Browse Arkansas Code titles and sections
6 U.S.C. § 665h — Duties and authorities relating to .gov internet domain
Federal law — U.S. Code and appendices · legal_authorities
**(a) Definition** In this section, the term “agency” has the meaning given the term in [section 3502 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3502&num=0&edition=prelim).
**(b) Availability of .gov internet domain** The Director shall make .gov internet domain name registration services, as well as any supporting services described in subsection (e), generally available—
(1) to any Federal, State, local, or territorial government entity, or other publicly controlled entity, including any Tribal government recognized by the Federal Government or a State government, that complies with the requirements for registration developed by the Director as described in subsection (c);
(2) without conditioning registration on the sharing of any information with the Director or any other Federal entity, other than the information required to meet the requirements described in subsection (c); and
(3) without conditioning registration on participation in any separate service offered by the Director or any other Federal entity.
**(c) Requirements** The Director, with the approval of the Director of the Office of Management and Budget for agency .gov internet domain requirements and in consultation with the Director of the Office of Management and Budget for .gov internet domain requirements for entities that are not agencies, shall establish and publish on a publicly available website requirements for the registration and operation of .gov internet domains sufficient to—
(1) minimize the risk of .gov internet domains whose names could mislead or confuse users;
(2) establish that .gov internet domains may not be used for commercial or political campaign purposes;
(3) ensure that domains are registered and maintained only by authoriz
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 665h
Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.
Original supplied file — preserved unchanged
Download original Markdown file
File SHA-256: e717fb2b2b01b407d544dd4dc097127885542f319a3997a450c6936c77e2651f. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.
Authority boundary: historical or unconfirmed source not current law verified.
Open the recorded source website ↗
Record provenance
Stable record: federal_law:legal_authorities:record_usc_8f3e4b4b32c8d72cee80cdc1
Source file: Laws/federal/codes/united-states-code/title-6/section-665h-duties-and-authorities-relating-to-gov-internet-domain--a31864c856.md
Pages: Not recorded – Not recorded
Passage SHA-256: c3f25a32f3c5528e51f9106158ed8dc152a030dc19e304b667eaa0c1970ac723
Source location: Title 6, Chapter 1, § 665h; chapter-001-homeland-security-organization.md
Stored source content
**(a) Definition** In this section, the term “agency” has the meaning given the term in [section 3502 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3502&num=0&edition=prelim).
**(b) Availability of .gov internet domain** The Director shall make .gov internet domain name registration services, as well as any supporting services described in subsection (e), generally available—
(1) to any Federal, State, local, or territorial government entity, or other publicly controlled entity, including any Tribal government recognized by the Federal Government or a State government, that complies with the requirements for registration developed by the Director as described in subsection (c);
(2) without conditioning registration on the sharing of any information with the Director or any other Federal entity, other than the information required to meet the requirements described in subsection (c); and
(3) without conditioning registration on participation in any separate service offered by the Director or any other Federal entity.
**(c) Requirements** The Director, with the approval of the Director of the Office of Management and Budget for agency .gov internet domain requirements and in consultation with the Director of the Office of Management and Budget for .gov internet domain requirements for entities that are not agencies, shall establish and publish on a publicly available website requirements for the registration and operation of .gov internet domains sufficient to—
(1) minimize the risk of .gov internet domains whose names could mislead or confuse users;
(2) establish that .gov internet domains may not be used for commercial or political campaign purposes;
(3) ensure that domains are registered and maintained only by authorized individuals; and
(4) limit the sharing or use of any information obtained through the administration of the .gov internet domain with any other Department component or any other agency for any purpose other than the administration of the .gov internet domain, the services described in subsection (e), and the requirements for establishing a .gov inventory described in subsection (h).
**(d) Executive branch**
(1) **In general** — The Director of the Office of Management and Budget shall establish applicable processes and guidelines for the registration and acceptable use of .gov internet domains by agencies.
(2) **Approval required** — The Director shall obtain the approval of the Director of the Office of Management and Budget before registering a .gov internet domain name for an agency.
(3) **Compliance** — Each agency shall ensure that any website or digital service of the agency that uses a .gov internet domain is in compliance with the 21st Century IDEA Act ([44 U.S.C. 3501](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3501&num=0&edition=prelim) note) and implementation guidance issued pursuant to that Act.
**(e) Supporting services**
(1) **In general** — The Director may provide services to the entities described in subsection (b)(1) specifically intended to support the security, privacy, reliability, accessibility, and speed of registered .gov internet domains.
(2) **Rule of construction** — Nothing in paragraph (1) shall be construed to—
(A) limit other authorities of the Director to provide services or technical assistance to an entity described in subsection (b)(1); or
(B) establish new authority for services other than those the purpose of which expressly supports the operation of .gov internet domains and the needs of .gov internet domain registrants.
**(f) Fees**
(1) **In general** — The Director may provide any service relating to the availability of the .gov internet domain program, including .gov internet domain name registration services described in subsection (b) and supporting services described in subsection (e), to entities described in subsection (b)(1) with or without reimbursement, including variable pricing.
(2) **Limitation** — The total fees collected for new .gov internet domain registrants or annual renewals of .gov internet domains shall not exceed the direct operational expenses of improving, maintaining, and operating the .gov internet domain, .gov internet domain services, and .gov internet domain supporting services.
**(g) Consultation** The Director shall consult with the Director of the Office of Management and Budget, the Administrator of General Services, other civilian Federal agencies as appropriate, and entities representing State, local, Tribal, or territorial governments in developing the strategic direction of the .gov internet domain and in establishing requirements under subsection (c), in particular on matters of privacy, accessibility, transparency, and technology modernization.
**(h) .gov inventory**
(1) **In general** — The Director shall, on a continuous basis—
(A) inventory all hostnames and services in active use within the .gov internet domain; and
(B) provide the data described in subparagraph (A) to domain registrants at no cost.
(2) **Requirements** — In carrying out paragraph (1)—
(A) data may be collected through analysis of public and non-public sources, including commercial data sets;
(B) the Director shall share with Federal and non-Federal domain registrants all unique hostnames and services discovered within the zone of their registered domain;
(C) the Director shall share any data or information collected or used in the management of the .gov internet domain name registration services relating to Federal executive branch registrants with the Director of the Office of Management and Budget for the purpose of fulfilling the duties of the Director of the Office of Management and Budget under [section 3553 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3553&num=0&edition=prelim);
(D) the Director shall publish on a publicly available website discovered hostnames that describe publicly accessible agency websites, to the extent consistent with the security of Federal information systems but with the presumption of disclosure;
(E) the Director may publish on a publicly available website any analysis conducted and data collected relating to compliance with Federal mandates and industry best practices, to the extent consistent with the security of Federal information systems but with the presumption of disclosure; and
(F) the Director shall—
(i) collect information on the use of non-.gov internet domain suffixes by agencies for their official online services;
(ii) collect information on the use of non-.gov internet domain suffixes by State, local, Tribal, and territorial governments; and
(iii) publish the information collected under clause (i) on a publicly available website to the extent consistent with the security of the Federal information systems, but with the presumption of disclosure.
(3) **National security coordination**
(A) *In general* — In carrying out this subsection, the Director shall inventory, collect, and publish hostnames and services in a manner consistent with the protection of national security information.
(B) *Limitation* — The Director may not inventory, collect, or publish hostnames or services under this subsection if the Director, in coordination with other heads of agencies, as appropriate, determines that the collection or publication would—
(i) disrupt a law enforcement investigation;
(ii) endanger national security or intelligence activities;
(iii) impede national defense activities or military operations; or
(iv) hamper security remediation actions.
(4) **Strategy** — Not later than 180 days after December 27, 2020, the Director shall develop and submit to the Committee on Homeland Security and Governmental Affairs and the Committee on Rules and Administration of the Senate and the Committee on Homeland Security, the Committee on Oversight and Reform, and the Committee on House Administration of the House of Representatives a strategy to utilize the information collected under this subsection for countering malicious cyber activity.
Cross-references
Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.
Federal law — U.S. Code and appendices · legal_authorities
As used in this subchapter—
(1) the term “agency” means any executive department, military department, Government corporation, Government controlled corporation, or other establishment in the executive branch of the Government (including the Executive Office of the President), or any independent regulatory agency, but does not include—
(A) the Government Accountability Office;
(B) Federal Election Commission;
(C) the governments of the District of Columbia and of the territories and possessions of the United States, and their various subdivisions; or
(D) Government-owned contractor-operated facilities, including laboratories engaged in national defense research and production activities;
(2) the term “burden” means time, effort, or financial resources expended by persons to generate, maintain, or provide information to or for a Federal agency, including the resources expended for—
(A) reviewing instructions;
(B) acquiring, installing, and utilizing technology and systems;
(C) adjusting the existing ways to comply with any previously applicable instructions and requirements;
(D) searching data sources;
(E) completing and reviewing the collection of information; and
(F) transmitting, or otherwise disclosing the information;
(3) the term “collection of information”—
(A) means the obtaining, causing to be obtained, soliciting, or requiring the disclosure to third parties or the public, of facts or opinions by or for an agency, regardless of form or format, calling for either—
(i) answers to identical questions posed to, or identical reporting or recordkeeping requirements imposed on, ten or more persons, other than agencies, instrumentalities, or employees of the United States; or
(ii) answers to questions posed to agencies, ins
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3502
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
The purposes of this subchapter are to—
(1) minimize the paperwork burden for individuals, small businesses, educational and nonprofit institutions, Federal contractors, State, local and tribal governments, and other persons resulting from the collection of information by or for the Federal Government;
(2) ensure the greatest possible public benefit from and maximize the utility of information created, collected, maintained, used, shared and disseminated by or for the Federal Government;
(3) coordinate, integrate, and to the extent practicable and appropriate, make uniform Federal information resources management policies and practices as a means to improve the productivity, efficiency, and effectiveness of Government programs, including the reduction of information collection burdens on the public and the improvement of service delivery to the public;
(4) improve the quality and use of Federal information to strengthen decisionmaking, accountability, and openness in Government and society;
(5) minimize the cost to the Federal Government of the creation, collection, maintenance, use, dissemination, and disposition of information;
(6) strengthen the partnership between the Federal Government and State, local, and tribal governments by minimizing the burden and maximizing the utility of information created, collected, maintained, used, disseminated, and retained by or for the Federal Government;
(7) provide for the dissemination of public information on a timely basis, on equitable terms, and in a manner that promotes the utility of the information to the public and makes effective use of information technology;
(8) ensure that the creation, collection, maintenance, use, dissemination, and disposition of information by or for the Federal Government is consistent w
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3501
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Activities** The Center shall—
(1) receive, aggregate, analyze, and secure, using processes consistent with the processes developed pursuant to the Cybersecurity Information Sharing Act of 2015 ([6 U.S.C. 1501](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section1501&num=0&edition=prelim) et seq.) reports from covered entities related to a covered cyber incident to assess the effectiveness of security controls, identify tactics, techniques, and procedures adversaries use to overcome those controls and other cybersecurity purposes, including to assess potential impact of cyber incidents on public health and safety and to enhance situational awareness of cyber threats across critical infrastructure sectors;
(2) coordinate and share information with appropriate Federal departments and agencies to identify and track ransom payments, including those utilizing virtual currencies;
(3) leverage information gathered about cyber incidents to—
(A) enhance the quality and effectiveness of information sharing and coordination efforts with appropriate entities, including agencies, sector coordinating councils, Information Sharing and Analysis Organizations, State, local, Tribal, and territorial governments, technology providers, critical infrastructure owners and operators, cybersecurity and cyber incident response firms, and security researchers; and
(B) provide appropriate entities, including sector coordinating councils, Information Sharing and Analysis Organizations, State, local, Tribal, and territorial governments, technology providers, cybersecurity and cyber incident response firms, and security researchers, with timely, actionable, and anonymized reports of cyber incident campaigns and trends, including, to the maximum extent practicable
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 101
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Director.—** The Director shall oversee agency information security policies and practices, including—
(1) developing and overseeing the implementation of policies, principles, standards, and guidelines on information security, including through ensuring timely agency adoption of and compliance with standards promulgated under [section 11331 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11331&num=0&edition=prelim);
(2) requiring agencies, consistent with the standards promulgated under such section 11331 and the requirements of this subchapter, to identify and provide information security protections commensurate with the risk and magnitude of the harm resulting from the unauthorized access, use, disclosure, disruption, modification, or destruction of—
(A) information collected or maintained by or on behalf of an agency; or
(B) information systems used or operated by an agency or by a contractor of an agency or other organization on behalf of an agency;
(3) ensuring that the Secretary carries out the authorities and functions under subsection (b);
(4) coordinating the development of standards and guidelines under section 20 of the National Institute of Standards and Technology Act ([15 U.S.C. 278g–3](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section278g–3&num=0&edition=prelim)) with agencies and offices operating or exercising control of national security systems (including the National Security Agency) to assure, to the maximum extent feasible, that such standards and guidelines are complementary with standards and guidelines developed for national security systems;
(5) overseeing agency compliance with the requirements of this subchapter and [section 1326 of title 41](https://uscode
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3553
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
In this subchapter:
(1) **Department** — The term “Department” means the Department of Homeland Security.
(2) **Human trafficking** — The term “human trafficking” means an act or practice described in paragraph (9) or (10) 11 See References in Text note below. of [section 7102 of title 22](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title22-section7102&num=0&edition=prelim).
(3) **Secretary** — The term “Secretary” means the Secretary of Homeland Security.
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 652
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Defense Information Assurance Program.—** The Secretary of Defense shall carry out a program, to be known as the “Defense Information Assurance Program”, to protect and defend Department of Defense information, information systems, and information networks that are critical to the Department and the armed forces during day-to-day operations and operations in times of crisis.
**(b) Objectives of the Program.—** The objectives of the program shall be to provide continuously for the availability, integrity, authentication, confidentiality, nonrepudiation, and rapid restitution of information and information systems that are essential elements of the Defense Information Infrastructure.
**(c) Program Strategy.—** In carrying out the program, the Secretary shall develop a program strategy that encompasses those actions necessary to assure the readiness, reliability, continuity, and integrity of Defense information systems, networks, and infrastructure, including through compliance with subchapter II of chapter 35 of title 44, including through compliance with subchapter III of chapter 35 of title 44. The program strategy shall include the following:
(1) A vulnerability and threat assessment of elements of the defense and supporting nondefense information infrastructures that are essential to the operations of the Department and the armed forces.
(2) Development of essential information assurances technologies and programs.
(3) Organization of the Department, the armed forces, and supporting activities to defend against information warfare.
(4) Joint activities of the Department with other departments and agencies of the Government, State and local agencies, and elements of the national information infrastructure.
(5) The conduct of exercises, war games, simulatio
Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 2224
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
Page 136
TITLE 44—PUBLIC PRINTING AND DOCUMENTS
§ 3501
1 See References in Text note below.
classified to sections 139 to 139f of former Title 5, trans-
ferred to chapter 12 (§ 421 et seq.) of former Title 44, and
repealed by Pub. L. 90–620 upon the enactment of this
title. Subsequent to its original enactment by Pub. L.
90–620, this chapter was amended generally by Pub. L.
96–511 and again by Pub. L. 104–13. As a result, this
chapter is shown herein as having been added beginning
with Pub. L. 104–13 without reference to earlier amend-
atory laws. See Prior Provisions notes throughout this
chapter.
AMENDMENTS
2019—Pub. L. 115–435, title II, § 202(d)(2)(A), (e)(2),
(f)(2), title III, §§ 302(b), 303(b), Jan. 14, 2019, 132 Stat.
5541–5543, 5552, 5556, substituted ‘‘Data inventory and
Federal data catalogue’’ for ‘‘Establishment and oper-
ation of Government Information Locator Service’’ in
item 3511 and ‘‘Chief Data Officers’’ for ‘‘Establishment
of task force on information collection and dissemina-
tion’’ in item 3520, added item 3520A, and added heading
for subchapter III, headings for parts A to D of sub-
chapter III, and items 3561 to 3564, 3571, 3572, 3575, 3576,
and 3581 to 3583.
2018—Pub. L. 115–114, § 2(b), Jan. 10, 2018, 131 Stat.
2278, added item 3559.
2014—Pub. L. 113–283, § 2(e)(1), Dec. 18, 2014, 128 Stat.
3086, added heading for subchapter II and items 3551 to
3558 and struck out heading for former subchapter II
and items 3531 to 3538 and heading for subchapter III
and items 3541 to 3549. Prior to amendment, headings
for both subchapters II and III read ‘‘INFORMATION
SECURITY’’ and items under each subchapter were
substantially similar to items 3551 to 3558.
2002—Pub. L. 107–347, title III, § 301(b)(2), Dec. 17, 2002,
116 Stat. 2
Source: Supplied 2024 U.S. Code historical extraction · 44 U.S.C. § 3501
Stored review status: historical_2024_not_currentness_verified. The source passage cites 44 U.S.C. § 3501. This identifies an authority to review, not proof of applicability.
Federal law — U.S. Code and appendices · legal_authorities
Page 372
TITLE 6—DOMESTIC SECURITY
§ 665h
§ 665h. National Cyber Exercise Program
(a) Establishment of program
(1) In general
There is established in the Agency the Na-
tional Cyber Exercise Program (referred to in
this section as the ‘‘Exercise Program’’) to
evaluate the National Cyber Incident Re-
sponse Plan, and other related plans and strat-
egies.
(2) Requirements
(A) In general
The Exercise Program shall be—
(i) based on current risk assessments, in-
cluding credible threats, vulnerabilities,
and consequences;
(ii) designed, to the extent practicable,
to simulate the partial or complete inca-
pacitation of a government or critical in-
frastructure network resulting from a
cyber incident;
(iii) designed to provide for the system-
atic evaluation of cyber readiness and en-
hance operational understanding of the
cyber incident response system and rel-
evant information sharing agreements;
and
(iv) designed to promptly develop after-
action reports and plans that can quickly
incorporate lessons learned into future op-
erations.
(B) Model exercise selection
The Exercise Program shall—
(i) include a selection of model exercises
that government and private entities can
readily adapt for use; and
(ii) aid such governments and private en-
tities with the design, implementation,
and evaluation of exercises that—
(I) conform to the requirements de-
scribed in subparagraph (A);
(II) are consistent with any applicable
national, State, local, or Tribal strategy
or plan; and
(III) provide for systematic evaluation
of readiness.
(3) Consultation
In carrying out the Exercise Program, the
Director may consult with appropriate rep-
resentatives from Sector Risk Management
Agencies, the Office of the National Cyber Di-
rector, cybersecurity research
Source: Supplied 2024 U.S. Code historical extraction · 6 U.S.C. § 665h
Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.