Arkansas Legal Resource Navigator

6 U.S.C. § 681e — Rule of construction

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 681e — Rule of construction

Nothing in this part shall be construed to impair or limit the ability of the Director to carry out the authorized activities of the Cybersecurity and Infrastructure Security Agency.

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 681e

Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.

Original supplied file — preserved unchanged

Download original Markdown file

File SHA-256: 06cb48db637ee445591a1d3bb4a4b14ed0e7f4a12188905a5427a14937fce9cb. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.

Authority boundary: historical or unconfirmed source not current law verified.

Open the recorded source website ↗

Record provenance

Stable record: federal_law:legal_authorities:record_usc_86361fe20f7e4f56ea4616f1
Source file: Laws/federal/codes/united-states-code/title-6/section-681e-rule-of-construction--bb4c94d1bc.md
Pages: Not recorded – Not recorded
Passage SHA-256: 539078aab38095fdda35e31ec3bb617405f19f92a1f3ced1c9727b451fe0f737

Source location: Title 6, Chapter 1, § 681e; chapter-001-homeland-security-organization.md

Stored source content

Nothing in this part shall be construed to impair or limit the ability of the Director to carry out the authorized activities of the Cybersecurity and Infrastructure Security Agency.

Cross-references

Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 101 — Cyber incident review

**(a) Activities** The Center shall— (1) receive, aggregate, analyze, and secure, using processes consistent with the processes developed pursuant to the Cybersecurity Information Sharing Act of 2015 ([6 U.S.C. 1501](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section1501&num=0&edition=prelim) et seq.) reports from covered entities related to a covered cyber incident to assess the effectiveness of security controls, identify tactics, techniques, and procedures adversaries use to overcome those controls and other cybersecurity purposes, including to assess potential impact of cyber incidents on public health and safety and to enhance situational awareness of cyber threats across critical infrastructure sectors; (2) coordinate and share information with appropriate Federal departments and agencies to identify and track ransom payments, including those utilizing virtual currencies; (3) leverage information gathered about cyber incidents to— (A) enhance the quality and effectiveness of information sharing and coordination efforts with appropriate entities, including agencies, sector coordinating councils, Information Sharing and Analysis Organizations, State, local, Tribal, and territorial governments, technology providers, critical infrastructure owners and operators, cybersecurity and cyber incident response firms, and security researchers; and (B) provide appropriate entities, including sector coordinating councils, Information Sharing and Analysis Organizations, State, local, Tribal, and territorial governments, technology providers, cybersecurity and cyber incident response firms, and security researchers, with timely, actionable, and anonymized reports of cyber incident campaigns and trends, including, to the maximum extent practicable

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 101

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 103 — Voluntary reporting of other cyber incidents

**(a) In general** Entities may voluntarily report cyber incidents or ransom payments to the Agency that are not required under paragraph (1), (2), or (3) of [section 681b(a) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681b/a&num=0&edition=prelim), but may enhance the situational awareness of cyber threats. **(b) Voluntary provision of additional information in required reports** Covered entities may voluntarily include in reports required under paragraph (1), (2), or (3) of [section 681b(a) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681b/a&num=0&edition=prelim) information that is not required to be included, but may enhance the situational awareness of cyber threats. **(c) Application of [section 681e of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681e&num=0&edition=prelim)** [Section 681e of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681e&num=0&edition=prelim) shall apply in the same manner and to the same extent to reports and information submitted under subsections (a) and (b) as it applies to reports and information submitted under [section 681b of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681b&num=0&edition=prelim).

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 103

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 103a — Noncompliance with required reporting

**(a) Purpose** In the event that a covered entity that is required to submit a report under [section 681b(a) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681b/a&num=0&edition=prelim) fails to comply with the requirement to report, the Director may obtain information about the cyber incident or ransom payment by engaging the covered entity directly to request information about the cyber incident or ransom payment, and if the Director is unable to obtain information through such engagement, by issuing a subpoena to the covered entity, pursuant to subsection (c), to gather information sufficient to determine whether a covered cyber incident or ransom payment has occurred. **(b) Initial request for information** (1) **In general** — If the Director has reason to believe, whether through public reporting or other information in the possession of the Federal Government, including through analysis performed pursuant to paragraph (1) or (2) of [section 681a(a) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681a/a&num=0&edition=prelim), that a covered entity has experienced a covered cyber incident or made a ransom payment but failed to report such cyber incident or payment to the Agency in accordance with [section 681b(a) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681b/a&num=0&edition=prelim), the Director may request additional information from the covered entity to confirm whether or not a covered cyber incident or ransom payment has occurred. (2) **Treatment** — Information provided to the Agency in response to a request under paragraph (1) shall be treated as if it was submitted through the reporting procedures established in [section 68

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 103a

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 681e — Information shared with or provided to

Page 392 TITLE 6—DOMESTIC SECURITY § 681e website of the Agency, which shall include, at a minimum, the number of times the Director— (1) issued an initial request for information pursuant to subsection (b); or (2) issued a subpoena pursuant to subsection (c). (i) Anonymization of reports The Director shall ensure any victim informa- tion contained in a report required to be pub- lished under subsection (h) be anonymized be- fore the report is published. (Pub. L. 107–296, title XXII, § 2244, as added Pub. L. 117–103, div. Y, § 103(a)(2), Mar. 15, 2022, 136 Stat. 1049; amended Pub. L. 117–263, div. G, title LXXI, § 7143(e)(2), Dec. 23, 2022, 136 Stat. 3664.) Editorial Notes AMENDMENTS 2022—Subsec. (b)(2). Pub. L. 117–263 inserted ‘‘includ- ing that section 681e of this title shall apply to such in- formation in the same manner and to the same extent to information submitted in response to requests under paragraph (1) as it applies to information submitted under section 681b of this title’’ after ‘‘section 681b of this title’’. § 681e. Information shared with or provided to the Federal Government (a) Disclosure, retention, and use (1) Authorized activities Information provided to the Agency pursu- ant to section 681b or 681c of this title may be disclosed to, retained by, and used by, con- sistent with otherwise applicable provisions of Federal law, any Federal agency or depart- ment, component, officer, employee, or agent of the Federal Government solely for— (A) a cybersecurity purpose; (B) the purpose of identifying— (i) a cyber threat, including the source of the cyber threat; or (ii) a security vulnerability; (C) the purpose of responding to, or other- wise preventing or mitigating, a specific threat of death, a specific threat of serious

Source: Supplied 2024 U.S. Code historical extraction · 6 U.S.C. § 681e

Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.