6 U.S.C. § 665c — Cybersecurity State Coordinator

Page 360 TITLE 6—DOMESTIC SECURITY § 665c cybersecurity purpose.’’ for ‘‘section:’’ and struck out pars. (1) to (4) which defined cyber defense operation, cybersecurity purpose, cybersecurity risk, incident, and information sharing and analysis organization. 2021—Pub. L. 117–81 reenacted section catchline. § 665c. Cybersecurity State Coordinator (a) Appointment The Director shall appoint an employee of the Agency in each State, with the appropriate cybersecurity qualifications and expertise, who shall serve as the Cybersecurity State Coordi- nator. (b) Duties The duties of a Cybersecurity State Coordi- nator appointed under subsection (a) shall in- clude— (1) building strategic public and, on a vol- untary basis, private sector relationships, in- cluding by advising on establishing govern- ance structures to facilitate the development and maintenance of secure and resilient infra- structure; (2) serving as the Federal cybersecurity risk advisor and supporting preparation, response, and remediation efforts relating to cybersecurity risks and incidents; (3) facilitating the sharing of cyber threat information to improve understanding of cybersecurity risks and situational awareness of cybersecurity incidents; (4) raising awareness of the financial, tech- nical, and operational resources available from the Federal Government to non-Federal entities to increase resilience against cyber threats; (5) supporting training, exercises, and plan- ning for continuity of operations to expedite recovery from cybersecurity incidents, includ- ing ransomware; (6) serving as a principal point of contact for non-Federal entities to engage, on a voluntary basis, with the Federal Government on pre- paring, managing, and responding to cybersecurity incidents; (7) assisting non-Federal entities in devel- oping and coordinating vulnerability disclo- sure programs consistent with Federal and in- formation security industry standards; (8) assisting State, local, Tribal, and terri- torial governments, on a voluntary basis, in the development of State cybersecurity plans; (9) coordinating with appropriate officials within the Agency; and (10) performing such other duties as deter- mined necessary by the Director to achieve the goal of managing cybersecurity risks in the United States and reducing the impact of cyber threats to non-Federal entities. (c) Feedback The Director shall consult with relevant State, local, Tribal, and territorial officials re- garding the appointment, and State, local, Trib- al, and territorial officials and other non-Fed- eral entities regarding the performance, of the Cybersecurity State Coordinator of a State. (Pub. L. 107–296, title XXII, § 2217, formerly § 2215, as added Pub. L. 116–283, div. A, title XVII, § 1717(a)(1)(B), Jan. 1, 2021, 134 Stat. 4099; renum- bered § 2217 and amended Pub. L. 117–81, div. A, title XV, § 1547(b)(1)(A)(iv), Dec. 27, 2021, 135 Stat. 2061.) Editorial Notes PRIOR PROVISIONS A prior section 2217 of Pub. L. 107–296 was renumbered section 2220 and is classified to section 665f of this title. AMENDMENTS 2021—Pub. L. 117–81 reenacted section catchline. Statutory Notes and Related Subsidiaries RULE OF CONSTRUCTION Pub. L. 116–283, div. A, title XVII, § 1717(a)(4), Jan. 1, 2021, 134 Stat. 4100, provided that: ‘‘Nothing in this sub- section [enacting this section, amending section 652 of this title, and enacting provisions set out as a note below] or the amendments made by this subsection may be construed to affect or otherwise modify the au- thority of Federal law enforcement agencies with re- spect to investigations relating to cybersecurity inci- dents.’’ COORDINATION PLAN Pub. L. 116–283, div. A, title XVII, § 1717(a)(2), Jan. 1, 2021, 134 Stat. 4100, provided that: ‘‘Not later than 60 days after the date of the enactment of this Act [Jan. 1, 2021], the Director of the Cybersecurity and Infra- structure Security Agency of the Department of Home- land Security shall establish and submit to the Com- mittee on Homeland Security and Governmental Af- fairs in the Senate and the Committee on Homeland Security in the House of Representatives a plan de- scribing the reporting structure and coordination proc- esses and procedures of Cybersecurity State Coordina- tors within the Cybersecurity and Infrastructure Secu- rity Agency under section 2215 of the Homeland Secu- rity Act of 2002 [Pub. L. 107–296], as added by paragraph (1)(B) [6 U.S.C. 665c].’’ § 665d. Sector Risk Management Agencies (a) In general Consistent with applicable law, Presidential directives, Federal regulations, and strategic guidance from the Secretary, each Sector Risk Management Agency, in coordination with the Director, shall— (1) provide specialized sector-specific exper- tise to critical infrastructure owners and oper- ators within its designated critical infrastruc- ture sector or subsector of such sector; and (2) support programs and associated activi- ties of such sector or subsector of such sector. (b) Implementation In carrying out this section, Sector Risk Man- agement Agencies shall— (1) coordinate with the Department and, as appropriate, other relevant Federal depart- ments and agencies; (2) collaborate with critical infrastructure owners and operators within the designated critical infrastructure sector or subsector of such sector; and (3) coordinate with independent regulatory agencies, and State, local, Tribal, and terri- torial entities, as appropriate. (c) Responsibilities Consistent with applicable law, Presidential directives, Federal regulations, and strategic