Browse Arkansas Code titles and sections

6 U.S.C. § 681c — Cyber Response and Recovery Fund

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 681c — Cyber Response and Recovery Fund

**(a) In general** There is established a Cyber Response and Recovery Fund, which shall be available for— (1) the coordination of activities described in [section 677b(b) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section677b/b&num=0&edition=prelim); (2) response and recovery support for the specific significant incident associated with a declaration to Federal, State, local, and Tribal, entities and public and private entities on a reimbursable or non-reimbursable basis, including through asset response activities and technical assistance, such as— (A) vulnerability assessments and mitigation; (B) technical incident mitigation; (C) malware analysis; (D) analytic support; (E) threat detection and hunting; and (F) network protections; (3) as the Director determines appropriate, grants for, or cooperative agreements with, Federal, State, local, and Tribal public and private entities to respond to, and recover from, the specific significant incident associated with a declaration, such as— (A) hardware or software to replace, update, improve, harden, or enhance the functionality of existing hardware, software, or systems; and (B) technical contract personnel support; and (4) advance actions taken by the Secretary under [section 677b(f)(1)(B) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section677b/f/1/B&num=0&edition=prelim). **(b) Deposits and expenditures** (1) **In general** — Amounts shall be deposited into the Fund from— (A) appropriations to the Fund for activities of the Fund; and (B) reimbursement from Federal agencies for the activities described in paragraphs (1), (2), and (4) of subsection (a), which shall only be from amounts made available in advanc

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 681c

Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.

Original supplied file — preserved unchanged

Download original Markdown file

File SHA-256: c3e5f05aa817a35e5745eead46bc7e070f5c8b85b01461c6cc1d13c429d84fa4. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.

Authority boundary: historical or unconfirmed source not current law verified.

Open the recorded source website ↗

Record provenance

Stable record: federal_law:legal_authorities:record_usc_a0e80961b5a367e91ac573e3
Source file: Laws/federal/codes/united-states-code/title-6/section-681c-cyber-response-and-recovery-fund--b8bdeecc9d.md
Pages: Not recorded – Not recorded
Passage SHA-256: 75e45ae4f5ebcae5bcfdc9c4fde8bfcd2f51da3c2de14a692e5b16402c2d80a0

Source location: Title 6, Chapter 1, § 681c; chapter-001-homeland-security-organization.md

Stored source content

Cross-references

Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 101 — Cyber incident review

**(a) Activities** The Center shall— (1) receive, aggregate, analyze, and secure, using processes consistent with the processes developed pursuant to the Cybersecurity Information Sharing Act of 2015 ([6 U.S.C. 1501](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section1501&num=0&edition=prelim) et seq.) reports from covered entities related to a covered cyber incident to assess the effectiveness of security controls, identify tactics, techniques, and procedures adversaries use to overcome those controls and other cybersecurity purposes, including to assess potential impact of cyber incidents on public health and safety and to enhance situational awareness of cyber threats across critical infrastructure sectors; (2) coordinate and share information with appropriate Federal departments and agencies to identify and track ransom payments, including those utilizing virtual currencies; (3) leverage information gathered about cyber incidents to— (A) enhance the quality and effectiveness of information sharing and coordination efforts with appropriate entities, including agencies, sector coordinating councils, Information Sharing and Analysis Organizations, State, local, Tribal, and territorial governments, technology providers, critical infrastructure owners and operators, cybersecurity and cyber incident response firms, and security researchers; and (B) provide appropriate entities, including sector coordinating councils, Information Sharing and Analysis Organizations, State, local, Tribal, and territorial governments, technology providers, cybersecurity and cyber incident response firms, and security researchers, with timely, actionable, and anonymized reports of cyber incident campaigns and trends, including, to the maximum extent practicable

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 101

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 104 — Information shared with or provided to the Federal Government

**(a) Disclosure, retention, and use** (1) **Authorized activities** — Information provided to the Agency pursuant to section 681b or 681c of this title may be disclosed to, retained by, and used by, consistent with otherwise applicable provisions of Federal law, any Federal agency or department, component, officer, employee, or agent of the Federal Government solely for— (A) a cybersecurity purpose; (B) the purpose of identifying— (i) a cyber threat, including the source of the cyber threat; or (ii) a security vulnerability; (C) the purpose of responding to, or otherwise preventing or mitigating, a specific threat of death, a specific threat of serious bodily harm, or a specific threat of serious economic harm, including a terrorist act or use of a weapon of mass destruction; (D) the purpose of responding to, investigating, prosecuting, or otherwise preventing or mitigating, a serious threat to a minor, including sexual exploitation and threats to physical safety; or (E) the purpose of preventing, investigating, disrupting, or prosecuting an offense arising out of a cyber incident reported pursuant to section 681b or 681c of this title or any of the offenses listed in [section 1504(d)(5)(A)(v) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section1504/d/5/A/v&num=0&edition=prelim). (2) **Agency actions after receipt** (A) *Rapid, confidential sharing of cyber threat indicators* — Upon receiving a covered cyber incident or ransom payment report submitted pursuant to this section, the Agency shall immediately review the report to determine whether the cyber incident that is the subject of the report is connected to an ongoing cyber threat or security vulnerability and where applicable, use such report to i

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 104

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 681c — Voluntary reporting of other cyber inci-

Page 390 TITLE 6—DOMESTIC SECURITY § 681c service to customers to make or facilitate ran- som payments on behalf of covered entities impacted by ransomware attacks and other appropriate entities of the requirements of paragraphs (1), (2), and (3) of subsection (a). (2) Elements The outreach and education campaign under paragraph (1) shall include the following: (A) An overview of the final rule issued pursuant to subsection (b). (B) An overview of mechanisms to submit to the Agency covered cyber incident re- ports, ransom payment reports, and informa- tion relating to the disclosure, retention, and use of covered cyber incident reports and ransom payment reports under this sec- tion. (C) An overview of the protections afforded to covered entities for complying with the requirements under paragraphs (1), (2), and (3) of subsection (a). (D) An overview of the steps taken under section 681d of this title when a covered en- tity is not in compliance with the reporting requirements under subsection (a). (E) Specific outreach to cybersecurity ven- dors, cyber incident response providers, cybersecurity insurance entities, and other entities that may support covered entities. (F) An overview of the privacy and civil liberties requirements in this part. (3) Coordination In conducting the outreach and education campaign required under paragraph (1), the Agency may coordinate with— (A) the Critical Infrastructure Partnership Advisory Council established under section 451 of this title; (B) Information Sharing and Analysis Or- ganizations; (C) trade associations; (D) information sharing and analysis cen- ters; (E) sector coordinating councils; and (F) any other entity as determined appro- priate by the Director. (f) Exemption Sections 3506(c),

Source: Supplied 2024 U.S. Code historical extraction · 6 U.S.C. § 681c

Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.