6 U.S.C. § 665a — Intelligence and cybersecurity diversity

Page 358 TITLE 6—DOMESTIC SECURITY § 665a 1 So in original. Probably should be ‘‘is’’. mittee on Rules and Administration of the Senate and the Committee on Homeland Security, the Committee on Oversight and Reform [now Committee on Oversight and Accountability], and the Committee on House Ad- ministration of the House of Representatives. ‘‘(c) Not later than 120 days after the date of enact- ment of this Act, the Director shall begin operationally administering the .gov internet domain program, and shall publish on a publicly available website the re- quirements for domain registrants as described in sec- tion 2215(b) of the Homeland Security Act of 2002 [6 U.S.C. 665(b)], as added by section 904(b) of this Act. ‘‘(d) On the date on which the Director begins oper- ational administration of the .gov internet domain pro- gram, in accordance with subsection (c), the Adminis- trator shall rescind the requirements in part 102–173 of title 41, Code of Federal Regulations. ‘‘(e) During the 5-year period beginning on the date of enactment of this Act [Dec. 27, 2020], any fee charged to entities that are not agencies for new .gov internet do- main registrants or annual renewals of .gov internet domains shall be not more than the amount of the fee charged for such registration or renewal as of October 1, 2019.’’ [For definition of ‘‘Director’’ as used in section 907 of Pub. L. 116–260, set out above, see section 903 of Pub. L. 116–260, set out as a note below.] DEFINITIONS Pub. L. 116–260, div. U, title IX, § 903, Dec. 27, 2020, 134 Stat. 2298, provided that: ‘‘In this Act [probably means ‘‘this title’’, see Short Title of 2020 Amendment note set out under section 101 of this title]— ‘‘(1) the term ‘Administrator’ means the Adminis- trator of General Services; ‘‘(2) the term ‘agency’ has the meaning given the term in section 3502 of title 44, United States Code; ‘‘(3) the term ‘Director’ means the Director of the Cybersecurity and Infrastructure Security Agency; ‘‘(4) the term ‘online service’ means any internet- facing service, including a website, email, a virtual private network, or a custom application; and ‘‘(5) the term ‘State’ means any State of the United States, the District of Columbia, the Commonwealth of Puerto Rico, the Virgin Islands, Guam, American Samoa, the Commonwealth of the Northern Mariana Islands, and any possession of the United States.’’ § 665a. Intelligence and cybersecurity diversity fellowship program (a) Definitions In this section: (1) Appropriate committees of Congress The term ‘‘appropriate committees of Con- gress’’ means— (A) the Committee on Homeland Security and Governmental Affairs and the Select Committee on Intelligence of the Senate; and (B) the Committee on Homeland Security and the Permanent Select Committee on In- telligence of the House of Representatives. (2) Excepted service The term ‘‘excepted service’’ has the mean- ing given that term in section 2103 of title 5. (3) Historically Black college or university The term ‘‘historically Black college or uni- versity’’ has the meaning given the term ‘‘part B institution’’ in section 1061 of title 20. (4) Institution of higher education The term ‘‘institution of higher education’’ has the meaning given that term in section 1001 of title 20. (5) Minority-serving institution The term ‘‘minority-serving institution’’ means an institution of higher education de- scribed in section 1067q(a) of title 20. (b) Program The Secretary shall carry out an intelligence and cybersecurity diversity fellowship program (in this section referred to as the ‘‘Program’’) under which an eligible individual may— (1) participate in a paid internship at the De- partment that relates to intelligence, cybersecurity, or some combination thereof; (2) receive tuition assistance from the Sec- retary; and (3) upon graduation from an institution of higher education and successful completion of the Program (as defined by the Secretary), re- ceive an offer of employment to work in an in- telligence or cybersecurity position of the De- partment that is in the excepted service. (c) Eligibility To be eligible to participate in the Program, an individual shall— (1) be a citizen of the United States; and (2) as of the date of submitting the applica- tion to participate in the Program— (A) have a cumulative grade point average of at least 3.2 on a 4.0 scale; (B) be a socially disadvantaged individual (as that term in 1 defined in section 124.103 of title 13, Code of Federal Regulations, or suc- cessor regulation); and (C) be a sophomore, junior, or senior at an institution of higher education. (d) Direct hire authority If an individual who receives an offer of em- ployment under subsection (b)(3) accepts such offer, the Secretary shall appoint, without re- gard to provisions of subchapter I of chapter 33 of title 5 (except for section 3328 of such title) such individual to the position specified in such offer. (e) Reports (1) Reports Not later than 1 year after December 27, 2020, and on an annual basis thereafter, the Secretary shall submit to the appropriate committees of Congress a report on the Pro- gram. (2) Matters Each report under paragraph (1) shall in- clude, with respect to the most recent year, the following: (A) A description of outreach efforts by the Secretary to raise awareness of the Pro- gram among institutions of higher education in which eligible individuals are enrolled. (B) Information on specific recruiting ef- forts conducted by the Secretary to increase participation in the Program. (C) The number of individuals partici- pating in the Program, listed by the institu- tion of higher education in which the indi- vidual is enrolled at the time of participa- tion, and information on the nature of such Page 359 TITLE 6—DOMESTIC SECURITY § 665b participation, including on whether the du- ties of the individual under the Program re- late primarily to intelligence or to cybersecurity. (D) The number of individuals who accept- ed an offer of employment under the Pro- gram and an identification of the element within the Department to which each indi- vidual was appointed. (Pub. L. 107–296, title XIII, § 1333, as added Pub. L. 116–260, div. W, title IV, § 404(a), Dec. 27, 2020, 134 Stat. 2378.) Editorial Notes CODIFICATION Section was enacted as part of title XIII of Pub. L. 107–296, and not as part of title XXII of 107–296 which comprises this subchapter. § 665b. Joint cyber planning office (a) Establishment of Office There is established in the Agency an office for joint cyber planning (in this section referred to as the ‘‘Office’’) to develop, for public and pri- vate sector entities, plans for cyber defense op- erations, including the development of a set of coordinated actions to protect, detect, respond to, and recover from cybersecurity risks or inci- dents or limit, mitigate, or defend against co- ordinated, malicious cyber operations that pose a potential risk to critical infrastructure or na- tional interests. The Office shall be headed by a senior official of the Agency selected by the Di- rector. (b) Planning and execution In leading the development of plans for cyber defense operations pursuant to subsection (a), the head of the Office shall— (1) coordinate with relevant Federal depart- ments and agencies to establish processes and procedures necessary to develop and maintain ongoing coordinated plans for cyber defense operations; (2) leverage cyber capabilities and authori- ties of participating Federal departments and agencies, as appropriate, in furtherance of plans for cyber defense operations; (3) ensure that plans for cyber defense oper- ations are, to the greatest extent practicable, developed in collaboration with relevant pri- vate sector entities, particularly in areas in which such entities have comparative advan- tages in limiting, mitigating, or defending against a cybersecurity risk or incident or co- ordinated, malicious cyber operation; (4) ensure that plans for cyber defense oper- ations, as appropriate, are responsive to po- tential adversary activity conducted in re- sponse to United States offensive cyber oper- ations; (5) facilitate the exercise of plans for cyber defense operations, including by developing and modeling scenarios based on an under- standing of adversary threats to, vulnerability of, and potential consequences of disruption or compromise of critical infrastructure; (6) coordinate with and, as necessary, sup- port relevant Federal departments and agen- cies in the establishment of procedures, devel- opment of additional plans, including for of- fensive and intelligence activities in support of cyber defense operations, and creation of agreements necessary for the rapid execution of plans for cyber defense operations when a cybersecurity risk or incident or malicious cyber operation has been identified; and (7) support public and private sector enti- ties, as appropriate, in the execution of plans developed pursuant to this section. (c) Composition The Office shall be composed of— (1) a central planning staff; and (2) appropriate representatives of Federal de- partments and agencies, including— (A) the Department; (B) United States Cyber Command; (C) the National Security Agency; (D) the Federal Bureau of Investigation; (E) the Department of Justice; and (F) the Office of the Director of National Intelligence. (d) Consultation In carrying out its responsibilities described in subsection (b), the Office shall regularly con- sult with appropriate representatives of non- Federal entities, such as— (1) State, local, federally-recognized Tribal, and territorial governments; (2) Information Sharing and Analysis Orga- nizations, including information sharing and analysis centers; (3) owners and operators of critical informa- tion systems; (4) private entities; and (5) other appropriate representatives or enti- ties, as determined by the Secretary. (e) Interagency agreements The Secretary and the head of a Federal de- partment or agency referred to in subsection (c) may enter into agreements for the purpose of detailing personnel on a reimbursable or non-re- imbursable basis. (f) Definitions In this section, the term ‘‘cyber defense oper- ation’’ means the defensive activities performed for a cybersecurity purpose. (Pub. L. 107–296, title XXII, § 2216, formerly § 2215, as added Pub. L. 116–283, div. A, title XVII, § 1715(a), Jan. 1, 2021, 134 Stat. 4092; renumbered § 2216 and amended Pub. L. 117–81, div. A, title XV, § 1547(b)(1)(A)(iii), Dec. 27, 2021, 135 Stat. 2061; Pub. L. 117–263, div. G, title LXXI, § 7143(b)(2)(I), Dec. 23, 2022, 136 Stat. 3660.) Editorial Notes PRIOR PROVISIONS A prior section 2216 of Pub. L. 107–296 was renumbered section 2219 and is classified to section 665e of this title. AMENDMENTS 2022—Subsec. (d)(2). Pub. L. 117–263, § 7143(b)(2)(I)(i), substituted ‘‘Information Sharing and Analysis Organi- zations’’ for ‘‘information sharing and analysis organi- zations’’. Subsec. (f). Pub. L. 117–263, § 7143(b)(2)(I)(ii), sub- stituted ‘‘section, the term ‘cyber defense operation’ means the defensive activities performed for a