Browse Arkansas Code titles and sections
44 U.S.C. § 3552 — Definitions
Federal law — U.S. Code and appendices · legal_authorities
**(a) In General.—** Except as provided under subsection (b), the definitions under section 3502 shall apply to this subchapter.
**(b) Additional Definitions.—** As used in this subchapter:
(1) The term “binding operational directive” means a compulsory direction to an agency that—
(A) is for purposes of safeguarding Federal information and information systems from a known or reasonably suspected information security threat, vulnerability, or risk;
(B) shall be in accordance with policies, principles, standards, and guidelines issued by the Director; and
(C) may be revised or repealed by the Director if the direction issued on behalf of the Director is not in accordance with policies and principles developed by the Director.
(2) The term “incident” means an occurrence that—
(A) actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or
(B) constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.
(3) The term “information security” means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide—
(A) integrity, which means guarding against improper information modification or destruction, and includes ensuring information nonrepudiation and authenticity;
(B) confidentiality, which means preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information; and
(C) availability, which means ensuring timely and reliable access to and use of information.
(4) The term “information technology” has the meaning given that term
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3552
Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.
Original supplied file — preserved unchanged
Download original Markdown file
File SHA-256: 980d64b9a0c5aec20af85c9a24aabaa97c9b9e5075deb6aedd6d34bffbd10d61. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.
Authority boundary: historical or unconfirmed source not current law verified.
Open the recorded source website ↗
Record provenance
Stable record: federal_law:legal_authorities:record_usc_7f77d5cf8702e9ceda0a3640
Source file: Laws/federal/codes/united-states-code/title-44/section-3552-definitions--cc818b534f.md
Pages: Not recorded – Not recorded
Passage SHA-256: 72fa8f7370d8be1bbebbdcaa194ff011fc0b74931caf0aa994a3c881a055aeaa
Source location: Title 44, Chapter 35, § 3552; chapter-035-coordination-of-federal-information-policy.md
Stored source content
**(a) In General.—** Except as provided under subsection (b), the definitions under section 3502 shall apply to this subchapter.
**(b) Additional Definitions.—** As used in this subchapter:
(1) The term “binding operational directive” means a compulsory direction to an agency that—
(A) is for purposes of safeguarding Federal information and information systems from a known or reasonably suspected information security threat, vulnerability, or risk;
(B) shall be in accordance with policies, principles, standards, and guidelines issued by the Director; and
(C) may be revised or repealed by the Director if the direction issued on behalf of the Director is not in accordance with policies and principles developed by the Director.
(2) The term “incident” means an occurrence that—
(A) actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or
(B) constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.
(3) The term “information security” means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide—
(A) integrity, which means guarding against improper information modification or destruction, and includes ensuring information nonrepudiation and authenticity;
(B) confidentiality, which means preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information; and
(C) availability, which means ensuring timely and reliable access to and use of information.
(4) The term “information technology” has the meaning given that term in [section 11101 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11101&num=0&edition=prelim).
(5) The term “intelligence community” has the meaning given that term in section 3(4) of the National Security Act of 1947 ([50 U.S.C. 3003(4)](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title50-section3003/4&num=0&edition=prelim)).
(6)
(A) The term “national security system” means any information system (including any telecommunications system) used or operated by an agency or by a contractor of an agency, or other organization on behalf of an agency—
(i) the function, operation, or use of which—
(I) involves intelligence activities;
(II) involves cryptologic activities related to national security;
(III) involves command and control of military forces;
(IV) involves equipment that is an integral part of a weapon or weapons system; or
(V) subject to subparagraph (B), is critical to the direct fulfillment of military or intelligence missions; or
(ii) is protected at all times by procedures established for information that have been specifically authorized under criteria established by an Executive order or an Act of Congress to be kept classified in the interest of national defense or foreign policy.
(B) Subparagraph (A)(i)(V) does not include a system that is to be used for routine administrative and business applications (including payroll, finance, logistics, and personnel management applications).
(7) The term “Secretary” means the Secretary of Homeland Security.
Cross-references
Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.
Federal law — U.S. Code and appendices · legal_authorities
In this subtitle, the following definitions apply:
(1) **Commercial product.—** — The term “commercial product” has the meaning given that term in [section 103 of title 41](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section103&num=0&edition=prelim).
(2) **Executive agency.—** — The term “executive agency” has the meaning given that term in [section 133 of title 41](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section133&num=0&edition=prelim).
(3) **Information resources.—** — The term “information resources” has the meaning given that term in [section 3502 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3502&num=0&edition=prelim).
(4) **Information resources management.—** — The term “information resources management” has the meaning given that term in [section 3502 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3502&num=0&edition=prelim).
(5) **Information system.—** — The term “information system” has the meaning given that term in [section 3502 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3502&num=0&edition=prelim).
(6) **Information technology.—** — The term “information technology”—
(A) with respect to an executive agency means any equipment or interconnected system or subsystem of equipment, used in the automatic acquisition, storage, analysis, evaluation, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information by the executive agency, if the equipment is used by the executive agency directly or is used by a contractor under a contract with the executive agency that requires the use—
(i) of that equipment;
Source: Supplied U.S. Code snapshot — release unconfirmed · 40 U.S.C. § 11101
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Annual reports to President and Congressional officers and committees** The Administration shall, as soon as practicable each fiscal year make a comprehensive annual report to the President, the President of the Senate, the Senate Select Committee on Small Business, and the Speaker of the House of Representatives. Such report shall include a description of the state of small business in the Nation and the several States, and a description of the operations of the Administration under this chapter, including, but not limited to, the general lending, disaster relief, Government regulation relief, procurement and property disposal, research and development, technical assistance, dissemination of data and information, and other functions under the jurisdiction of the Administration during the previous fiscal year. Such report shall contain recommendations for strengthening or improving such programs, or, when necessary or desirable to implement more effectively congressional policies and proposals, for establishing new or alternative programs. In addition, such report shall include the names of the business concerns to whom contracts are let and for whom financing is arranged by the Administration, together with the amounts involved. With respect to minority small business concerns, the report shall include the proportion of loans and other assistance under this chapter provided to such concerns, the goals of the Administration for the next fiscal year with respect to such concerns, and recommendations for improving assistance to minority small business concerns under this chapter.
**(b) Cybersecurity reports**
(1) **Annual report** — Not later than 180 days after December 21, 2022, and every year thereafter, the Administrator shall submit a report to the appropriat
Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 639
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Definitions.—** In this title, the following definitions apply:
(1) **Apportionment.—** — The term “apportionment” includes unexpended apportionments made under prior authorization laws.
(2) **Asset management.—** — The term “asset management” means a strategic and systematic process of operating, maintaining, and improving physical assets, with a focus on both engineering and economic analysis based upon quality information, to identify a structured sequence of maintenance, preservation, repair, rehabilitation, and replacement actions that will achieve and sustain a desired state of good repair over the lifecycle of the assets at minimum practicable cost.
(3) **Carpool project.—** — The term “carpool project” means any project to encourage the use of carpools and vanpools, including provision of carpooling opportunities to the elderly and individuals with disabilities, systems for locating potential riders and informing them of carpool opportunities, acquiring vehicles for carpool use, designating existing highway lanes as preferential carpool highway lanes, providing related traffic control devices, designating existing facilities for use for preferential parking for carpools, and real-time ridesharing projects, such as projects where drivers, using an electronic transfer of funds, recover costs directly associated with the trip provided through the use of location technology to quantify those direct costs, subject to the condition that the cost recovered does not exceed the cost of the trip provided.
(4) **Construction.—** — The term “construction” means the supervising, inspecting, actual building, and incurrence of all costs incidental to the construction or reconstruction of a highway or any project eligible for assistance under this title, including bon
Source: Supplied U.S. Code snapshot — release unconfirmed · 23 U.S.C. § 101
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Federal Information Technology.—** The Director of the Office of Management and Budget shall perform the responsibilities set forth in this section in fulfilling the responsibilities under [section 3504(h) of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3504/h&num=0&edition=prelim).
**(b) Use of Information Technology in Federal Programs.—** The Director shall promote and improve the acquisition, use, security, and disposal of information technology by the Federal Government to improve the productivity, efficiency, and effectiveness of federal programs, including through dissemination of public information and the reduction of information collection burdens on the public.
**(c) Use of Budget Process.—**
(1) **Definitions.—** — In this subsection:
(A) The term “covered agency” means an agency listed in section 901(b)(1) or 901(b)(2) of title 31.
(B) The term “major information technology investment” means an investment within a covered agency information technology investment portfolio that is designated by the covered agency as major, in accordance with capital planning guidance issued by the Director.
(C) The term “national security system” has the meaning provided in [section 3542 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3542&num=0&edition=prelim).11 See References in Text note below.
(2) **Analyzing, tracking, and evaluating capital investments.—** — As part of the budget process, the Director shall develop a process for analyzing, tracking, and evaluating the risks, including information security risks, and results of all major capital investments made by an executive agency for information systems. The process shall cover the life of each system and shall inc
Source: Supplied U.S. Code snapshot — release unconfirmed · 40 U.S.C. § 11302
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
In this subchapter:
(1) **Appropriate congressional committees and leadership.—** — The term “appropriate congressional committees and leadership” means—
(A) the Committee on Homeland Security and Governmental Affairs, the Committee on the Judiciary, the Committee on Appropriations, the Committee on Armed Services, the Committee on Commerce, Science, and Transportation, the Select Committee on Intelligence, and the majority and minority leader of the Senate; and
(B) the Committee on Oversight and Government Reform, the Committee on the Judiciary, the Committee on Appropriations, the Committee on Homeland Security, the Committee on Armed Services, the Committee on Energy and Commerce, the Permanent Select Committee on Intelligence, and the Speaker and minority leader of the House of Representatives.
(2) **Council.—** — The term “Council” means the Federal Acquisition Security Council established under [section 1322(a) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section1322/a&num=0&edition=prelim).
(3) **Covered article.—** — The term “covered article” has the meaning given that term in [section 4713 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section4713&num=0&edition=prelim).
(4) **Covered procurement action.—** — The term “covered procurement action” has the meaning given that term in [section 4713 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section4713&num=0&edition=prelim).
(5) **Information and communications technology.—** — The term “information and communications technology” has the meaning given that term in [section 4713 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section4713&num=0&edition=pre
Source: Supplied U.S. Code snapshot — release unconfirmed · 41 U.S.C. § 1321
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Definitions** In this section:
(1) **Appropriate Congressional committees** — The term “appropriate Congressional committees” means—
(A) the Committee on Environment and Public Works of the Senate;
(B) the Committee on Homeland Security and Governmental Affairs of the Senate;
(C) the Committee on Energy and Commerce of the House of Representatives; and
(D) the Committee on Homeland Security of the House of Representatives.
(2) **Director** — The term “Director” means the Director of the Cybersecurity and Infrastructure Security Agency.
(3) **Incident** — The term “incident” has the meaning given the term in [section 3552 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3552&num=0&edition=prelim).
(4) **Prioritization Framework** — The term “Prioritization Framework” means the prioritization framework developed by the Administrator under subsection (b)(1)(A).
(5) **Support Plan** — The term “Support Plan” means the Technical Cybersecurity Support Plan developed by the Administrator under subsection (b)(2)(A).
**(b) Identification of and support for public water systems**
(1) **Prioritization Framework**
(A) *In general* — Not later than 180 days after November 15, 2021, the Administrator, in coordination with the Director, shall develop a prioritization framework to identify public water systems (including sources of water for those public water systems) that, if degraded or rendered inoperable due to an incident, would lead to significant impacts on the health and safety of the public.
(B) *Considerations* — In developing the Prioritization Framework, to the extent practicable, the Administrator shall incorporate consideration of—
(i) whether cybersecurity vulnerabilities for a public water syst
Source: Supplied U.S. Code snapshot — release unconfirmed · 42 U.S.C. § 300g–10
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
### Statutory Notes
Sections 3531 to 3538 comprised subchapter II of this chapter “INFORMATION SECURITY”.
Section 3531, added Pub. L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat. 2259, set forth purposes of subchapter II. See [section 3551 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3551&num=0&edition=prelim).
A prior section 3531, added Pub. L. 106–398, § 1 [[div. A], title X, § 1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266, set forth purposes of subchapter II prior to the general amendment of subchapter II by Pub. L. 107–296.
Section 3532, added Pub. L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat. 2260, related to definitions applicable to subchapter II. See [section 3552 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3552&num=0&edition=prelim).
A prior section 3532, added Pub. L. 106–398, § 1 [[div. A], title X, § 1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266, related to definitions applicable to subchapter II prior to the general amendment of subchapter II by Pub. L. 107–296.
Section 3533, added Pub. L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat. 2261, set forth authority and functions of the Director. See [section 3553 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3553&num=0&edition=prelim).
A prior section 3533, added Pub. L. 106–398, § 1 [[div. A], title X, § 1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266, set forth authority and functions of the Director prior to the general amendment of subchapter II by Pub. L. 107–296.
Section 3534, added Pub. L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat. 2262, related to Federal agency responsibilities. See [section 3554 of this
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3531 to 3549
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
In this chapter, the definitions under section 3502 shall apply, and the term—
(1) “Administrator” means the Administrator of the Office of Electronic Government established under section 3602;
(2) “Council” means the Chief Information Officers Council established under section 3603;
(3) “electronic Government” means the use by the Government of web-based Internet applications and other information technologies, combined with processes that implement these technologies, to—
(A) enhance the access to and delivery of Government information and services to the public, other agencies, and other Government entities; or
(B) bring about improvements in Government operations that may include effectiveness, efficiency, service quality, or transformation;
(4) “enterprise architecture”—
(A) means—
(i) a strategic information asset base, which defines the mission;
(ii) the information necessary to perform the mission;
(iii) the technologies necessary to perform the mission; and
(iv) the transitional processes for implementing new technologies in response to changing mission needs; and
(B) includes—
(i) a baseline architecture;
(ii) a target architecture; and
(iii) a sequencing plan;
(5) “Fund” means the E-Government Fund established under section 3604;
(6) “interoperability” means the ability of different operating and software systems, applications, and services to communicate and exchange data in an accurate, effective, and consistent manner;
(7) “integrated service delivery” means the provision of Internet-based Federal Government information or services integrated according to function or topic rather than separated according to the boundaries of agency jurisdiction; and
(8) “tribal government” means—
(A) the governing b
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3601
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Limitation on obligation of funds**
(1) Subject to paragraph (3), no funds appropriated to any element of the intelligence community may be obligated for an intelligence community business system transformation that will have a total cost in excess of $3,000,000 unless—
(A) the Director of the Office of Business Transformation of the Office of the Director of National Intelligence makes a certification described in paragraph (2) with respect to such intelligence community business system transformation; and
(B) such certification is approved by the board established under subsection (f).
(2) The certification described in this paragraph for an intelligence community business system transformation is a certification made by the Director of the Office of Business Transformation of the Office of the Director of National Intelligence that the intelligence community business system transformation—
(A) complies with the enterprise architecture under subsection (b) and such other policies and standards that the Director of National Intelligence considers appropriate; or
(B) is necessary—
(i) to achieve a critical national security capability or address a critical requirement; or
(ii) to prevent a significant adverse effect on a project that is needed to achieve an essential capability, taking into consideration any alternative solutions for preventing such adverse effect.
(3) With respect to a fiscal year after fiscal year 2010, the amount referred to in paragraph (1) in the matter preceding subparagraph (A) shall be equal to the sum of—
(A) the amount in effect under such paragraph (1) for the preceding fiscal year (determined after application of this paragraph), plus
(B) such amount multiplied by the annual percentage increase in the con
Source: Supplied U.S. Code snapshot — release unconfirmed · 50 U.S.C. § 3105a
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Definitions** In this section:
(1) **Covered agency** — The term “covered agency” means any element of the intelligence community other than an element within the Department of Defense.
(2) **Covered item of supply** — The term “covered item of supply” means an item of information technology (as that term is defined in [section 11101 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11101&num=0&edition=prelim)) that is purchased for inclusion in a covered system, and the loss of integrity of which could result in a supply chain risk for a covered system.
(3) **Covered procurement** — The term “covered procurement” means—
(A) a source selection for a covered system or a covered item of supply involving either a performance specification, as provided in [section 3306(a)(3)(B) of title 41](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section3306/a/3/B&num=0&edition=prelim), or an evaluation factor, as provided in section 3306(b)(1) of such title, relating to supply chain risk;
(B) the consideration of proposals for and issuance of a task or delivery order for a covered system or a covered item of supply, as provided in [section 4106(d)(3) of title 41](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section4106/d/3&num=0&edition=prelim), where the task or delivery order contract concerned includes a contract clause establishing a requirement relating to supply chain risk; or
(C) any contract action involving a contract for a covered system or a covered item of supply where such contract includes a clause establishing requirements relating to supply chain risk.
(4) **Covered procurement action** — The term “covered procurement action” means any of the following actions, if
Source: Supplied U.S. Code snapshot — release unconfirmed · 50 U.S.C. § 3334e
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.