such plan as necessary. (2) Exception The intrusion assessment plan required under paragraph (1) shall not apply to the De- partment of Defense, a national security sys- tem, or an element of the intelligence commu- nity. (c) Cyber incident response plan The Director of the Cybersecurity and Infra- structure Security Agency shall, in coordination with appropriate Federal departments and agen- cies, State and local government

Source: Supplied 2024 U.S. Code historical extraction · 6 U.S.C. § 660

Stored review status: historical_2024_not_currentness_verified. The source passage cites 6 U.S.C. § 660. This identifies an authority to review, not proof of applicability.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 663 — Federal intrusion detection and prevention

Page 351 TITLE 6—DOMESTIC SECURITY § 663 1 So in original. Probably should be followed by ‘‘and’’. 2 So in original. The ‘‘; and’’ probably should be a period. § 663. Federal intrusion detection and prevention system (a) Definitions In this section— (1) the term ‘‘agency’’ has the meaning given the term in section 3502 of title 44; (2) the term ‘‘agency information’’ means in- formation collected or maintained by or on be- half of an agency; 1 (3) the term ‘‘agency information system’’ has the meaning given the term in section 660 of this title; and 2 (b) Requirement (1) In general Not later than 1 year after December 18, 2015, the Secretary shall deploy, operate, and maintain, to make available for use by any agency, with or without reimbursement— (A) a capability to detect cybersecurity risks in network traffic transiting or trav- eling to or from an agency information sys- tem; and (B) a capability to prevent network traffic associated with such cybersecurity risks from transiting or traveling to or from an agency information system or modify such network traffic to remove the cybersecurity risk. (2) Regular improvement The Secretary shall regularly deploy new technologies and modify existing technologies to the intrusion detection and prevention ca- pabilities described in paragraph (1) as appro- priate to improve the intrusion detection and prevention capabilities. (c) Activities In carrying out subsection (b), the Secretary— (1) may access, and the head of an agency may disclose to the Secretary or a private en- tity providing assistance to the Secretary under paragraph (2), information transiting or traveling to or from an agency information system, regardless of the location from which the Secretary or a private entity providin

Source: Supplied 2024 U.S. Code historical extraction · 6 U.S.C. § 663

Stored review status: historical_2024_not_currentness_verified. The source passage cites 6 U.S.C. § 663. This identifies an authority to review, not proof of applicability.