Browse Arkansas Code titles and sections

6 U.S.C. § 681d — Notification and reporting

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 681d — Notification and reporting

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 681d

Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.

Original supplied file — preserved unchanged

Download original Markdown file

File SHA-256: d93b045e39d74a2babfa3a69334b652354416ab4d9c87f5778675cd4f80e1c3b. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.

Authority boundary: historical or unconfirmed source not current law verified.

Open the recorded source website ↗

Record provenance

Stable record: federal_law:legal_authorities:record_usc_e16e0e03b0072daf37b67dd6
Source file: Laws/federal/codes/united-states-code/title-6/section-681d-notification-and-reporting--ec4cb5f8ac.md
Pages: Not recorded – Not recorded
Passage SHA-256: bffca5535bae6ac525b4c8df4c851ce213742060b0c2b8605071e0fb96c27c27

Source location: Title 6, Chapter 1, § 681d; chapter-001-homeland-security-organization.md

Stored source content

**(a) Notification** Upon a declaration or renewal, the Secretary shall immediately notify the National Cyber Director and appropriate congressional committees and include in the notification— (1) an estimation of the planned duration of the declaration; (2) with respect to a notification of a declaration, the reason for the declaration, including information relating to the specific significant incident or imminent specific significant incident, including— (A) the operational or mission impact or anticipated impact of the specific significant incident on Federal and non-Federal entities; (B) if known, the perpetrator of the specific significant incident; and (C) the scope of the Federal and non-Federal entities impacted or anticipated to be impacted by the specific significant incident; (3) with respect to a notification of a renewal, the reason for the renewal; (4) justification as to why available resources, other than the Fund, are insufficient to respond to or mitigate the specific significant incident; and (5) a description of the coordination activities described in [section 677b(b) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section677b/b&num=0&edition=prelim) that the Secretary anticipates the Director to perform. **(b) Report to Congress** Not later than 180 days after the date of a declaration or renewal, the Secretary shall submit to the appropriate congressional committees a report that includes— (1) the reason for the declaration or renewal, including information and intelligence relating to the specific significant incident that led to the declaration or renewal; (2) the use of any funds from the Fund for the purpose of responding to the incident or threat described in paragraph (1); (3) a description of the actions, initiatives, and projects undertaken by the Department and State and local governments and public and private entities in responding to and recovering from the specific significant incident described in paragraph (1); (4) an accounting of the specific obligations and outlays of the Fund; and (5) an analysis of— (A) the impact of the specific significant incident described in paragraph (1) on Federal and non-Federal entities; (B) the impact of the declaration or renewal on the response to, and recovery from, the specific significant incident described in paragraph (1); and (C) the impact of the funds made available from the Fund as a result of the declaration or renewal on the recovery from, and response to, the specific significant incident described in paragraph (1). **(c) Classification** Each notification made under subsection (a) and each report submitted under subsection (b)— (1) shall be in an unclassified form with appropriate markings to indicate information that is exempt from disclosure under [section 552 of title 5](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title5-section552&num=0&edition=prelim) (commonly known as the “Freedom of Information Act”); and (2) may include a classified annex. **(d) Consolidated report** The Secretary shall not be required to submit multiple reports under subsection (b) for multiple declarations or renewals if the Secretary determines that the declarations or renewals substantively relate to the same specific significant incident. **(e) Exemption** The requirements of subchapter I of chapter 35 of title 44 (commonly known as the “Paperwork Reduction Act”) shall not apply to the voluntary collection of information by the Department during an investigation of, a response to, or an immediate post-response review of, the specific significant incident leading to a declaration or renewal.

Cross-references

Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.

Federal law — U.S. Code and appendices · legal_authorities

5 U.S.C. § 552 — Public information; agency rules, opinions, orders, records, and proceedings

**(a)** Each agency shall make available to the public information as follows: (1) Each agency shall separately state and currently publish in the Federal Register for the guidance of the public— (A) descriptions of its central and field organization and the established places at which, the employees (and in the case of a uniformed service, the members) from whom, and the methods whereby, the public may obtain information, make submittals or requests, or obtain decisions; (B) statements of the general course and method by which its functions are channeled and determined, including the nature and requirements of all formal and informal procedures available; (C) rules of procedure, descriptions of forms available or the places at which forms may be obtained, and instructions as to the scope and contents of all papers, reports, or examinations; (D) substantive rules of general applicability adopted as authorized by law, and statements of general policy or interpretations of general applicability formulated and adopted by the agency; and (E) each amendment, revision, or repeal of the foregoing. Except to the extent that a person has actual and timely notice of the terms thereof, a person may not in any manner be required to resort to, or be adversely affected by, a matter required to be published in the Federal Register and not so published. For the purpose of this paragraph, matter reasonably available to the class of persons affected thereby is deemed published in the Federal Register when incorporated by reference therein with the approval of the Director of the Federal Register. (2) Each agency, in accordance with published rules, shall make available for public inspection in an electronic format— (A) final opinions, including concurring and dissen

Source: Supplied U.S. Code snapshot — release unconfirmed · 5 U.S.C. § 552

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 101 — Cyber incident review

**(a) Activities** The Center shall— (1) receive, aggregate, analyze, and secure, using processes consistent with the processes developed pursuant to the Cybersecurity Information Sharing Act of 2015 ([6 U.S.C. 1501](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section1501&num=0&edition=prelim) et seq.) reports from covered entities related to a covered cyber incident to assess the effectiveness of security controls, identify tactics, techniques, and procedures adversaries use to overcome those controls and other cybersecurity purposes, including to assess potential impact of cyber incidents on public health and safety and to enhance situational awareness of cyber threats across critical infrastructure sectors; (2) coordinate and share information with appropriate Federal departments and agencies to identify and track ransom payments, including those utilizing virtual currencies; (3) leverage information gathered about cyber incidents to— (A) enhance the quality and effectiveness of information sharing and coordination efforts with appropriate entities, including agencies, sector coordinating councils, Information Sharing and Analysis Organizations, State, local, Tribal, and territorial governments, technology providers, critical infrastructure owners and operators, cybersecurity and cyber incident response firms, and security researchers; and (B) provide appropriate entities, including sector coordinating councils, Information Sharing and Analysis Organizations, State, local, Tribal, and territorial governments, technology providers, cybersecurity and cyber incident response firms, and security researchers, with timely, actionable, and anonymized reports of cyber incident campaigns and trends, including, to the maximum extent practicable

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 101

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 102 — Required reporting of certain cyber incidents

**(a) In general** (1) **Covered cyber incident reports** (A) *In general* — A covered entity that experiences a covered cyber incident shall report the covered cyber incident to the Agency not later than 72 hours after the covered entity reasonably believes that the covered cyber incident has occurred. (B) *Limitation* — The Director may not require reporting under subparagraph (A) any earlier than 72 hours after the covered entity reasonably believes that a covered cyber incident has occurred. (2) **Ransom payment reports** (A) *In general* — A covered entity that makes a ransom payment as the result of a ransomware attack against the covered entity shall report the payment to the Agency not later than 24 hours after the ransom payment has been made. (B) *Application* — The requirements under subparagraph (A) shall apply even if the ransomware attack is not a covered cyber incident subject to the reporting requirements under paragraph (1). (3) **Supplemental reports** — A covered entity shall promptly submit to the Agency an update or supplement to a previously submitted covered cyber incident report if substantial new or different information becomes available or if the covered entity makes a ransom payment after submitting a covered cyber incident report required under paragraph (1), until such date that such covered entity notifies the Agency that the covered cyber incident at issue has concluded and has been fully mitigated and resolved. (4) **Preservation of information** — Any covered entity subject to requirements of paragraph (1), (2), or (3) shall preserve data relevant to the covered cyber incident or ransom payment in accordance with procedures established in the final rule issued pursuant to subsection (b). (5) **Exceptions** (A) *Repor

Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 102

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

6 U.S.C. § 681d — Noncompliance with required reporting

Page 390 TITLE 6—DOMESTIC SECURITY § 681c service to customers to make or facilitate ran- som payments on behalf of covered entities impacted by ransomware attacks and other appropriate entities of the requirements of paragraphs (1), (2), and (3) of subsection (a). (2) Elements The outreach and education campaign under paragraph (1) shall include the following: (A) An overview of the final rule issued pursuant to subsection (b). (B) An overview of mechanisms to submit to the Agency covered cyber incident re- ports, ransom payment reports, and informa- tion relating to the disclosure, retention, and use of covered cyber incident reports and ransom payment reports under this sec- tion. (C) An overview of the protections afforded to covered entities for complying with the requirements under paragraphs (1), (2), and (3) of subsection (a). (D) An overview of the steps taken under section 681d of this title when a covered en- tity is not in compliance with the reporting requirements under subsection (a). (E) Specific outreach to cybersecurity ven- dors, cyber incident response providers, cybersecurity insurance entities, and other entities that may support covered entities. (F) An overview of the privacy and civil liberties requirements in this part. (3) Coordination In conducting the outreach and education campaign required under paragraph (1), the Agency may coordinate with— (A) the Critical Infrastructure Partnership Advisory Council established under section 451 of this title; (B) Information Sharing and Analysis Or- ganizations; (C) trade associations; (D) information sharing and analysis cen- ters; (E) sector coordinating councils; and (F) any other entity as determined appro- priate by the Director. (f) Exemption Sections 3506(c),

Source: Supplied 2024 U.S. Code historical extraction · 6 U.S.C. § 681d

Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.