Browse Arkansas Code titles and sections
44 U.S.C. § 3551 — Purposes
Federal law — U.S. Code and appendices · legal_authorities
The purposes of this subchapter are to—
(1) provide a comprehensive framework for ensuring the effectiveness of information security controls over information resources that support Federal operations and assets;
(2) recognize the highly networked nature of the current Federal computing environment and provide effective governmentwide management and oversight of the related information security risks, including coordination of information security efforts throughout the civilian, national security, and law enforcement communities;
(3) provide for development and maintenance of minimum controls required to protect Federal information and information systems;
(4) provide a mechanism for improved oversight of Federal agency information security programs, including through automated security tools to continuously diagnose and improve security;
(5) acknowledge that commercially developed information security products offer advanced, dynamic, robust, and effective information security solutions, reflecting market solutions for the protection of critical information infrastructures important to the national defense and economic security of the nation that are designed, built, and operated by the private sector; and
(6) recognize that the selection of specific technical hardware and software information security solutions should be left to individual agencies from among commercially developed products.
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3551
Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.
Original supplied file — preserved unchanged
Download original Markdown file
File SHA-256: dc828e2f7da5af9ff6d31657f6703da92af423fc74a81839190bc8430156c358. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.
Authority boundary: historical or unconfirmed source not current law verified.
Open the recorded source website ↗
Record provenance
Stable record: federal_law:legal_authorities:record_usc_fa07d9294f3f25d8f7d64357
Source file: Laws/federal/codes/united-states-code/title-44/section-3551-purposes--527ddd1672.md
Pages: Not recorded – Not recorded
Passage SHA-256: fa70cb3e98e59250baa06c4035b9dab759e5ac40a7165c9f27c9c3d22b5bfd7b
Source location: Title 44, Chapter 35, § 3551; chapter-035-coordination-of-federal-information-policy.md
Stored source content
The purposes of this subchapter are to—
(1) provide a comprehensive framework for ensuring the effectiveness of information security controls over information resources that support Federal operations and assets;
(2) recognize the highly networked nature of the current Federal computing environment and provide effective governmentwide management and oversight of the related information security risks, including coordination of information security efforts throughout the civilian, national security, and law enforcement communities;
(3) provide for development and maintenance of minimum controls required to protect Federal information and information systems;
(4) provide a mechanism for improved oversight of Federal agency information security programs, including through automated security tools to continuously diagnose and improve security;
(5) acknowledge that commercially developed information security products offer advanced, dynamic, robust, and effective information security solutions, reflecting market solutions for the protection of critical information infrastructures important to the national defense and economic security of the nation that are designed, built, and operated by the private sector; and
(6) recognize that the selection of specific technical hardware and software information security solutions should be left to individual agencies from among commercially developed products.
Cross-references
Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.
Federal law — U.S. Code and appendices · legal_authorities
As used in this subchapter—
(1) the term “agency” means any executive department, military department, Government corporation, Government controlled corporation, or other establishment in the executive branch of the Government (including the Executive Office of the President), or any independent regulatory agency, but does not include—
(A) the Government Accountability Office;
(B) Federal Election Commission;
(C) the governments of the District of Columbia and of the territories and possessions of the United States, and their various subdivisions; or
(D) Government-owned contractor-operated facilities, including laboratories engaged in national defense research and production activities;
(2) the term “burden” means time, effort, or financial resources expended by persons to generate, maintain, or provide information to or for a Federal agency, including the resources expended for—
(A) reviewing instructions;
(B) acquiring, installing, and utilizing technology and systems;
(C) adjusting the existing ways to comply with any previously applicable instructions and requirements;
(D) searching data sources;
(E) completing and reviewing the collection of information; and
(F) transmitting, or otherwise disclosing the information;
(3) the term “collection of information”—
(A) means the obtaining, causing to be obtained, soliciting, or requiring the disclosure to third parties or the public, of facts or opinions by or for an agency, regardless of form or format, calling for either—
(i) answers to identical questions posed to, or identical reporting or recordkeeping requirements imposed on, ten or more persons, other than agencies, instrumentalities, or employees of the United States; or
(ii) answers to questions posed to agencies, ins
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3502
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a)** Not later than March 1 of each year, the Director shall submit an E-Government status report to the Committee on Governmental Affairs of the Senate and the Committee on Government Reform of the House of Representatives.
**(b)** The report under subsection (a) shall contain—
(1) a summary of the information reported by agencies under section 202(f) 11 So in original. Probably should be “section 202(g)”. of the E-Government Act of 2002;
(2) the information required to be reported by section 3604(f); and
(3) a description of compliance by the Federal Government with other goals and provisions of the E-Government Act of 2002.
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3606
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Establishment** There is established, within the Executive Office of the President, the Office of the National Cyber Director (in this section referred to as the “Office”).
**(b) National Cyber Director**
(1) **In general** — The Office shall be headed by the National Cyber Director (in this section referred to as the “Director”) who shall be appointed by the President, by and with the advice and consent of the Senate.
(2) **Position** — The Director shall hold office at the pleasure of the President.
(3) **Pay and allowances** — The Director shall be entitled to receive the same pay and allowances as are provided for level II of the Executive Schedule under [section 5313 of title 5](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title5-section5313&num=0&edition=prelim).
**(c) Duties of the National Cyber Director**
(1) **In general** — Subject to the authority, direction, and control of the President, the Director shall—
(A) serve as the principal advisor to the President on cybersecurity policy and strategy relating to the coordination of—
(i) information security and data protection;
(ii) programs and policies intended to improve the cybersecurity posture of the United States;
(iii) efforts to understand and deter malicious cyber activity;
(iv) efforts to increase the security of information and communications technology and services and to promote national supply chain risk management and vendor security;
(v) diplomatic and other efforts to develop norms and international consensus around responsible state behavior in cyberspace;
(vi) awareness and adoption of emerging technology that may enhance, augment, or degrade the cybersecurity posture of the United States; and
(vii) such other cybersecurity matt
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 1500
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Director.—** The Director shall oversee agency information security policies and practices, including—
(1) developing and overseeing the implementation of policies, principles, standards, and guidelines on information security, including through ensuring timely agency adoption of and compliance with standards promulgated under [section 11331 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11331&num=0&edition=prelim);
(2) requiring agencies, consistent with the standards promulgated under such section 11331 and the requirements of this subchapter, to identify and provide information security protections commensurate with the risk and magnitude of the harm resulting from the unauthorized access, use, disclosure, disruption, modification, or destruction of—
(A) information collected or maintained by or on behalf of an agency; or
(B) information systems used or operated by an agency or by a contractor of an agency or other organization on behalf of an agency;
(3) ensuring that the Secretary carries out the authorities and functions under subsection (b);
(4) coordinating the development of standards and guidelines under section 20 of the National Institute of Standards and Technology Act ([15 U.S.C. 278g–3](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section278g–3&num=0&edition=prelim)) with agencies and offices operating or exercising control of national security systems (including the National Security Agency) to assure, to the maximum extent feasible, that such standards and guidelines are complementary with standards and guidelines developed for national security systems;
(5) overseeing agency compliance with the requirements of this subchapter and [section 1326 of title 41](https://uscode
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3553
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Required use** The head of an executive agency shall, when appropriate, use streamlined acquisition authorities and procedures authorized by law for a procurement referred to in [section 422 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section422&num=0&edition=prelim), including authorities and procedures that are provided under the following provisions of law:
(1) **Federal Property and Administrative Services Act of 1949** — In division C of subtitle I of title 41:
(A) Paragraphs (1), (2), (6), and (7) of subsection (a) of [section 3304 of title 41](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section3304&num=0&edition=prelim), relating to use of procedures other than competitive procedures under certain circumstances (subject to subsection (d) of such section).
(B) [Section 4106 of title 41](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section4106&num=0&edition=prelim), relating to orders under task and delivery order contracts.
(2) **Title 10** — In part V of subtitle A of title 10:
(A) Paragraphs (1), (2), (6), and (7) of subsection (a) of section 3204, relating to use of procedures other than competitive procedures under certain circumstances (subject to subsection (d) of such section).
(B) Section 3406, relating to orders under task and delivery order contracts.
(3) **Office of Federal Procurement Policy Act** — Paragraphs (1)(B), (1)(D), and (2)(A) of [section 1708(b) of title 41](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section1708/b&num=0&edition=prelim), relating to inapplicability of a requirement for procurement notice.
**(b) Waiver of certain small business threshold requirements** Subclause (II) of [section 637(a)(1)(D)(i
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 451
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
In this chapter:
(1) **Advisory Committee** — The term “Advisory Committee” means the National Artificial Intelligence Advisory Committee established under [section 9414(a) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section9414/a&num=0&edition=prelim).
(2) **Agency head** — The term “agency head” means the head of any Executive agency (as defined in [section 105 of title 5](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title5-section105&num=0&edition=prelim)).
(3) **Artificial intelligence** — The term “artificial intelligence” means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations or decisions influencing real or virtual environments. Artificial intelligence systems use machine and human-based inputs to—
(A) perceive real and virtual environments;
(B) abstract such perceptions into models through analysis in an automated manner; and
(C) use model inference to formulate options for information or action.
(4) **Community college** — The term “community college” means a public institution of higher education at which the highest degree that is predominantly awarded to students is an associate’s degree, including 2-year Tribal Colleges or Universities under [section 1059c of title 20](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title20-section1059c&num=0&edition=prelim) and public 2-year State institutions of higher education.
(5) **Initiative** — The term “Initiative” means the National Artificial Intelligence Initiative established under [section 9411(a) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section9411/a&num=0&edition=prelim).
(6) **Initiative Office** — The term “Initiative O
Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 9411
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
### Statutory Notes
Sections 3531 to 3538 comprised subchapter II of this chapter “INFORMATION SECURITY”.
Section 3531, added Pub. L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat. 2259, set forth purposes of subchapter II. See [section 3551 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3551&num=0&edition=prelim).
A prior section 3531, added Pub. L. 106–398, § 1 [[div. A], title X, § 1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266, set forth purposes of subchapter II prior to the general amendment of subchapter II by Pub. L. 107–296.
Section 3532, added Pub. L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat. 2260, related to definitions applicable to subchapter II. See [section 3552 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3552&num=0&edition=prelim).
A prior section 3532, added Pub. L. 106–398, § 1 [[div. A], title X, § 1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266, related to definitions applicable to subchapter II prior to the general amendment of subchapter II by Pub. L. 107–296.
Section 3533, added Pub. L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat. 2261, set forth authority and functions of the Director. See [section 3553 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3553&num=0&edition=prelim).
A prior section 3533, added Pub. L. 106–398, § 1 [[div. A], title X, § 1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266, set forth authority and functions of the Director prior to the general amendment of subchapter II by Pub. L. 107–296.
Section 3534, added Pub. L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat. 2262, related to Federal agency responsibilities. See [section 3554 of this
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3531 to 3549
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Definitions** In this section:
(1) **Clarification** — The term “national security” shall be construed so as to include those issues relating to “homeland security”, including its application to critical infrastructure.
(2) **Committee; chairperson** — The terms “Committee” and “chairperson” mean the Committee on Foreign Investment in the United States and the chairperson thereof, respectively.
(3) **Control** — The term “control” means the power, direct or indirect, whether exercised or not exercised, to determine, direct, or decide important matters affecting an entity, subject to regulations prescribed by the Committee.
(4) **Covered transaction**
(A) *In general* — Except as otherwise provided, the term “covered transaction” means—
(i) any transaction described in subparagraph (B)(i); and
(ii) any transaction described in clauses (ii) through (v) of subparagraph (B) that is proposed, pending, or completed on or after the effective date set forth in section 1727 of the Foreign Investment Risk Review Modernization Act of 2018.
(B) *Transactions described* — A transaction described in this subparagraph is any of the following:
(i) Any merger, acquisition, or takeover that is proposed or pending after August 23, 1988, by or with any foreign person that could result in foreign control of any United States business, including such a merger, acquisition, or takeover carried out through a joint venture.
(ii) Subject to subparagraphs (C) and (E), the purchase or lease by, or a concession to, a foreign person of private or public real estate that—
(I) is located in the United States;
(II)
(aa) is, is located within, or will function as part of, an air or maritime port; or
(bb)
(AA) is in close prox
Source: Supplied U.S. Code snapshot — release unconfirmed · 50 U.S.C. § 4566
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) In general**
(1) **Covered cyber incident reports**
(A) *In general* — A covered entity that experiences a covered cyber incident shall report the covered cyber incident to the Agency not later than 72 hours after the covered entity reasonably believes that the covered cyber incident has occurred.
(B) *Limitation* — The Director may not require reporting under subparagraph (A) any earlier than 72 hours after the covered entity reasonably believes that a covered cyber incident has occurred.
(2) **Ransom payment reports**
(A) *In general* — A covered entity that makes a ransom payment as the result of a ransomware attack against the covered entity shall report the payment to the Agency not later than 24 hours after the ransom payment has been made.
(B) *Application* — The requirements under subparagraph (A) shall apply even if the ransomware attack is not a covered cyber incident subject to the reporting requirements under paragraph (1).
(3) **Supplemental reports** — A covered entity shall promptly submit to the Agency an update or supplement to a previously submitted covered cyber incident report if substantial new or different information becomes available or if the covered entity makes a ransom payment after submitting a covered cyber incident report required under paragraph (1), until such date that such covered entity notifies the Agency that the covered cyber incident at issue has concluded and has been fully mitigated and resolved.
(4) **Preservation of information** — Any covered entity subject to requirements of paragraph (1), (2), or (3) shall preserve data relevant to the covered cyber incident or ransom payment in accordance with procedures established in the final rule issued pursuant to subsection (b).
(5) **Exceptions**
(A) *Repor
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 102
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
Page 177
TITLE 44—PUBLIC PRINTING AND DOCUMENTS
§ 3551
EFFECTIVE DATE
Section effective May 22, 1995, see section 4 of Pub. L.
104–13, set out as a note under section 3501 of this title.
[§§ 3531 to 3549. Repealed. Pub. L. 113–283, § 2(a),
Dec. 18, 2014, 128 Stat. 3073]
Sections 3531 to 3538 comprised subchapter II of this
chapter ‘‘INFORMATION SECURITY’’.
Section 3531, added Pub. L. 107–296, title X, § 1001(b)(1),
Nov. 25, 2002, 116 Stat. 2259, set forth purposes of sub-
chapter II. See section 3551 of this title.
A prior section 3531, added Pub. L. 106–398, § 1 [[div.
A], title X, § 1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266,
set forth purposes of subchapter II prior to the general
amendment of subchapter II by Pub. L. 107–296.
Section 3532, added Pub. L. 107–296, title X, § 1001(b)(1),
Nov. 25, 2002, 116 Stat. 2260, related to definitions appli-
cable to subchapter II. See section 3552 of this title.
A prior section 3532, added Pub. L. 106–398, § 1 [[div.
A], title X, § 1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266,
related to definitions applicable to subchapter II prior
to the general amendment of subchapter II by Pub. L.
107–296.
Section 3533, added Pub. L. 107–296, title X, § 1001(b)(1),
Nov. 25, 2002, 116 Stat. 2261, set forth authority and
functions of the Director. See section 3553 of this title.
A prior section 3533, added Pub. L. 106–398, § 1 [[div.
A], title X, § 1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266,
set forth authority and functions of the Director prior
to the general amendment of subchapter II by Pub. L.
107–296.
Section 3534, added Pub. L. 107–296, title X, § 1001(b)(1),
Nov. 25, 2002, 116 Stat. 2262, related to Federal agency
responsibilities. See section 3554 of this title.
A prior section 3534, added P
Source: Supplied 2024 U.S. Code historical extraction · 44 U.S.C. § 3551
Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.