Arkansas Legal Resource Navigator

44 U.S.C. § 3556 — Federal information security incident center

Federal law — U.S. Code and appendices · legal_authorities

44 U.S.C. § 3556 — Federal information security incident center

**(a) In General.—** The Secretary shall ensure the operation of a central Federal information security incident center to— (1) provide timely technical assistance to operators of agency information systems regarding security incidents, including guidance on detecting and handling information security incidents; (2) compile and analyze information about incidents that threaten information security; (3) inform operators of agency information systems about current and potential information security threats, and vulnerabilities; (4) provide, as appropriate, intelligence and other information about cyber threats, vulnerabilities, and incidents to agencies to assist in risk assessments conducted under section 3554(b); and (5) consult with the National Institute of Standards and Technology, agencies or offices operating or exercising control of national security systems (including the National Security Agency), and such other agencies or offices in accordance with law and as directed by the President regarding information security incidents and related matters. **(b) National Security Systems.—** Each agency operating or exercising control of a national security system shall share information about information security incidents, threats, and vulnerabilities with the Federal information security incident center to the extent consistent with standards and guidelines for national security systems, issued in accordance with law and as directed by the President.

Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3556

Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.

Original supplied file — preserved unchanged

Download original Markdown file

File SHA-256: f16ad3991c1a810580eb33d4f99330ce2cb114bdbef5a4eb02901257ccb9bff9. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.

Authority boundary: historical or unconfirmed source not current law verified.

Open the recorded source website ↗

Record provenance

Stable record: federal_law:legal_authorities:record_usc_9fe49e7740247f99fdddbb09
Source file: Laws/federal/codes/united-states-code/title-44/section-3556-federal-information-security-incident-center--78e64447c5.md
Pages: Not recorded – Not recorded
Passage SHA-256: ded4b42387e958689c1d09f204a578c4993878789010cd71026d3666917462e1

Source location: Title 44, Chapter 35, § 3556; chapter-035-coordination-of-federal-information-policy.md

Stored source content

**(a) In General.—** The Secretary shall ensure the operation of a central Federal information security incident center to— (1) provide timely technical assistance to operators of agency information systems regarding security incidents, including guidance on detecting and handling information security incidents; (2) compile and analyze information about incidents that threaten information security; (3) inform operators of agency information systems about current and potential information security threats, and vulnerabilities; (4) provide, as appropriate, intelligence and other information about cyber threats, vulnerabilities, and incidents to agencies to assist in risk assessments conducted under section 3554(b); and (5) consult with the National Institute of Standards and Technology, agencies or offices operating or exercising control of national security systems (including the National Security Agency), and such other agencies or offices in accordance with law and as directed by the President regarding information security incidents and related matters. **(b) National Security Systems.—** Each agency operating or exercising control of a national security system shall share information about information security incidents, threats, and vulnerabilities with the Federal information security incident center to the extent consistent with standards and guidelines for national security systems, issued in accordance with law and as directed by the President.

Cross-references

Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.

Federal law — U.S. Code and appendices · legal_authorities

44 U.S.C. § 3531 to 3549 — Repealed. Pub. L. 113–283, § 2(a), Dec. 18, 2014, 128 Stat. 3073]

### Statutory Notes Sections 3531 to 3538 comprised subchapter II of this chapter “INFORMATION SECURITY”. Section 3531, added Pub. L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat. 2259, set forth purposes of subchapter II. See [section 3551 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3551&num=0&edition=prelim). A prior section 3531, added Pub. L. 106–398, § 1 [[div. A], title X, § 1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266, set forth purposes of subchapter II prior to the general amendment of subchapter II by Pub. L. 107–296. Section 3532, added Pub. L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat. 2260, related to definitions applicable to subchapter II. See [section 3552 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3552&num=0&edition=prelim). A prior section 3532, added Pub. L. 106–398, § 1 [[div. A], title X, § 1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266, related to definitions applicable to subchapter II prior to the general amendment of subchapter II by Pub. L. 107–296. Section 3533, added Pub. L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat. 2261, set forth authority and functions of the Director. See [section 3553 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3553&num=0&edition=prelim). A prior section 3533, added Pub. L. 106–398, § 1 [[div. A], title X, § 1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266, set forth authority and functions of the Director prior to the general amendment of subchapter II by Pub. L. 107–296. Section 3534, added Pub. L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat. 2262, related to Federal agency responsibilities. See [section 3554 of this

Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3531 to 3549

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

44 U.S.C. § 3556 — Federal information security incident cen-

Page 193 TITLE 44—PUBLIC PRINTING AND DOCUMENTS § 3556 by an independent external auditor, as deter- mined by the Inspector General of the agency; and (2) for each agency to which paragraph (1) does not apply, the head of the agency shall engage an independent external auditor to per- form the evaluation. (c) NATIONAL SECURITY SYSTEMS.—For each agency operating or exercising control of a na- tional security system, that portion of the eval- uation required by this section directly relating to a national security system shall be per- formed— (1) only by an entity designated by the agen- cy head; and (2) in such a manner as to ensure appropriate protection for information associated with any information security vulnerability in such system commensurate with the risk and in ac- cordance with all applicable laws. (d) EXISTING EVALUATIONS.—The evaluation re- quired by this section may be based in whole or in part on an audit, evaluation, or report relat- ing to programs or practices of the applicable agency. (e) AGENCY REPORTING.—(1) Each year, not later than such date established by the Director, the head of each agency shall submit to the Di- rector the results of the evaluation required under this section. (2) To the extent an evaluation required under this section directly relates to a national secu- rity system, the evaluation results submitted to the Director shall contain only a summary and assessment of that portion of the evaluation di- rectly relating to a national security system. (f) PROTECTION OF INFORMATION.—Agencies and evaluators shall take appropriate steps to en- sure the protection of information which, if dis- closed, may adversely affect information secu- rity. Such protections shall be commensurate with the risk and comply with a

Source: Supplied 2024 U.S. Code historical extraction · 44 U.S.C. § 3556

Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.