Browse Arkansas Code titles and sections
6 U.S.C. § 663 — Enhancement of Federal and non-Federal cybersecurity
Federal law — U.S. Code and appendices · legal_authorities
In carrying out the responsibilities under [section 652 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section652&num=0&edition=prelim), the Director of the Cybersecurity and Infrastructure Security Agency shall—
(1) as appropriate, provide to State and local government entities, and upon request to private entities that own or operate critical information systems—
(A) analysis and warnings related to threats to, and vulnerabilities of, critical information systems; and
(B) in coordination with the Under Secretary for Emergency Preparedness and Response, crisis management support in response to threats to, or attacks on, critical information systems;
(2) as appropriate, provide technical assistance, upon request, to the private sector and other government entities, in coordination with the Under Secretary for Emergency Preparedness and Response, with respect to emergency recovery plans to respond to major failures of critical information systems; and
(3) fulfill the responsibilities of the Secretary to protect Federal information systems under subchapter II of chapter 35 of title 44.
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 663
Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.
Original supplied file — preserved unchanged
Download original Markdown file
File SHA-256: 4fdea95761f3cc2ebac673eaf9214e8558e24eedd76bf878a0a9978c7b7d70bc. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.
Authority boundary: historical or unconfirmed source not current law verified.
Open the recorded source website ↗
Record provenance
Stable record: federal_law:legal_authorities:record_usc_92707026370856c07a1b30ca
Source file: Laws/federal/codes/united-states-code/title-6/section-663-enhancement-of-federal-and-non-federal-cybersecurity--300ffbb2df.md
Pages: Not recorded – Not recorded
Passage SHA-256: ad36af9e4d831b01c00857c30ab1a543c61cec305235e297ad5e52f90b3b4686
Source location: Title 6, Chapter 1, § 663; chapter-001-homeland-security-organization.md
Stored source content
In carrying out the responsibilities under [section 652 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section652&num=0&edition=prelim), the Director of the Cybersecurity and Infrastructure Security Agency shall—
(1) as appropriate, provide to State and local government entities, and upon request to private entities that own or operate critical information systems—
(A) analysis and warnings related to threats to, and vulnerabilities of, critical information systems; and
(B) in coordination with the Under Secretary for Emergency Preparedness and Response, crisis management support in response to threats to, or attacks on, critical information systems;
(2) as appropriate, provide technical assistance, upon request, to the private sector and other government entities, in coordination with the Under Secretary for Emergency Preparedness and Response, with respect to emergency recovery plans to respond to major failures of critical information systems; and
(3) fulfill the responsibilities of the Secretary to protect Federal information systems under subchapter II of chapter 35 of title 44.
Cross-references
Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.
Federal law — U.S. Code and appendices · legal_authorities
As used in this subchapter—
(1) the term “agency” means any executive department, military department, Government corporation, Government controlled corporation, or other establishment in the executive branch of the Government (including the Executive Office of the President), or any independent regulatory agency, but does not include—
(A) the Government Accountability Office;
(B) Federal Election Commission;
(C) the governments of the District of Columbia and of the territories and possessions of the United States, and their various subdivisions; or
(D) Government-owned contractor-operated facilities, including laboratories engaged in national defense research and production activities;
(2) the term “burden” means time, effort, or financial resources expended by persons to generate, maintain, or provide information to or for a Federal agency, including the resources expended for—
(A) reviewing instructions;
(B) acquiring, installing, and utilizing technology and systems;
(C) adjusting the existing ways to comply with any previously applicable instructions and requirements;
(D) searching data sources;
(E) completing and reviewing the collection of information; and
(F) transmitting, or otherwise disclosing the information;
(3) the term “collection of information”—
(A) means the obtaining, causing to be obtained, soliciting, or requiring the disclosure to third parties or the public, of facts or opinions by or for an agency, regardless of form or format, calling for either—
(i) answers to identical questions posed to, or identical reporting or recordkeeping requirements imposed on, ten or more persons, other than agencies, instrumentalities, or employees of the United States; or
(ii) answers to questions posed to agencies, ins
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3502
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
In this subchapter:
(1) **Department** — The term “Department” means the Department of Homeland Security.
(2) **Human trafficking** — The term “human trafficking” means an act or practice described in paragraph (9) or (10) 11 See References in Text note below. of [section 7102 of title 22](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title22-section7102&num=0&edition=prelim).
(3) **Secretary** — The term “Secretary” means the Secretary of Homeland Security.
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 652
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Annual analysis** For each fiscal year, beginning in fiscal year 2023, the Director of the Office of Management and Budget, in consultation with the Secretary of Health and Human Services shall—
(1) conduct a detailed and comprehensive analysis of Federal biodefense programs; and
(2) develop an integrated biodefense budget submission.
**(b) Definition of biodefense** In accordance with the National Biodefense Strategy, the Director shall develop and disseminate to all Federal departments and agencies a unified definition of the term “biodefense” to identify which programs and activities are included in the annual budget submission required under subsection (a).
**(c) Requirements for analysis** The analysis required under subsection (a) shall include—
(1) the display of all funds requested for biodefense activities, both mandatory and discretionary, by agency and categorized by biodefense enterprise element, such as threat awareness, prevention, deterrence, preparedness, surveillance and detection, response, attribution (including bioforensic capabilities), recovery, and mitigation; and
(2) detailed explanations of how each program and activity included aligns with biodefense goals and objectives as part of the National Biodefense Strategy required under [section 104 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section104&num=0&edition=prelim).
**(d) Submittal to Congress** The Director, in consultation with the Secretary of Health and Human Services, shall submit to Congress the analysis required under subsection (a) for a fiscal year concurrently with the President’s annual budget request for that fiscal year.
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 121
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
In this part:
(1) **Center** — The term “Center” means the center established under [section 659 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section659&num=0&edition=prelim).
(2) **Council** — The term “Council” means the Cyber Incident Reporting Council described in [section 681f of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681f&num=0&edition=prelim).
(3) **Covered cyber incident** — The term “covered cyber incident” means a substantial cyber incident experienced by a covered entity that satisfies the definition and criteria established by the Director in the final rule issued pursuant to [section 681b(b) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681b/b&num=0&edition=prelim).
(4) **Covered entity** — The term “covered entity” means an entity in a critical infrastructure sector, as defined in Presidential Policy Directive 21, that satisfies the definition established by the Director in the final rule issued pursuant to [section 681b(b) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section681b/b&num=0&edition=prelim).
(5) **Cyber incident** — The term “cyber incident”—
(A) has the meaning given the term “incident” in section 659 11 See References in Text note below. of this title; and
(B) does not include an occurrence that imminently, but not actually, jeopardizes—
(i) information on information systems; or
(ii) information systems.
(6) **Cyber threat** — The term “cyber threat” has the meaning given the term “cybersecurity threat” in [section 650 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section650&num=0&edition=prelim).
(7) **Federal entit
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 650
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
In this subtitle, the term “Administrator” means the Administrator for Federal Procurement Policy appointed under [section 1102 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section1102&num=0&edition=prelim).
Source: Supplied U.S. Code snapshot — release unconfirmed · 41 U.S.C. § 101
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Definitions** In this section:
(1) **Agency information** — The term “agency information” has the meaning given the term in section 2213 of the Homeland Security Act of 2002 [[6 U.S.C. 663](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section663&num=0&edition=prelim)].
(2) **Cyber threat indicator; defensive measure** — The terms “cyber threat indicator” and “defensive measure” have the meanings given those terms in [section 650 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section650&num=0&edition=prelim).
(3) **Intrusion assessments** — The term “intrusion assessments” means actions taken under the intrusion assessment plan to identify and remove intruders in agency information systems.
(4) **Intrusion assessment plan** — The term “intrusion assessment plan” means the plan required under section 2210(b)(1) of the Homeland Security Act of 2002 [[6 U.S.C. 660(b)(1)](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section660/b/1&num=0&edition=prelim)].
(5) **Intrusion detection and prevention capabilities** — The term “intrusion detection and prevention capabilities” means the capabilities required under section 2213(b) of the Homeland Security Act of 2002 [[6 U.S.C. 663(b)](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section663/b&num=0&edition=prelim)].
**(b) Third-party assessment** Not later than 3 years after December 18, 2015, the Comptroller General of the United States shall conduct a study and publish a report on the effectiveness of the approach and strategy of the Federal Government to securing agency information systems, including the intrusion detection and prevention capabilities and the intrusion assessment plan.
**(c) Reports to Congress**
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 1524
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) In general** The authority provided under [section 663 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section663&num=0&edition=prelim), and the reporting requirements under [section 1524(c) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section1524/c&num=0&edition=prelim) shall terminate on September 30, 2025.
**(b) Rule of construction** Nothing in subsection (a) shall be construed to affect the limitation of liability of a private entity for assistance provided to the Secretary under section 663(d)(2) 11 So in original. Probably should be “663(c)(2)”. of this title, if such assistance was rendered before the termination date under subsection (a) or otherwise during a period in which the assistance was authorized.
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 1525
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
### Statutory Notes
#### Codification
Section 147, Pub. L. 107–296, title II, § 226, as added Pub. L. 113–277, § 3(a), Dec. 18, 2014, 128 Stat. 3005, which related to cybersecurity recruitment and retention, was renumbered section 2208 of Pub. L. 107–296 by Pub. L. 115–278, § 2(g)(2)(I), Nov. 16, 2018, 132 Stat. 4178, and transferred to [section 658 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section658&num=0&edition=prelim).
Section 148, Pub. L. 107–296, title II, § 227, formerly § 226, as added Pub. L. 113–282, § 3(a), Dec. 18, 2014, 128 Stat. 3066; renumbered § 227 and amended Pub. L. 114–113, div. N, title II, §§ 203, 223(a)(3), Dec. 18, 2015, 129 Stat. 2957, 2963; Pub. L. 114–328, div. A, title XVIII, § 1841(b), Dec. 23, 2016, 130 Stat. 2663, which related to national cybersecurity and communications integration center, was renumbered section 2209 of Pub. L. 107–296 by Pub. L. 115–278, § 2(g)(2)(I), Nov. 16, 2018, 132 Stat. 4178, and transferred to [section 659 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section659&num=0&edition=prelim).
A prior section 227 of Pub. L. 107–296, as added by Pub. L. 113–282, § 7(a), Dec. 18, 2014, 128 Stat. 3070, was classified to [section 149 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section149&num=0&edition=prelim) prior to redesignation by Pub. L. 114–113 as section 228(c) of Pub. L. 107–296, and was classified to [section 149(c) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section149/c&num=0&edition=prelim) prior to further redesignation by Pub. L. 115–278 as section 2210(c) of Pub. L. 107–296, which is classified to [section 660(c) of this title](https://uscode.house.gov/v
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 182
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
Page 351
TITLE 6—DOMESTIC SECURITY
§ 663
1 So in original. Probably should be followed by ‘‘and’’.
2 So in original. The ‘‘; and’’ probably should be a period.
§ 663. Federal intrusion detection and prevention
system
(a) Definitions
In this section—
(1) the term ‘‘agency’’ has the meaning given
the term in section 3502 of title 44;
(2) the term ‘‘agency information’’ means in-
formation collected or maintained by or on be-
half of an agency; 1
(3) the term ‘‘agency information system’’
has the meaning given the term in section 660
of this title; and 2
(b) Requirement
(1) In general
Not later than 1 year after December 18,
2015, the Secretary shall deploy, operate, and
maintain, to make available for use by any
agency, with or without reimbursement—
(A) a capability to detect cybersecurity
risks in network traffic transiting or trav-
eling to or from an agency information sys-
tem; and
(B) a capability to prevent network traffic
associated with such cybersecurity risks
from transiting or traveling to or from an
agency information system or modify such
network traffic to remove the cybersecurity
risk.
(2) Regular improvement
The Secretary shall regularly deploy new
technologies and modify existing technologies
to the intrusion detection and prevention ca-
pabilities described in paragraph (1) as appro-
priate to improve the intrusion detection and
prevention capabilities.
(c) Activities
In carrying out subsection (b), the Secretary—
(1) may access, and the head of an agency
may disclose to the Secretary or a private en-
tity providing assistance to the Secretary
under paragraph (2), information transiting or
traveling to or from an agency information
system, regardless of the location from which
the Secretary or a private entity providin
Source: Supplied 2024 U.S. Code historical extraction · 6 U.S.C. § 663
Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.