,,ii ,cal5d> ,no4 #dfb #aac? ,,congress #b;d ,session ,s4 #behh ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,july #aj1 #bjad ,mrs4 ,fe9/e91 f ! ,select ,committee on ,intellig5ce1 report$ ! foll[+ orig9al bill2 :i* 0 read twice & plac$ on ! cal5d> ,a ,,bill ,to improve cyb]security 9 ! ,unit$ ,/ates ?r\gh enhanc$ %>+ ( in=mation ab\t cyb]security ?reats1 & = o!r purposes4 #a4 ,%ort title2 table ( cont5ts 7a7 ,%ort title ,?is ,act may be cit$ z ! ,cyb]security ,in=mation ,%>+ ,act ( #bjad4 7b7 ,table ( cont5ts ,! table ( cont5ts ( ?is ,act is z foll[s3 ,sec4 #a4 ,%ort title2 table ( cont5ts4 ,sec4 #b4 ,def9itions4 ,sec4 #c4 ,%>+ ( in=mation by ! ,f$]al ,gov]nm5t4 ,sec4 #d4 ,au?orizations = prev5t+1 detect+1 analyz+1 & mitigat+ cyb]security ?reats4 ,sec4 #e4 ,%>+ ( cyb] ?reat indicators & c\nt]measures ) ! ,f$]al ,gov]nm5t4 ,sec4 #f4 ,protection f liability4 ,sec4 #g4 ,ov]sight ( ,gov]nm5t activities4 ,sec4 #h4 ,con/ruction & preemption4 ,sec4 #i4 ,report on cyb]security ?reats4 ,sec4 #aj4 ,con=m+ am5dm5ts4 #b4 ,def9itions ,9 ?is ,act3 7#a7 ,ag5cy ,! t]m ag5cy has ! mean+ giv5 ! t]m 9 section #cejb ( title #dd1 ,unit$ ,/ates ,code4 7#b7 ,antitru/ laws ,! t]m antitru/ laws-- 7,a7 has ! mean+ giv5 ! t]m 9 section #a7;a7 ( ! ,clayton ,act 7#ae ,u4,s4,c4 #ab7;a772 7,b7 includes section #e ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #de7 to ! ext5t t section #e ( t ,act applies to unfair me?ods ( competition2 & 7,c7 includes any ,/ate law t has ! same int5t & effect z ! laws "u subp>agraphs 7,a7 & 7,b74 7#c7 ,appropriate ,f$]al entities ,! t]m appropriate ,f$]al entities means ! foll[+3 7,a7 ,! ,dep>tm5t ( ,comm]ce4 7,b7 ,! ,dep>tm5t ( ,def5se4 7,c7 ,! ,dep>tm5t ( ,en]gy4 7,d7 ,! ,dep>tm5t ( ,homel& ,security4 7,e7 ,! ,dep>tm5t ( ,ju/ice4 7,f7 ,! ,dep>tm5t ( ! ,treasury4 7,g7 ,! ,(fice ( ! ,director ( ,national ,intellig5ce4 7#d7 ,c\nt]measure ,! t]m c\nt]measure means an action1 device1 proc$ure1 te*nique1 or o!r measure appli$ to an in=mation sy/em or in=mation t is /or$ on1 process$ by1 or transit+ an in=mation sy/em t prev5ts or mitigates a kn[n or suspect$ cyb]security ?reat or security vuln]ability4 7#e7 ,cyb]security purpose ,! t]m cyb]security purpose means ! purpose ( protect+ an in=mation sy/em or in=mation t is /or$ on1 process$ by1 or transit+ an in=mation sy/em f a cyb]security ?reat or security vuln]ability4 7#f7 ,cyb]security ?reat ,! t]m cyb]security ?reat means an action1 n protect$ by ! ,fir/ ,am5dm5t to ! ,con/itution ( ! ,unit$ ,/ates1 on or ?r\gh an in=mation sy/em t may result 9 an unau?oriz$ ef=t to adv]sely impact ! security1 availability1 confid5tiality1 or integrity ( an in=mation sy/em or in=mation t is /or$ on1 process$ by1 or transit+ an in=mation sy/em4 7#g7 ,cyb] ?reat indicator ,! t]m cyb] ?reat indicator means in=mation t is necess>y to indicate1 describe1 or id5tify-- 7,a7 malici\s reconnaissance1 includ+ anomal\s patt]ns ( communications t appe> to be transmitt$ = ! purpose ( ga!r+ te*nical in=mation relat$ to a cyb]security ?reat or security vuln]ability2 7,b7 a me?od ( defeat+ a security control or exploitation ( a security vuln]ability2 7,c7 a security vuln]ability2 7,d7 a me?od ( caus+ a us] ) legitimate access to an in=mation sy/em or in=mation t is /or$ on1 process$ by1 or transit+ an in=mation sy/em to unwitt+ly enable ! defeat ( a security control or exploitation ( a security vuln]ability2 7,e7 malici\s cyb] comm& & control2 7,f7 ! actual or pot5tial h>m caus$ by an incid5t1 includ+ in=mation exfiltrat$ :5 x is necess>y 9 ord] to describe a cyb]security ?reat2 7,g7 any o!r attribute ( a cyb]security ?reat1 if disclosure ( su* attribute is n o!rwise prohibit$ by law2 or 7,h7 any comb9ation !re(4 7#h7 ,electronic =mat 7,a7 ,9 g5]al ,except z provid$ 9 subp>agraph 7,b71 ! t]m electronic =mat means in=mation t is %>$ ?r\gh electronic mail1 an int]active =m on an ,int]net website1 or a real "t1 automat$ process betwe5 in=mation sy/ems4 7,b7 ,exclusion ,! t]m electronic =mat does n include voice or video communication4 7#i7 ,entity 7,a7 ,9 g5]al ,! t]m entity means any private entity1 non-,f$]al gov]nm5t ag5cy or dep>tm5t1 or ,/ate1 tribal1 or local gov]nm5t ag5cy or dep>tm5t 7includ+ a political subdivision1 (fic]1 employee1 or ag5t !re(74 7,b7 ,inclusions ,! t]m entity includes a gov]nm5t ag5cy or dep>tm5t 7includ+ an (fic]1 employee1 or ag5t !re(7 ( ! ,di/rict ( ,columbia1 ! ,commonweal? ( ,pu]to ,rico1 ! ,virg9 ,isl&s1 ,guam1 ,am]ican ,samoa1 ! ,nor!rn ,m>iana ,isl&s1 & any o!r t]ritory or possession ( ! ,unit$ ,/ates4 7,c7 ,exclusion ,! t]m entity does n include a =eign p[] z def9$ 9 section #aja7;a7 ( ! ,=eign ,intellig5ce ,surveillance ,act ( #aigh 7#ej ,u4,s4,c4 #ahja74 7#aj7 ,f$]al entity ,! t]m ,f$]al entity means a dep>tm5t or ag5cy ( ! ,unit$ ,/ates1 or any compon5t1 (fic]1 employee1 or ag5t ( su* a dep>tm5t or ag5cy4 7#aa7 ,in=mation sy/em ,! t]m in=mation sy/em-- 7,a7 has ! mean+ giv5 ! t]m 9 section #cejb ( title #dd1 ,unit$ ,/ates ,code2 & 7,b7 includes indu/rial control sy/ems1 su* z sup]visory control & data acquisition sy/ems1 di/ribut$ control sy/ems1 & programmable logic controll]s4 7#ab7 ,local gov]nm5t ,! t]m local gov]nm5t means any bor\gh1 city1 c\nty1 p>i%1 t[n1 t[n%ip1 village1 or o!r political subdivision ( a ,/ate4 7#ac7 ,malici\s cyb] comm& & control ,! t]m malici\s cyb] comm& & control means a me?od = unau?oriz$ remote id5tification (1 access to1 or use (1 an in=mation sy/em or in=mation t is /or$ on1 process$ by1 or transit+ an in=mation sy/em4 7#ad7 ,malici\s reconnaissance ,! t]m malici\s reconnaissance means a me?od = actively prob+ or passively monitor+ an in=mation sy/em = ! purpose ( disc]n+ security vuln]abilities ( ! in=mation sy/em1 if su* me?od is associat$ ) a kn[n or suspect$ cyb]security ?reat4 7#ae7 ,monitor ,! t]m monitor means to obta91 id5tify1 or o!rwise possess in=mation t is /or$ on1 process$ by1 or transit+ an in=mation sy/em4 7#af7 ,private entity 7,a7 ,9 g5]al ,! t]m private entity means any individual or private gr\p1 organization1 proprietor%ip1 p>tn]%ip1 tru/1 coop]ative1 corporation1 or o!r comm]cial or nonpr(it entity1 includ+ an (fic]1 employee1 or ag5t !re(4 7,b7 ,exclusion ,! t]m private entity does n include a =eign p[] z def9$ 9 section #aja7;a7 ( ! ,=eign ,intellig5ce ,surveillance ,act ( #aigh 7#ej ,u4,s4,c4 #ahja74 7#ag7 ,security control ,! t]m security control means ! managem5t1 op]ational1 & te*nical controls us$ to protect ! confid5tiality1 integrity1 & availability ( an in=mation sy/em or its in=mation4 7#ah7 ,security vuln]ability ,! t]m security vuln]ability means any attribute ( h>dw>e1 s(tw>e1 process1 or proc$ure t c\ld enable or facilitate ! defeat ( a security control4 7#ai7 ,tribal ,! t]m tribal has ! mean+ giv5 ! t]m ,indian tribe 9 section #d ( ! ,indian ,self-,det]m9ation & ,education ,assi/ance ,act 7#be ,u4,s4,c4 #dej;b74 #c4 ,%>+ ( in=mation by ! ,f$]al ,gov]nm5t 7a7 ,9 g5]al ,consi/5t ) ! protection ( intellig5ce s\rces & me?ods & ! protection ( privacy & civil lib]ties1 ! ,director ( ,national ,intellig5ce1 ! ,secret>y ( ,homel& ,security1 ! ,secret>y ( ,def5se1 & ! ,attorney ,g5]al1 9 consultation ) ! heads ( ! appropriate ,f$]al entities1 %all develop & promulgate proc$ures to facilitate & promote-- 7#a7 ! timely %>+ ( classifi$ cyb] ?reat indicators 9 ! possession ( ! ,f$]al ,gov]nm5t ) cle>$ repres5tatives ( appropriate entities2 7#b7 ! timely %>+ ) appropriate entities ( cyb] ?reat indicators or in=mation 9 ! possession ( ! ,f$]al ,gov]nm5t t may be declassifi$ & %>$ at an unclassifi$ level2 & 7#c7 ! %>+ ) appropriate entities1 or1 if appropriate1 public availability1 ( unclassifi$1 includ+ controll$ unclassifi$1 cyb] ?reat indicators 9 ! possession ( ! ,f$]al ,gov]nm5t4 7b7 ,developm5t ( proc$ures 7#a7 ,9 g5]al ,! proc$ures develop$ & promulgat$ "u subsection 7a7 %all-- 7,a7 ensure ! ,f$]al ,gov]nm5t has & ma9ta9s ! capability to %>e cyb] ?reat indicators 9 real "t consi/5t ) ! protection ( classifi$ in=mation2 & 7,b7 incorporate1 to ! greate/ ext5t possible1 exi/+ processes & exi/+ roles & responsibilities ( ,f$]al & non-,f$]al entities = in=mation %>+ by ! ,f$]al ,gov]nm5t1 includ+ sector specific in=mation %>+ & analysis c5t]s4 7#b7 ,coord9ation ,9 develop+ ! proc$ures requir$ "u ?is section1 ! ,director ( ,national ,intellig5ce1 ! ,secret>y ( ,homel& ,security1 & ! ,attorney ,g5]al %all coord9ate ) appropriate ,f$]al entities1 includ+ ! ,national ,laboratories 7z def9$ 9 section #b ( ! ,en]gy ,policy ,act ( #bjje 7#db ,u4,s4,c4 #aehja771 to ensure t effective protocols are implem5t$ t w facilitate & promote ! %>+ ( cyb] ?reat indicators by ! ,f$]al ,gov]nm5t 9 a timely mann]4 7c7 ,submittal to ,congress ,n lat] ?an #fj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ,national ,intellig5ce1 9 consultation ) ! heads ( ! appropriate ,f$]al entities1 %all submit to ,congress ! proc$ures requir$ by subsection 7a74 #d4 ,au?orizations = prev5t+1 detect+1 analyz+1 & mitigat+ cyb]security ?reats 7a7 ,au?orization = monitor+ 7#a7 ,9 g5]al ,not)/&+ any o!r provision ( law1 a private entity may1 = cyb]security purposes1 monitor-- 7,a7 ! in=mation sy/ems ( su* private entity2 7,b7 ! in=mation sy/ems ( ano!r entity1 ^u writt5 cons5t ( su* o!r entity2 7,c7 ! in=mation sy/ems ( a ,f$]al entity1 ^u writt5 cons5t ( an au?oriz$ repres5tative ( ! ,f$]al entity2 & 7,d7 in=mation t is /or$ on1 process$ by1 or transit+ ! in=mation sy/ems monitor$ by ! private entity "u ?is p>agraph4 7#b7 ,con/ruction ,no?+ 9 ?is subsection %all be con/ru$ to au?orize ! monitor+ ( in=mation sy/ems o!r ?an z provid$ 9 ?is subsection or to limit o!rwise lawful activity4 7b7 ,au?orization = op]ation ( c\nt]measures 7#a7 ,9 g5]al ,not)/&+ any o!r provision ( law1 a private entity may1 = cyb]security purposes1 op]ate c\nt]measures t are appli$ to-- 7,a7 ! in=mation sy/ems ( su* private entity 9 ord] to protect ! rights or prop]ty ( ! private entity2 7,b7 ! in=mation sy/ems ( ano!r entity ^u writt5 cons5t ( su* entity to protect ! rights or prop]ty ( su* entity2 & 7,c7 ! in=mation sy/ems ( a ,f$]al entity ^u writt5 cons5t ( an au?oriz$ repres5tative ( su* ,f$]al entity to protect ! rights or prop]ty ( ! ,f$]al ,gov]nm5t4 7#b7 ,con/ruction ,no?+ 9 ?is subsection %all be con/ru$ to au?orize ! use ( c\nt]measures o!r ?an z provid$ 9 ?is subsection or to limit o!rwise lawful activity4 7c7 ,au?orization = %>+ or receiv+ cyb] ?reat indicators or c\nt]measures 7#a7 ,9 g5]al ,not)/&+ any o!r provision ( law1 & = ! purposes p]mitt$ "u ?is ,act1 an entity may1 consi/5t ) ! protection ( classifi$ in=mation1 %>e )1 or receive f1 any o!r entity or ! ,f$]al ,gov]nm5t cyb] ?reat indicators & c\nt]measures4 7#b7 ,con/ruction ,no?+ 9 ?is subsection %all be con/ru$ to au?orize ! %>+ or receiv+ ( cyb] ?reat indicators or c\nt]measures o!r ?an z provid$ 9 ?is subsection or to limit o!rwise lawful activity4 7d7 ,protection & use ( in=mation 7#a7 ,security ( in=mation ,an entity or ,f$]al entity monitor+ in=mation sy/ems1 op]at+ c\nt]measures1 or provid+ or receiv+ cyb] ?reat indicators or c\nt]measures "u ?is section %all implem5t & utilize security controls to protect aga9/ unau?oriz$ access to or acquisition ( su* cyb] ?reat indicators or c\nt]measures4 7#b7 ,removal ( c]ta9 p]sonal in=mation ,an entity or ,f$]al entity %>+ cyb] ?reat indicators pursuant to ?is ,act %all1 prior to su* %>+1 remove any in=mation conta9$ )9 su* indicators t ! entity or ,f$]al entity kn[s at ! "t ( %>+ to be p]sonal in=mation ( or id5tify+ a specific p]son n directly relat$ to a cyb]security ?reat4 7#c7 ,use ( cyb] ?reat indicators & c\nt]measures by entities 7,a7 ,9 g5]al ,consi/5t ) ?is ,act1 cyb] ?reat indicators or c\nt]measures %>$ or receiv$ "u ?is section may1 = cyb]security purposes-- 7i7 be us$ by an entity to monitor or op]ate c\nt]measures on its in=mation sy/ems1 or ! in=mation sy/ems ( ano!r entity or a ,f$]al entity ^u ! writt5 cons5t ( t o!r entity or t ,f$]al entity2 & 7ii7 be o!rwise us$1 reta9$1 & fur!r %>$ by an entity4 7,b7 ,con/ruction ,no?+ 9 ?is p>agraph %all be con/ru$ to au?orize ! use ( cyb] ?reat indicators or c\nt]measures o!r ?an z provid$ 9 ?is section4 7#d7 ,use ( cyb] ?reat indicators by ,/ate1 tribal1 or local dep>tm5ts or ag5cies 7,a7 ,law en=cem5t use 7i7 ,prior writt5 cons5t ,except z provid$ 9 clause 7ii71 cyb] ?reat indicators %>$ ) a ,/ate1 tribal1 or local dep>tm5t or ag5cy "u ?is section may1 ) ! prior writt5 cons5t ( ! entity %>+ su* indicators1 be us$ by a ,/ate1 tribal1 or local dep>tm5t or ag5cy = ! purpose ( prev5t+1 inve/igat+1 or prosecut+ a comput] crime4 7ii7 ,oral cons5t ,if ! ne$ = imm$iate use prev5ts obta9+ writt5 cons5t1 su* cons5t may be provid$ orally ) subsequ5t docum5tation ( ! cons5t4 7,b7 ,exemption f disclosure ,cyb] ?reat indicators %>$ ) a ,/ate1 tribal1 or local dep>tm5t or ag5cy "u ?is section %all be-- 7i7 deem$ volunt>ily %>$ in=mation2 & 7ii7 exempt f disclosure "u any ,/ate1 tribal1 or local law requir+ disclosure ( in=mation or records4 7,c7 ,/ate1 tribal1 & local regulatory au?ority 7i7 ,au?orization ,cyb] ?reat indicators %>$ ) a ,/ate1 tribal1 or local dep>tm5t or ag5cy "u ?is section may1 consi/5t ) ,/ate regulatory au?ority specifically relat+ to ! prev5tion or mitigation ( cyb]security ?reats to in=mation sy/ems1 in=m ! developm5t or implem5tation ( regulations relat+ to su* in=mation sy/ems4 7ii7 ,limitation ,su* cyb] ?reat indicators %all n o!rwise be directly us$ by any ,/ate1 tribal1 or local dep>tm5t or ag5cy to regulate ! lawful activities ( an entity4 7e7 ,antitru/ exemption 7#a7 ,9 g5]al ,except z provid$ 9 section #h7;e71 x %all n be consid]$ a violation ( any provision ( antitru/ laws = two or m private entities to ex*ange or provide cyb] ?reat indicators1 or assi/ance relat+ to ! prev5tion1 inve/igation1 or mitigation ( cyb]security ?reats1 = cyb]security purposes "u ?is ,act4 7#b7 ,applicability ,p>agraph 7#a7 %all apply only to in=mation t is ex*ang$ or assi/ance provid$ 9 ord] to assi/ )-- 7,a7 facilitat+ ! prev5tion1 inve/igation1 or mitigation ( cyb]security ?reats to in=mation sy/ems or in=mation t is /or$ on1 process$ by1 or transit+ an in=mation sy/em2 or 7,b7 communicat+ or disclos+ cyb] ?reat indicators to help prev5t1 inve/igate1 or mitigate ! effects ( cyb]security ?reats to in=mation sy/ems or in=mation t is /or$ on1 process$ by1 or transit+ an in=mation sy/em4 7f7 ,no "r or b5efit ,! %>+ ( cyb] ?reat indicators ) an entity "u ?is ,act %all n create a "r or b5efit to simil> in=mation by su* entity or any o!r entity4 #e4 ,%>+ ( cyb] ?reat indicators & c\nt]measures ) ! ,f$]al ,gov]nm5t 7a7 ,requirem5t = policies & proc$ures 7#a7 ,int]im policies & proc$ures ,n lat] ?an #fj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,attorney ,g5]al1 9 coord9ation ) ! heads ( ! appropriate ,f$]al entities1 %all develop1 & submit to ,congress1 int]im policies & proc$ures relat+ to ! receipt ( cyb] ?reat indicators & c\nt]measures by ! ,f$]al ,gov]nm5t4 7#b7 ,f9al policies & proc$ures ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,attorney ,g5]al1 9 coord9ation ) ! heads ( ! appropriate ,f$]al entities1 %all promulgate f9al policies & proc$ures relat+ to ! receipt ( cyb] ?reat indicators & c\nt]measures by ! ,f$]al ,gov]nm5t4 7#c7 ,requirem5ts conc]n+ policies & proc$ures ,! policies & proc$ures develop$ & promulgat$ "u ?is subsection %all-- 7,a7 ensure t cyb] ?reat indicators %>$ ) ! ,f$]al ,gov]nm5t by any entity pursuant to section #d1 & t are receiv$ ?r\gh ! process describ$ 9 subsection 7c7-- 7i7 are %>$ 9 real "t & simultane\s ) su* receipt ) all ( ! appropriate ,f$]al entities2 7ii7 are n subject to any delay1 int]f]5ce1 or any o!r action t c\ld imp$e real-"t receipt by all ( ! appropriate ,f$]al entities2 & 7iii7 may be provid$ to o!r ,f$]al entities2 7,b7 ensure t cyb] ?reat indicators %>$ ) ! ,f$]al ,gov]nm5t by any entity pursuant to section #d 9 a mann] o!r ?an ! process describ$ 9 subsection 7c7-- 7i7 are %>$ imm$iately ) all ( ! appropriate ,f$]al entities2 7ii7 are n subject to any unreasonable delay1 int]f]5ce1 or any o!r action t c\ld imp$e receipt by all ( ! appropriate ,f$]al entities2 & 7iii7 may be provid$ to o!r ,f$]al entities2 7,c7 gov]n1 consi/5t ) ?is ,act1 any o!r applicable laws1 & ! fair in=mation practice pr9ciples set =? 9 app5dix ,a ( ! docum5t entitl$ ,national ,/rategy = ,tru/$ ,id5tities 9 ,cyb]space & publi%$ by ! ,presid5t 9 ,april1 #bjaa1 ! ret5tion1 use1 & dissem9ation by ! ,f$]al ,gov]nm5t ( cyb] ?reat indicators %>$ ) ! ,f$]al ,gov]nm5t "u ?is ,act1 includ+ ! ext5t1 if any1 to :i* su* cyb] ?reat indicators may be us$ by ! ,f$]al ,gov]nm5t2 & 7,d7 ensure !re is an audit capability & appropriate sanctions 9 place = (fic]s1 employees1 or ag5ts ( a ,f$]al entity :o kn[+ly & willfully conduct activities "u ?is ,act 9 an unau?oriz$ mann]4 7b7 ,privacy & civil lib]ties 7#a7 ,guidel9es ( ,attorney ,g5]al ,! ,attorney ,g5]al %all1 9 coord9ation ) ! heads ( ! appropriate ,f$]al ag5cies & 9 consultation ) (fic]s designat$ "u section #ajfb ( ! ,national ,security ,intellig5ce ,re=m ,act ( #bjjd 7#db ,u4,s4,c4 #bjjj;ee-#a71 develop & p]iodically review guidel9es relat+ to privacy & civil lib]ties :i* %all gov]n ! receipt1 ret5tion1 use1 & dissem9ation ( cyb] ?reat indicators by a ,f$]al entity obta9$ 9 connection ) activities au?oriz$ 9 ?is ,act4 7#b7 ,cont5t ,! guidel9es develop$ & review$ "u p>agraph 7#a7 %all1 consi/5t ) ! ne$ to protect in=mation sy/ems f cyb]security ?reats & mitigate cyb]security ?reats-- 7,a7 limit ! impact on privacy & civil lib]ties ( activities by ! ,f$]al ,gov]nm5t "u ?is ,act2 7,b7 limit ! receipt1 ret5tion1 use1 & dissem9ation ( cyb] ?reat indicators conta9+ p]sonal in=mation ( or id5tify+ specific p]sons1 includ+ e/abli%+-- 7i7 a process = ! timely de/ruction ( in=mation t is kn[n n to be directly relat$ to uses au?oriz$ "u ?is ,act2 & 7ii7 specific limitations on ! l5g? ( any p]iod 9 :i* a cyb] ?reat indicator may be reta9$2 7,c7 include requirem5ts to safegu>d cyb] ?reat indicators conta9+ p]sonal in=mation ( or id5tify+ specific p]sons f unau?oriz$ access or acquisition1 includ+ appropriate sanctions = activities by (fic]s1 employees1 or ag5ts ( ! ,f$]al ,gov]nm5t 9 contrav5tion ( su* guidel9es2 7,d7 include proc$ures = notify+ entities if in=mation receiv$ pursuant to ?is section is kn[n by a ,f$]al entity receiv+ ! in=mation n to con/itute a cyb] ?reat indicator2 & 7,e7 protect ! confid5tiality ( cyb] ?reat indicators conta9+ p]sonal in=mation ( or id5tify+ specific p]sons to ! greate/ ext5t practicable & require recipi5ts to be in=m$ t su* indicators may only be us$ = purposes au?oriz$ "u ?is ,act4 7c7 ,capability & process )9 ! ,dep>tm5t ( ,homel& ,security 7#a7 ,9 g5]al ,n lat] ?an #ij days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,homel& ,security1 9 coord9ation ) ! heads ( ! appropriate ,f$]al entities1 %all develop & implem5t a capability & process )9 ! ,dep>tm5t ( ,homel& ,security t-- 7,a7 %all accept f any entity 9 real "t cyb] ?reat indicators & c\nt]measures 9 an electronic =mat1 pursuant to ?is section2 7,b7 %all1 ^u submittal ( ! c]tification "u p>agraph 7#b7 t su* capability & process fully & effectively op]ates z describ$ 9 su* p>agraph1 be ! process by :i* ! ,f$]al ,gov]nm5t receives cyb] ?reat indicators & c\nt]measures "u ?is ,act 9 an electronic =mat t are %>$ by a private entity ) ! ,f$]al ,gov]nm5t except-- 7i7 communications betwe5 a ,f$]al entity & a private entity reg>d+ a previ\sly %>$ cyb] ?reat indicator2 7ii7 volunt>y or legally compell$ p>ticipation 9 an op5 ,f$]al inve/igation2 7iii7 in=mation receiv$ ?r\gh an automat$ malw>e analysis capability op]at$ by ! ,f$]al ,bureau ( ,inve/igation t is design$ to ensure t in=mation receiv$ ?r\gh & analysis produc$ by su* capability is also imm$iately %>$ ?r\gh ! capability & process develop$ by ! ,secret>y ( ,homel& ,security "u ?is p>agraph2 7iv7 communications ) a ,f$]al regulatory au?ority by regulat$ entities reg>d+ a cyb]security ?reat2 & 7v7 cyb] ?reat indicators or c\nt]measures %>$ ) a ,f$]al entity z "p ( a contractual or /atutory requirem5t2 7,c7 ensures t all ( ! appropriate ,f$]al entities receive su* cyb] ?reat indicators 9 real "t & simultane\s ) receipt ?r\gh ! process )9 ! ,dep>tm5t ( ,homel& ,security2 & 7,d7 is 9 compliance ) ! policies1 proc$ures1 & guidel9es requir$ by ?is section4 7#b7 ,c]tification ,n lat] ?an #aj days prior to ! implem5tation ( ! capability & process requir$ by p>agraph 7#a71 ! ,secret>y ( ,homel& ,security %all1 9 consultation ) ! heads ( ! appropriate ,f$]al entities1 c]tify to ,congress :e!r su* capability & process fully & effectively op]ates-- 7,a7 z ! process by :i* ! ,f$]al ,gov]nm5t receives f any entity cyb] ?reat indicators & c\nt]measures 9 an electronic =mat "u ?is ,act2 & 7,b7 9 accordance ) ! policies1 proc$ures1 & guidel9es develop$ "u ?is section4 7#c7 ,public notice & access ,! ,secret>y ( ,homel& ,security %all ensure !re is public notice (1 & access to1 ! capability & process develop$ & implem5t$ "u p>agraph 7#a7 s t any entity may %>e cyb] ?reat indicators & c\nt]measures ?r\gh su* process ) ! ,f$]al ,gov]nm5t & t all ( ! appropriate ,f$]al entities receive su* cyb] ?reat indicators & c\nt]measures 9 real "t & simultane\s ) receipt ?r\gh ! process )9 ! ,dep>tm5t ( ,homel& ,security4 7#d7 ,o!r ,f$]al entities ,! process develop$ & implem5t$ "u p>agraph 7#a7 %all ensure t o!r ,f$]al entities receive 9 a timely mann] any cyb] ?reat indicators & c\nt]measures %>$ ) ! ,f$]al ,gov]nm5t ?r\gh ! process creat$ 9 ?is subsection4 7#e7 ,reports 7,a7 ,report on developm5t & implem5tation 7i7 ,9 g5]al ,n lat] ?an #fj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,homel& ,security %all submit to ,congress a report on ! developm5t & implem5tation ( ! capability & process requir$ by p>agraph 7#a71 includ+ a description ( su* capability & process & ! public notice (1 & access to1 su* process4 7ii7 ,classifi$ annex ,! report requir$ by clause 7i7 %all be submitt$ 9 unclassifi$ =m1 b may include a classifi$ annex4 7,b7 ,report on automat$ malw>e analysis capability ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ! ,f$]al ,bureau ( ,inve/igation & ! ,secret>y ( ,homel& ,security %all submit to ,congress a report on ! implem5tation ( ! automat$ malw>e analysis capability describ$ 9 p>agraph 7#a77;,b77iii71 includ+ an assessm5t ( ! feasibility & advisability ( transf]r+ ! adm9i/ration & op]ation ( su* capability to ! ,dep>tm5t ( ,homel& ,security4 7d7 ,in=mation %>$ ) or provid$ to ! ,f$]al ,gov]nm5t 7#a7 ,no waiv] ( privilege or protection ,! provision ( cyb] ?reat indicators & c\nt]measures to ! ,f$]al ,gov]nm5t "u ?is ,act %all n con/itute a waiv] ( any applicable privilege or protection provid$ by law1 includ+ trade secret protection4 7#b7 ,propriet>y in=mation ,a cyb] ?reat indicator or c\nt]measure provid$ by an entity to ! ,f$]al ,gov]nm5t "u ?is ,act %all be consid]$ ! comm]cial1 f9ancial1 & propriet>y in=mation ( su* entity :5 s designat$ by su* entity4 7#c7 ,exemption f disclosure ,cyb] ?reat indicators & c\nt]measures provid$ to ! ,f$]al ,gov]nm5t "u ?is ,act %all be-- 7,a7 deem$ volunt>ily %>$ in=mation & exempt f disclosure "u section #eeb ( title #e1 ,unit$ ,/ates ,code1 & any ,/ate1 tribal1 or local law requir+ disclosure ( in=mation or records2 & 7,b7 )held1 )\t discretion1 f ! public "u section #eeb7;b77#c77;,b7 ( title #e1 ,unit$ ,/ates ,code1 & any ,/ate1 tribal1 or local provision ( law requir+ disclosure ( in=mation or records4 7#d7 ,ex p>te communications ,! provision ( cyb] ?reat indicators & c\nt]measures to ! ,f$]al ,gov]nm5t "u ?is ,act %all n be subject to ! rules ( any ,f$]al ag5cy or dep>tm5t or any judicial doctr9e reg>d+ ex p>te communications ) a decisionmak+ (ficial4 7#e7 ,disclosure1 ret5tion1 & use 7,a7 ,au?oriz$ activities ,cyb] ?reat indicators & c\nt]measures provid$ to ! ,f$]al ,gov]nm5t "u ?is ,act may be disclos$ to1 reta9$ by1 & us$ by1 consi/5t ) o!rwise applicable ,f$]al law1 any ,f$]al ag5cy or dep>tm5t1 compon5t1 (fic]1 employee1 or ag5t ( ! ,f$]al ,gov]nm5t solely =-- 7i7 a cyb]security purpose2 7ii7 ! purpose ( respond+ to1 or o!rwise prev5t+ or mitigat+1 an imm95t ?reat ( dea? or s]i\s bodily h>m2 7iii7 ! purpose ( respond+ to1 or o!rwise prev5t+ or mitigat+1 a s]i\s ?reat to a m9or1 includ+ sexual exploitation & ?reats to physical safety2 or 7iv7 ! purpose ( prev5t+1 inve/igat+1 or prosecut+ an (f5se aris+ out ( a ?reat describ$ 9 clause 7ii7 or any ( ! (f5ses li/$ 9-- 7,i7 sections #ajbh ?r\gh #ajcj ( title #ah1 ,unit$ ,/ates ,code 7relat+ to fraud & id5tity !ft72 7,,ii7 *apt] #cg ( su* title 7relat+ to espionage & c5sor%ip72 & 7,,iii7 *apt] #ij ( su* title 7relat+ to protection ( trade secrets74 7,b7 ,prohibit$ activities ,cyb] ?reat indicators & c\nt]measures provid$ to ! ,f$]al ,gov]nm5t "u ?is ,act %all n be disclos$ to1 reta9$ by1 or us$ by any ,f$]al ag5cy or dep>tm5t = any use n p]mitt$ "u subp>agraph 7,a74 7,c7 ,privacy & civil lib]ties ,cyb] ?reat indicators & c\nt]measures provid$ to ! ,f$]al ,gov]nm5t "u ?is ,act %all be reta9$1 us$1 & dissem9at$ by ! ,f$]al ,gov]nm5t-- 7i7 9 accordance ) ! policies1 proc$ures1 & guidel9es requir$ by subsections 7a7 & 7b72 7ii7 9 a mann] t protects f unau?oriz$ use or disclosure any cyb] ?reat indicators t may conta9 p]sonal in=mation ( or id5tify+ specific p]sons2 & 7iii7 9 a mann] t protects ! confid5tiality ( cyb] ?reat indicators conta9+ in=mation (1 or t id5tifies1 a specific p]son4 7,d7 ,f$]al regulatory au?ority 7i7 ,9 g5]al ,cyb] ?reat indicators & c\nt]measures provid$ to ! ,f$]al ,gov]nm5t "u ?is ,act may1 consi/5t ) ,f$]al or ,/ate regulatory au?ority specifically relat+ to ! prev5tion or mitigation ( cyb]security ?reats to in=mation sy/ems1 in=m ! developm5t or implem5tation ( regulations relat+ to su* in=mation sy/ems4 7ii7 ,limitation ,cyb] ?reat indicators & c\nt]measures provid$ to ! ,f$]al ,gov]nm5t "u ?is ,act %all n be directly us$ by any ,f$]al1 ,/ate1 tribal1 or local gov]nm5t dep>tm5t or ag5cy to regulate ! lawful activities ( an entity1 includ+ activities relat+ to monitor+1 op]ation ( c\nt]measures1 or %>+ ( cyb] ?reat indicators4 7iii7 ,exception ,proc$ures develop$ & implem5t$ "u ?is ,act %all n be consid]$ regulations )9 ! mean+ ( ?is subp>agraph4 #f4 ,protection f liability 7a7 ,monitor+ ( in=mation sy/ems ,no cause ( action %all lie or be ma9ta9$ 9 any c\rt aga9/ any private entity1 & su* action %all be promptly dismiss$1 = ! monitor+ ( in=mation sy/ems & in=mation "u subsection 7a7 ( section #d t is conduct$ 9 accordance ) ?is ,act4 7b7 ,%>+ or receipt ( cyb] ?reat indicators ,no cause ( action %all lie or be ma9ta9$ 9 any c\rt aga9/ any entity1 & su* action %all be promptly dismiss$1 = ! %>+ or receipt ( cyb] ?reat indicators or c\nt]measures "u subsection 7c7 ( section #d if-- 7#a7 su* %>+ or receipt is conduct$ 9 accordance ) ?is ,act2 & 7#b7 9 a case 9 :i* a cyb] ?reat indicator or c\nt]measure is %>$ ) ! ,f$]al ,gov]nm5t 9 an electronic =mat1 ! cyb] ?reat indicator or c\nt]measure is %>$ 9 a mann] t is consi/5t ) section #e7;c74 7c7 ,good fai? def5se 9 c]ta9 causes ( action ,if a cause ( action is n o!rwise dismiss$ or preclud$ "u subsection 7a7 or 7b71 a good fai? reliance by an entity t ! conduct compla9$ ( 0 p]mitt$ "u ?is ,act %all be a complete def5se aga9/ any action br\ght 9 any c\rt aga9/ su* entity4 7d7 ,con/ruction ,no?+ 9 ?is section %all be con/ru$ to require dismissal ( a cause ( action aga9/ an entity t has engag$ 9-- 7#a7 gross neglig5ce or wilful misconduct 9 ! c\rse ( conduct+ activities au?oriz$ by ?is ,act2 or 7#b7 conduct t is o!rwise n 9 compliance ) ! requirem5ts ( ?is ,act4 #g4 ,ov]sight ( ,gov]nm5t activities 7a7 ,bi5nial report on implem5tation 7#a7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 & n less frequ5tly ?an once e #b ye>s !reaft]1 ! heads ( ! appropriate ,f$]al entities %all jo9tly submit to ,congress a detail$ report conc]n+ ! implem5tation ( ?is ,act4 7#b7 ,cont5ts ,ea* report submitt$ "u p>agraph 7#a7 %all include ! foll[+3 7,a7 ,an assessm5t ( ! suffici5cy ( ! policies1 proc$ures1 & guidel9es requir$ by section #e 9 ensur+ t cyb] ?reat indicators are %>$ effectively & responsibly )9 ! ,f$]al ,gov]nm5t4 7,b7 ,an evaluation ( ! effectiv5ess ( real-"t in=mation %>+ ?r\gh ! capability & process develop$ "u section #e7;c71 includ+ any imp$im5ts to su* real-"t %>+4 7,c7 ,an assessm5t ( ! suffici5cy ( ! proc$ures develop$ "u section #c 9 ensur+ t cyb] ?reat indicators 9 ! possession ( ! ,f$]al ,gov]nm5t are %>$ 9 a timely & adequate mann] ) appropriate entities1 or1 if appropriate1 are made publicly available4 7,d7 ,an assessm5t ( :e!r cyb] ?reat indicators h be5 prop]ly classifi$ & an acc\nt+ ( ! numb] ( security cle>ances au?oriz$ by ! ,f$]al ,gov]nm5t = ! purposes ( ?is ,act4 7,e7 ,a review ( ! type ( cyb] ?reat indicators %>$ ) ! ,f$]al ,gov]nm5t "u ?is ,act1 includ+-- 7i7 ! degree to :i* su* in=mation may impact ! privacy & civil lib]ties ( specific p]sons2 7ii7 a quantitative & qualitative assessm5t ( ! impact ( ! %>+ ( su* cyb] ?reat indicators ) ! ,f$]al ,gov]nm5t on privacy & civil lib]ties ( specific p]sons2 & 7iii7 ! adequacy ( any /eps tak5 by ! ,f$]al ,gov]nm5t to r$uce su* impact4 7,f7 ,a review ( actions tak5 by ! ,f$]al ,gov]nm5t bas$ on cyb] ?reat indicators %>$ ) ! ,f$]al ,gov]nm5t "u ?is ,act1 includ+ ! appropriat5ess ( any subsequ5t use or dissem9ation ( su* cyb] ?reat indicators by a ,f$]al entity "u section #e4 7,g7 ,a description ( any significant violations ( ! requirem5ts ( ?is ,act by ! ,f$]al ,gov]nm5t4 7,h7 ,a classifi$ summ>y ( ! numb] & type ( entities t receiv$ classifi$ cyb] ?reat indicators f ! ,f$]al ,gov]nm5t "u ?is ,act & an evaluation ( ! risks & b5efits ( %>+ su* cyb] ?reat indicators4 7#c7 ,recomm5dations ,ea* report submitt$ "u p>agraph 7#a7 may include su* recomm5dations z ! heads ( ! appropriate ,f$]al entities may h = improvem5ts or modifications to ! au?orities & processes "u ?is ,act4 7#d7 ,=m ( report ,ea* report requir$ by p>agraph 7#a7 %all be submitt$ 9 unclassifi$ =m1 b %all include a classifi$ annex4 7b7 ,reports on privacy & civil lib]ties 7#a7 ,bi5nial report f ,privacy & ,civil ,lib]ties ,ov]sight ,bo>d ,n lat] ?an #b ye>s aft] ! date ( ! enactm5t ( ?is ,act & n less frequ5tly ?an once e #b ye>s !reaft]1 ! ,privacy & ,civil ,lib]ties ,ov]sight ,bo>d %all submit to ,congress & ! ,presid5t a report provid+-- 7,a7 an assessm5t ( ! privacy & civil lib]ties impact ( ! type ( activities c>ri$ out "u ?is ,act2 & 7,b7 an assessm5t ( ! suffici5cy ( ! policies1 proc$ures1 & guidel9es e/abli%$ pursuant to section #e 9 address+ privacy & civil lib]ties conc]ns4 7#b7 ,bi5nial report ( ,inspectors g5]al 7,a7 ,9 g5]al ,n lat] ?an #b ye>s aft] ! date ( ! enactm5t ( ?is ,act & n less frequ5tly ?an once e #b ye>s !reaft]1 ! ,inspector ,g5]al ( ! ,dep>tm5t ( ,homel& ,security1 ! ,inspector ,g5]al ( ! ,intellig5ce ,community1 ! ,inspector ,g5]al ( ! ,dep>tm5t ( ,ju/ice1 & ! ,inspector ,g5]al ( ! ,dep>tm5t ( ,def5se %all jo9tly submit to ,congress a report on ! receipt1 use1 & dissem9ation ( cyb] ?reat indicators & c\nt]measures t h be5 %>$ ) ,f$]al entities "u ?is ,act4 7,b7 ,cont5ts ,ea* report submitt$ "u subp>agraph 7,a7 %all include ! foll[+3 7i7 ,a review ( ! types ( cyb] ?reat indicators %>$ ) ,f$]al entities4 7ii7 ,a review ( ! actions tak5 by ,f$]al entities z a result ( ! receipt ( su* cyb] ?reat indicators4 7iii7 ,a li/ ( ,f$]al entities receiv+ su* cyb] ?reat indicators4 7iv7 ,a review ( ! %>+ ( su* cyb] ?reat indicators among ,f$]al entities to id5tify inappropriate b>ri]s to %>+ in=mation4 7#c7 ,recomm5dations ,ea* report submitt$ "u ?is subsection may include su* recomm5dations z ! ,privacy & ,civil ,lib]ties ,ov]sight ,bo>d1 ) respect to a report submitt$ "u p>agraph 7#a71 or ! ,inspectors ,g5]al ref]r$ to 9 p>agraph 7#b77;,a71 ) respect to a report submitt$ "u p>agraph 7#b71 may h = improvem5ts or modifications to ! au?orities "u ?is ,act4 7#d7 ,=m ,ea* report requir$ "u ?is subsection %all be submitt$ 9 unclassifi$ =m1 b may include a classifi$ annex4 #h4 ,con/ruction & preemption 7a7 ,o!rwise lawful disclosures ,no?+ 9 ?is ,act %all be con/ru$ to limit or prohibit o!rwise lawful disclosures ( communications1 records1 or o!r in=mation1 includ+ report+ ( kn[n or suspect$ crim9al activity1 by an entity to any o!r entity or ! ,f$]al ,gov]nm5t "u ?is ,act4 7b7 ,:i/lebl[] protections ,no?+ 9 ?is ,act %all be con/ru$ to preempt any employee f ex]cis+ rights curr5tly provid$ "u any :i/lebl[] law1 rule1 or regulation4 7c7 ,protection ( s\rces & me?ods ,no?+ 9 ?is ,act %all be con/ru$-- 7#a7 z creat+ any immunity aga9/1 or o!rwise affect+1 any action br\ght by ! ,f$]al ,gov]nm5t1 or any ag5cy or dep>tm5t !re(1 to en=ce any law1 executive ord]1 or proc$ure gov]n+ ! appropriate h&l+1 disclosure1 or use ( classifi$ in=mation2 7#b7 to impact ! conduct ( au?oriz$ law en=cem5t or intellig5ce activities2 or 7#c7 to modify ! au?ority ( a dep>tm5t or ag5cy ( ! ,f$]al ,gov]nm5t to protect s\rces & me?ods & ! national security ( ! ,unit$ ,/ates4 7d7 ,relation%ip to o!r laws ,no?+ 9 ?is ,act %all be con/ru$ to affect any requirem5t "u any o!r provision ( law = an entity to provide in=mation to ! ,f$]al ,gov]nm5t4 7e7 ,prohibit$ conduct ,no?+ 9 ?is ,act %all be con/ru$ to p]mit price-fix+1 allocat+ a m>ket betwe5 competitors1 monopoliz+ or attempt+ to monopolize a m>ket1 boycott+1 or ex*anges ( price or co/ in=mation1 cu/om] li/s1 or in=mation reg>d+ future competitive plann+4 7f7 ,in=mation %>+ relation%ips ,no?+ 9 ?is ,act %all be con/ru$-- 7#a7 to limit or modify an exi/+ in=mation %>+ relation%ip2 7#b7 to prohibit a new in=mation %>+ relation%ip2 7#c7 to require a new in=mation %>+ relation%ip betwe5 any entity & ! ,f$]al ,gov]nm5t2 7#d7 to require ! use ( ! capability & process )9 ! ,dep>tm5t ( ,homel& ,security develop$ "u section #e7;c72 or 7#e7 to am5d1 repeal1 or sup]s$e any curr5t or future contractual agreem5t1 t]ms ( s]vice agreem5t1 or o!r contractual relation%ip betwe5 any entities1 or betwe5 any entity & ! ,f$]al ,gov]nm5t4 7g7 ,anti-task+ re/riction ,no?+ 9 ?is ,act %all be con/ru$ to p]mit ! ,f$]al ,gov]nm5t-- 7#a7 to require an entity to provide in=mation to ! ,f$]al ,gov]nm5t2 or 7#b7 to condition ! %>+ ( cyb] ?reat indicators ) an entity on su* entity's provision ( cyb] ?reat indicators to ! ,f$]al ,gov]nm5t4 7h7 ,no liability = non-p>ticipation ,no?+ 9 ?is ,act %all be con/ru$ to subject any entity to liability = *oos+ n to engage 9 ! volunt>y activities au?oriz$ 9 ?is ,act4 7i7 ,use & ret5tion ( in=mation ,no?+ 9 ?is ,act %all be con/ru$ to au?orize1 or to modify any exi/+ au?ority (1 a dep>tm5t or ag5cy ( ! ,f$]al ,gov]nm5t to reta9 or use any in=mation %>$ "u ?is ,act = any use o!r ?an p]mitt$ 9 ?is ,act4 7j7 ,f$]al preemption 7#a7 ,9 g5]al ,?is ,act sup]s$es any /atute or o!r law ( a ,/ate or political subdivision ( a ,/ate t re/ricts or o!rwise expressly regulates an activity au?oriz$ "u ?is ,act4 7#b7 ,/ate law en=cem5t ,no?+ 9 ?is ,act %all be con/ru$ to sup]s$e any /atute or o!r law ( a ,/ate or political subdivision ( a ,/ate conc]n+ ! use ( au?oriz$ law en=cem5t practices & proc$ures4 7k7 ,regulatory au?ority ,no?+ 9 ?is ,act %all be con/ru$-- 7#a7 to au?orize ! promulgation ( any regulations n specifically au?oriz$ by ?is ,act2 7#b7 to e/abli% any regulatory au?ority n specifically e/abli%$ "u ,act2 or 7#c7 to au?orize regulatory actions t w\ld duplicate or conflict ) regulatory requirem5ts1 m&atory /&>ds1 or relat$ processes "u ,f$]al law4 #i4 ,report on cyb]security ?reats 7a7 ,requirem5t = report ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ,national ,intellig5ce1 9 coord9ation ) ! heads ( o!r appropriate elem5ts ( ! intellig5ce community1 %all submit to ! ,select ,committee on ,intellig5ce ( ! ,s5ate & ! ,p]man5t ,select ,committee on ,intellig5ce ( ! ,h\se ( ,repres5tatives a report on cyb]security ?reats1 includ+ cyb] attacks1 !ft1 & data brea*es4 ,su* report %all include ! foll[+3 7#a7 ,an assessm5t ( ! curr5t intellig5ce %>+ & coop]ation relation%ips ( ! ,unit$ ,/ates ) o!r c\ntries reg>d+ cyb]security ?reats1 includ+ cyb] attacks1 !ft1 & data brea*es1 direct$ aga9/ ! ,unit$ ,/ates & :i* ?reat5 ! ,unit$ ,/ates national security int]e/s & economy & intellectual prop]ty1 specifically id5tify+ ! relative utility ( su* relation%ips1 :i* elem5ts ( ! intellig5ce community p>ticipate 9 su* relation%ips1 & :e!r & h[ su* relation%ips c\ld be improv$4 7#b7 ,a li/ & an assessm5t ( ! c\ntries & non-/ate actors t are ! prim>y ?reats ( c>ry+ out a cyb]security ?reat1 includ+ a cyb] attack1 !ft1 or data brea*1 aga9/ ! ,unit$ ,/ates & :i* ?reat5 ! ,unit$ ,/ates national security1 economy1 & intellectual prop]ty4 7#c7 ,a description ( ! ext5t to :i* ! capabilities ( ! ,unit$ ,/ates ,gov]nm5t to respond to or prev5t cyb]security ?reats1 includ+ cyb] attacks1 !ft1 or data brea*es1 direct$ aga9/ ! ,unit$ ,/ates private sector are degrad$ by a delay 9 ! prompt notification by private entities ( su* ?reats or cyb] attacks1 !ft1 & brea*es4 7#d7 ,an assessm5t ( additional te*nologies or capabilities t w\ld enhance ! ability ( ! ,unit$ ,/ates to prev5t & to respond to cyb]security ?reats1 includ+ cyb] attacks1 !ft1 & data brea*es4 7#e7 ,an assessm5t ( any te*nologies or practices utiliz$ by ! private sector t c\ld be rapidly field$ to assi/ ! intellig5ce community 9 prev5t+ & respond+ to cyb]security ?reats4 7b7 ,intellig5ce community def9$ ,9 ?is section1 ! t]m intellig5ce community has ! mean+ giv5 t t]m 9 section #c7d7 ( ! ,national ,security ,act ( #aidg 7#ej ,u4,s4,c4 #cjjc7d774 7c7 ,=m ( report ,! report requir$ by subsection 7a7 %all be made available 9 classifi$ & unclassifi$ =ms4 #aj4 ,con=m+ am5dm5ts 7a7 ,public in=mation ,section #eeb7;b7 ( title #e1 ,unit$ ,/ates ,code1 is am5d$-- 7#a7 9 p>agraph 7#h71 by /rik+ or at ! end2 7#b7 9 p>agraph 7#i71 by /rik+ wells4 & ins]t+ wells2 or2 & 7#c7 by add+ at ! end ! foll[+3 7#aj7 in=mation %>$ ) or provid$ to ! ,f$]al ,gov]nm5t pursuant to ! ,cyb]security ,in=mation ,%>+ ,act ( #bjad4 4 7b7 ,modification ( limitation on dissem9ation ( c]ta9 in=mation conc]n+ p5etrations ( def5se contractor networks ,section #ida7;c77#c7 ( ! ,national ,def5se ,au?orization ,act = ,fiscal ,ye> #bjac 7,public ,law #aab-bci7 is am5d$ by ins]t+ at ! end ! foll[+3 ,! ,secret>y may %>e su* in=mation ) o!r ,f$]al entities if su* in=mation consi/s ( cyb] ?reat indicators & c\nt]measures & su* in=mation is %>$ consi/5t ) ! policies & proc$ures promulgat$ by ! ,attorney ,g5]al "u section #e ( ! ,cyb]security ,in=mation ,%>+ ,act ( #bjad44 ,july #aj1 #bjad,read twice & plac$ on ! cal5d>