Browse Arkansas Code titles and sections
6 U.S.C. § 1522 — Advanced internal defenses
Federal law — U.S. Code and appendices · legal_authorities
**(a) Advanced network security tools**
(1) **In general** — The Secretary shall include, in the efforts of the Department to continuously diagnose and mitigate cybersecurity risks, advanced network security tools to improve visibility of network activity, including through the use of commercial and free or open source tools, and to detect and mitigate intrusions and anomalous activity.
(2) **Development of plan** — The Director shall develop and the Secretary shall implement a plan to ensure that each agency utilizes advanced network security tools, including those described in paragraph (1), to detect and mitigate intrusions and anomalous activity.
**(b) Prioritizing advanced security tools** The Director and the Secretary, in consultation with appropriate agencies, shall—
(1) review and update Government-wide policies and programs to ensure appropriate prioritization and use of network security monitoring tools within agency networks; and
(2) brief appropriate congressional committees on such prioritization and use.
**(c) Improved metrics** The Secretary, in collaboration with the Director, shall review and update the metrics used to measure security under [section 3554 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3554&num=0&edition=prelim) to include measures of intrusion and incident detection and response times.
**(d) Transparency and accountability** The Director, in consultation with the Secretary, shall increase transparency to the public on agency cybersecurity posture, including by increasing the number of metrics available on Federal Government performance websites and, to the greatest extent practicable, displaying metrics for department components, small agencies, and micro-agencies.
**(e) Omitted**
**(f
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 1522
Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.
Original supplied file — preserved unchanged
Download original Markdown file
File SHA-256: 601cc07a7af0a65047692b1fdb9606a1381c68a6b443fe198550b910fe31d0c1. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.
Authority boundary: historical or unconfirmed source not current law verified.
Open the recorded source website ↗
Record provenance
Stable record: federal_law:legal_authorities:record_usc_ba1ab50e43f37dbba879e430
Source file: Laws/federal/codes/united-states-code/title-6/section-1522-advanced-internal-defenses--61e004622f.md
Pages: Not recorded – Not recorded
Passage SHA-256: 1618be7e3dedacfd36e954f720aa06dfb61a38ccfa63a65d658b5ecd6aae36f6
Source location: Title 6, Chapter 6, § 1522; chapter-006-cybersecurity.md
Stored source content
**(a) Advanced network security tools**
(1) **In general** — The Secretary shall include, in the efforts of the Department to continuously diagnose and mitigate cybersecurity risks, advanced network security tools to improve visibility of network activity, including through the use of commercial and free or open source tools, and to detect and mitigate intrusions and anomalous activity.
(2) **Development of plan** — The Director shall develop and the Secretary shall implement a plan to ensure that each agency utilizes advanced network security tools, including those described in paragraph (1), to detect and mitigate intrusions and anomalous activity.
**(b) Prioritizing advanced security tools** The Director and the Secretary, in consultation with appropriate agencies, shall—
(1) review and update Government-wide policies and programs to ensure appropriate prioritization and use of network security monitoring tools within agency networks; and
(2) brief appropriate congressional committees on such prioritization and use.
**(c) Improved metrics** The Secretary, in collaboration with the Director, shall review and update the metrics used to measure security under [section 3554 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3554&num=0&edition=prelim) to include measures of intrusion and incident detection and response times.
**(d) Transparency and accountability** The Director, in consultation with the Secretary, shall increase transparency to the public on agency cybersecurity posture, including by increasing the number of metrics available on Federal Government performance websites and, to the greatest extent practicable, displaying metrics for department components, small agencies, and micro-agencies.
**(e) Omitted**
**(f) Exception** The requirements under this section shall not apply to the Department of Defense, a national security system, or an element of the intelligence community.
Cross-references
Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.
Federal law — U.S. Code and appendices · legal_authorities
**(a) In General.—** The head of each agency shall—
(1) be responsible for—
(A) providing information security protections commensurate with the risk and magnitude of the harm resulting from unauthorized access, use, disclosure, disruption, modification, or destruction of—
(i) information collected or maintained by or on behalf of the agency; and
(ii) information systems used or operated by an agency or by a contractor of an agency or other organization on behalf of an agency;
(B) complying with the requirements of this subchapter, subchapter III of chapter 13 of title 41, and related policies, procedures, standards, and guidelines, including—
(i) information security standards promulgated under [section 11331 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11331&num=0&edition=prelim);
(ii) operational directives developed by the Secretary under section 3553(b);
(iii) policies and procedures issued by the Director;
(iv) information security standards and guidelines for national security systems issued in accordance with law and as directed by the President;
(v) emergency directives issued by the Secretary under section 3553(h); and
(vi) responsibilities relating to assessing and avoiding, mitigating, transferring, or accepting supply chain risks under [section 1326 of title 41](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section1326&num=0&edition=prelim), and complying with exclusion and removal orders issued under section 1323 of such title; and
(C) ensuring that information security management processes are integrated with agency strategic, operational, and budgetary planning processes;
(2) ensure that senior agency officials provide information securit
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3554
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Director.—** The Director shall oversee agency information security policies and practices, including—
(1) developing and overseeing the implementation of policies, principles, standards, and guidelines on information security, including through ensuring timely agency adoption of and compliance with standards promulgated under [section 11331 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11331&num=0&edition=prelim);
(2) requiring agencies, consistent with the standards promulgated under such section 11331 and the requirements of this subchapter, to identify and provide information security protections commensurate with the risk and magnitude of the harm resulting from the unauthorized access, use, disclosure, disruption, modification, or destruction of—
(A) information collected or maintained by or on behalf of an agency; or
(B) information systems used or operated by an agency or by a contractor of an agency or other organization on behalf of an agency;
(3) ensuring that the Secretary carries out the authorities and functions under subsection (b);
(4) coordinating the development of standards and guidelines under section 20 of the National Institute of Standards and Technology Act ([15 U.S.C. 278g–3](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section278g–3&num=0&edition=prelim)) with agencies and offices operating or exercising control of national security systems (including the National Security Agency) to assure, to the maximum extent feasible, that such standards and guidelines are complementary with standards and guidelines developed for national security systems;
(5) overseeing agency compliance with the requirements of this subchapter and [section 1326 of title 41](https://uscode
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3553
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
Page 511
TITLE 6—DOMESTIC SECURITY
§ 1523
1 See References in Text note below.
SUBCHAPTER II—FEDERAL
CYBERSECURITY ENHANCEMENT
§ 1521. Definitions
In this subchapter:
(1) Agency
The term ‘‘agency’’ has the meaning given
the term in section 3502 of title 44.
(2) Agency information system
The term ‘‘agency information system’’ has
the meaning given the term in section 660 of
this title.
(3) Appropriate congressional committees
The term ‘‘appropriate congressional com-
mittees’’ means—
(A) the Committee on Homeland Security
and Governmental Affairs of the Senate; and
(B) the Committee on Homeland Security
of the House of Representatives.
(4) Cybersecurity risk; information system
The terms ‘‘cybersecurity risk’’ and ‘‘infor-
mation system’’ have the meanings given
those terms in section 650 of this title.
(5) Director
The term ‘‘Director’’ means the Director of
the Office of Management and Budget.
(6) Intelligence community
The term ‘‘intelligence community’’ has the
meaning given the term in section 3003(4) of
title 50.
(7) National security system
The term ‘‘national security system’’ has
the meaning given the term in section 11103 of
title 40.
(8) Secretary
The term ‘‘Secretary’’ means the Secretary
of Homeland Security.
(Pub. L. 114–113, div. N, title II, § 222, Dec. 18,
2015, 129 Stat. 2963; Pub. L. 115–278, § 2(h)(1)(D),
Nov. 16, 2018, 132 Stat. 4182; Pub. L. 117–263, div.
G, title LXXI, § 7143(d)(1)(A), Dec. 23, 2022, 136
Stat. 3663.)
Editorial Notes
REFERENCES IN TEXT
This subchapter, referred to in text, was in the origi-
nal ‘‘this subtitle’’, meaning subtitle B (§§ 221–229) of
title II of div. N of Pub. L. 114–113, which is classified
principally to this subchapter. For complete classifica-
tion of subtitle B to the Code
Source: Supplied 2024 U.S. Code historical extraction · 6 U.S.C. § 1522
Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.