,,ii #aag? ,,congress #a/ ,session ,s4 #bdjg ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,july #ba1 #bjba ,mr4 ,w>n] 7= himself1 ,mr4 ,rubio1 ,ms4 ,coll9s1 ,mr4 ,he9ri*1 ,mr4 ,te/]1 ,mr4 ,k+1 ,mr4 ,burr1 ,mr4 ,blunt1 ,mr4 ,b5net1 ,mr4 ,casey1 ,mr4 ,sasse1 ,mrs4 ,gillibr&1 ,mrs4 ,fe9/e91 ,mr4 ,ris*1 & ,mr4 ,man*97 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ,a ,,bill ,to ensure timely ,f$]al ,gov]nm5t aw>5ess ( cyb] intrusions t pose a ?reat to national security1 enable ! developm5t ( a common op]at+ picture ( national-level cyb] ?reats1 & to make appropriate1 actionable cyb] ?reat in=mation available to ! relevant gov]nm5t & private sector entities1 z well z ! public1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,cyb] ,incid5t ,notification ,act ( #bjba4 #b4 ,cyb]security ,intrusion ,report+ ,capabilities 7a7 ,9 g5]al ,title ,,xxii ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fea et seq47 is am5d$ by add+ at ! end ! foll[+3 ,c ,cyb]security ,intrusion ,report+ ,capabilities #bbca4 ,def9itions ,9 ?is subtitle3 7#a7 ,def9itions f section #bbja ,! def9itions 9 section #bbja %all apply to ?is subtitle1 except z o!rwise provid$4 7#b7 ,ag5cy ,! t]m ,ag5cy means ! ,cyb]security & ,infra/ructure ,security ,ag5cy4 7#c7 ,appropriate congressional committees ,9 ?is section1 ! t]m appropriate congressional committees means-- 7,a7 ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate2 7,b7 ! ,select ,committee on ,intellig5ce ( ! ,s5ate2 7,c7 ! ,committee on ! ,judici>y ( ! ,s5ate2 7,d7 ! ,committee on ,arm$ ,s]vices ( ! ,s5ate2 7,e7 ! ,committee on ,homel& ,security ( ! ,h\se ( ,repres5tatives2 7,f7 ! ,p]man5t ,select ,committee on ,intellig5ce ( ! ,h\se ( ,repres5tatives2 7,g7 ! ,committee on ! ,judici>y ( ! ,h\se ( ,repres5tatives2 & 7,h7 ! ,committee on ,arm$ ,s]vices ( ! ,h\se ( ,repres5tatives4 7#d7 ,cov]$ entity ,! t]m cov]$ entity has ! mean+ giv5 ! t]m "u ! rules requir$ to be promulgat$ "u section #bbcc7;d74 7#e7 ,critical infra/ructure ,! t]m critical infra/ructure has ! mean+ giv5 ! t]m 9 section #ajaf7;e7 ( ! ,critical ,infra/ructure ,protection ,act ( #bjja 7#db ,u4,s4,c4 #eaie;c7e774 7#f7 ,cyb] ,intrusion ,report+ ,capabilities ,! t]m ,cyb] ,intrusion ,report+ ,capabilities means ! cyb]security intrusion report+ capabilities e/abli%$ "u section #bbcb4 7#g7 ,cyb]security notification ,! t]m cyb]security notification means a notification ( a cyb]security intrusion1 z def9$ 9 accordance ) section #bbcc4 7#h7 ,director ,! t]m ,director means ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy4 7#i7 ,f$]al ag5cy ,! t]m ,f$]al ag5cy has ! mean+ giv5 ! t]m ag5cy 9 section #cejb ( title #dd1 ,unit$ ,/ates ,code4 7#aj7 ,f$]al contractor ,! t]m ,f$]al contractor-- 7,a7 means a contractor or subcontractor 7at any ti]7 ( ! ,unit$ ,/ates ,gov]nm5t2 & 7,b7 does n include a contractor or subcontractor t holds only-- 7i7 s]vice contracts to provide h\sekeep+ or cu/odial s]vices2 or 7ii7 contracts to provide products or s]vices unrelat$ to in=mation te*nology bel[ ! micro-pur*ase ?re%old 7z def9$ 9 section #b4aja ( title #dh1 ,code ( ,f$]al ,regulations1 or any successor !reto74 7#aa7 ,in=mation te*nology ,! t]m in=mation te*nology has ! mean+ giv5 ! t]m 9 section #aaaja ( title #dj1 ,unit$ ,/ates ,code4 7#ab7 ,ransomw>e ,! t]m ransomw>e means any type ( malici\s s(tw>e t prev5ts ! legitimate own] or op]ator ( an in=mation sy/em or network f access+ comput] files1 sy/ems1 or networks & dem&s ! paym5t ( a ransom = ! return ( su* access4 #bbcb4 ,e/abli%m5t ( cyb]security intrusion report+ capabilities 7a7 ,designation ,! ,ag5cy %all be ! designat$ ag5cy )9 ! ,f$]al ,gov]nm5t to receive cyb]security notifications f o!r ,f$]al ag5cies & cov]$ entities 9 accordance ) ?is subtitle4 7b7 ,e/abli%m5t ,n lat] ?an #bdj days aft] ! date ( enactm5t ( ?is subtitle1 ! ,director %all e/abli% ,cyb] ,intrusion ,report+ ,capabilities to facilitate ! submission ( timely1 secure1 & confid5tial cyb]security notifications f ,f$]al ag5cies & cov]$ entities to ! ,ag5cy4 7c7 ,re-,evaluation ( security ,! ,director %all re-evaluate ! security ( ! ,cyb] ,intrusion ,report+ ,capabilities n less frequ5tly ?an once e #b ye>s4 7d7 ,requirem5ts ,! ,cyb] ,intrusion ,report+ ,capabilities %all all[ ! ,ag5cy-- 7#a7 to accept classifi$ submissions & notifications2 & 7#b7 to accept a cyb]security notification f any entity1 reg>dless ( :e!r ! entity is a cov]$ entity4 7e7 ,limitations on use ( in=mation ,any cyb]security notification submitt$ to ! ,ag5cy ?r\gh ! ,cyb] ,intrusion ,report+ ,capabilities e/abli%$ "u ?is section-- 7#a7 %all be exempt f disclosure "u section #eeb ( title #e1 ,unit$ ,/ates ,code 7commonly ref]r$ to z ! 8,fre$om ( ,in=mation ,act071 9 accordance ) subsection 7b77#c77;,b7 ( su* section #eeb1 & any ,/ate1 ,tribal1 or local provision ( law requir+ disclosure ( in=mation or records2 & 7#b7 may n be-- 7,a7 admitt$ z evid5ce 9 any civil or crim9al action br\ght aga9/ ! victim ( ! cyb]security incid5t1 except = actions br\ght by ! ,f$]al ,gov]nm5t "u section #bbcc7;h72 or 7,b7 subject to a subpo5a1 unless ! subpo5a is issu$ by ,congress & necess>y = congressional ov]sight purposes4 7f7 ,privacy ,! ,ag5cy %all adopt privacy & data protection proc$ures1 bas$ on ! comp>able privacy & data protection proc$ures develop$ = in=mation receiv$ & %>$ pursuant to ! ,cyb]security ,in=mation ,%>+ ,act ( #bjae 7#f ,u4,s4,c4 #aeja et seq471 = in=mation submitt$ to ! ,ag5cy ?r\gh ! ,cyb] ,intrusion ,report+ ,capabilities e/abli%$ "u subsection 7b7 t is kn[n at ! "t ( %>+ to conta9 p]sonal in=mation ( a specific individual or in=mation t id5tifies a specific individual t is n directly relat$ to a cyb]security ?reat4 7g7 ,annual reports 7#a7 ,director report+ requirem5t ,n lat] ?an #a ye> aft] ! date on :i* ! ,cyb] ,intrusion ,report+ ,capabilities are e/abli%$ & once ea* ye> !reaft]1 ! ,director %all submit to ! appropriate congressional committees a report1 9 classifi$ =m if necess>y1 on ! numb] ( notifications receiv$ ?r\gh ! ,cyb] ,intrusion ,report+ ,capabilities1 & a description ( ! associat$ mitigations tak51 dur+ ! #a-ye> p]iod prec$+ ! report4 7#b7 ,secret>y report+ requirem5t ,n lat] ?an #a ye> aft] ! date on :i* ! ,cyb] ,intrusion ,report+ ,capabilities are e/abli%$1 & once ea* ye> !reaft]1 ! ,secret>y %all submit to ! appropriate congressional committees a report on-- 7,a7 ! categories ( cov]$ entities1 not+ additions or removals ( categories1 t are requir$ to submit cyb]security notifications2 & 7,b7 ! types ( cyb]security intrusions & o!r in=mation requir$ to be submitt$ z a cyb]security notification1 not+ any *anges f ! previ\s submission4 7#c7 ,=m ,! annual reports requir$ "u ?is subsection may be submitt$ z a s+le report = ea* ye>1 at ! discretion ( ! ,secret>y4 #bbcc4 ,requir$ notifications 7a7 ,notifications 7#a7 ,9 g5]al ,except z provid$ 9 p>agraph 7#b71 n lat] ?an #bd h\rs aft] ! confirmation ( a cyb]security intrusion or pot5tial cyb]security intrusion1 ! ,f$]al ag5cy or cov]$ entity t discov]$ ! cyb]security intrusion or pot5tial cyb]security intrusion %all submit a cyb]security notification to ! ,ag5cy ?r\gh ! ,cyb] ,intrusion ,report+ ,capabilities4 7#b7 ,exception ,if a ,f$]al ag5cy or cov]$ entity requir$ to submit a cyb]security notification "u p>agraph 7#a7 is subject to ano!r ,f$]al law1 regulation1 policy1 or gov]nm5t contract requir+ notification ( a cyb]security intrusion or pot5tial cyb]security intrusion to a ,f$]al ag5cy )9 less ?an #bd h\rs1 ! notification deadl9e requir$ 9 ! applicable law1 regulation1 or policy %all also apply to ! notification requir$ "u ?is section4 7b7 ,requir$ updates ,a ,f$]al ag5cy or cov]$ entity t submits a cyb]security notification "u subsection 7a7 %all1 until ! date on :i* ! cyb]security incid5t is mitigat$ or any foll[-up inve/igation is complet$1 submit updat$ cyb]security ?reat in=mation to ! ,ag5cy ?r\gh ! ,cyb] ,intrusion ,report+ ,capabilities n lat] ?an #gb h\rs aft] ! discov]y ( new in=mation4 7c7 ,requir$ cont5ts ,! notification & requir$ updates submitt$ "u subsections 7a7 & 7b7 %all include1 at m9imum1 any in=mation requir$ to be includ$ pursuant to ! rules promulgat$ "u subsection 7d74 7d7 ,requir$ rulemak+ 7#a7 ,9 g5]al ,not)/&+ any provisions set out 9 ?is title t may limit or re/rict ! promulgation ( rules1 & n lat] ?an #bgj days aft] ! date ( enactm5t ( ?is subtitle1 ! ,secret>y1 act+ ?r\gh ! ,director1 9 coord9ation ) ! ,director ( ,national ,intellig5ce1 ! ,director ( ! ,(fice ( ,managem5t & ,budget1 ! ,secret>y ( ,def5se1 & ! ,national ,cyb] ,director1 %all promulgate int]im f9al rules1 waiv+ prior public notice1 & accept+ comm5ts aft] ! effective date 9 ord] to in=m ! f9al rules-- 7,a7 t def9e cov]$ entity = ! purpose ( id5tify+ entities subject to ! cyb]security notification requirem5ts ( ?is section & :i* %all include1 at a m9imum1 ,f$]al contractors1 own]s or op]ators ( critical infra/ructure1 z det]m9$ appropriate by ! ,director bas$ on assessm5t ( risks pos$ by compromise ( critical infra/ructure op]ation1 & nongov]nm5tal entities t provide cyb]security incid5t response s]vices2 7,b7 t def9e cyb]security intrusion & pot5tial cyb]security intrusion = ! purpose ( det]m9+ :5 a cyb]security notification %all be submitt$ "u ?is section2 7,c7 t def9e cyb]security ?reat in=mation = ! purpose ( describ+ ! ?reat in=mation to be includ$ 9 a cyb]security notification "u ?is section2 7,d7 t def9e confirmation ( a cyb]security incid5t or pot5tial cyb]security incid5t = ! purpose ( det]m9+ :5 a notification obligation is trigg]$2 7,e7 t address :e!r a ,f$]al ag5cy or cov]$ entity %all be requir$ to provide a cyb]security notification = a cyb]security intrusion ( :i* ! ,f$]al ag5cy or cov]$ entity is aw>e1 b does n directly impact ! networks or in=mation sy/ems own$ or op]at$ by ! ,f$]al ag5cy or cov]$ entity2 & 7,f7 t conta9 o!r provisions necess>y to implem5t ! requirem5ts ( ?is subtitle4 7#b7 ,requirem5ts = def9itions ,at a m9imum1 ! def9itions ( cyb]security intrusion & pot5tial cyb]security intrusion requir$ to be promulgat$ "u p>agraph 7#a77;,b7 %all include a cyb]security intrusion1 includ+ an intrusion involv+ ransomw>e1 t-- 7,a7 involves or is assess$ to involve a nation-/ate2 7,b7 involves or is assess$ to involve an advanc$ p]si/5t ?reat cyb] actor2 7,c7 involves or is assess$ to involve a transnational organiz$ crime gr\p 7z def9$ 9 section #cf ( ! ,/ate ,dep>tm5t ,basic ,au?orities ,act ( #aief 7#bb ,u4,s4,c4 #bgjh772 7,d7 results1 or has ! pot5tial to result1 9 demon/rable h>m to ! national security int]e/s1 =eign relations1 or economy ( ! ,unit$ ,/ates or to ! public confid5ce1 civil lib]ties1 or public heal? & safety ( p 9 ! ,unit$ ,/ates2 7,e7 is or is likely to be ( significant national consequ5ce2 or 7,f7 is id5tifi$ by cov]$ entities b affects1 or has ! pot5tial to affect1 ag5cy sy/ems4 7#c7 ,requir$ in=mation = cyb]security ?reat in=mation ,= purposes ( ! rules requir$ to be promulgat$ "u p>agraph 7#a77;,b71 ! cyb]security ?reat in=mation requir$ to be includ$ 9 a cyb]security notification %all include1 at a m9imum-- 7,a7 a description ( ! cyb]security intrusion1 includ+ id5tification ( ! affect$ sy/ems & networks t 71 or are reasonably believ$ to h be51 access$ by a cyb] actor1 & ! e/imat$ dates ( :5 su* an intrusion is believ$ to h occurr$2 7,b7 a description ( ! vuln]abilities lev]ag$1 & tactics1 te*niques1 & proc$ures us$ by ! cyb] actors to conduct ! intrusion2 7,c7 any in=mation t c\ld reasonably help id5tify ! cyb] actor1 su* z int]net protocol addresses1 doma9 "n s]vice in=mation1 or samples ( malici\s s(tw>e2 & 7,d7 contact in=mation1 su* z a telephone numb] or electronic mail address1 t a ,f$]al ag5cy may use to contact ! cov]$ entity1 ei!r directly or ?r\gh an au?oriz$ ag5t ( ! cov]$ entity2 & 7,e7 actions tak5 to mitigate ! intrusion4 7#d7 ,requir$ consultation ,= purposes ( ! rules requir$ to be promulgat$ "u p>agraph 7#a71 ! ,secret>y1 act+ ?r\gh ! ,director1 %all consult ) appropriate private sector /akehold]s1 z det]m9$ by ! ,secret>y1 9 coord9ation ) ! ,director ( ,national ,intellig5ce1 ! ,director ( ! ,(fice ( ,managem5t & ,budget1 ! ,secret>y ( ,def5se1 & ! ,national ,cyb] ,director4 7e7 ,requir$ response ,! ,director %all develop & implem5t a process to respond to a ,f$]al ag5cy or cov]$ entity t submits a cyb]security notification "u subsection 7a7 n lat] ?an #b bus9ess days aft] ! date on :i* ! notification is submitt$1 :i* %all notify ! entity z to :e!r ! ,director requires fur!r in=mation ab\t ! cyb]security intrusion4 7f7 ,requir$ coord9ation ) ,sector ,risk ,managem5t or o!r regulatory ,ag5cies ,! ,secret>y ( ,homel& ,security1 act+ ?r\gh ! ,director1 9 coord9ation ) ! head ( ea* ,sector ,risk ,managem5t ,ag5cy & o!r ,f$]al ag5cies1 z det]m9$ appropriate by ! ,director1 %all-- 7#a7 e/abli% a set ( report+ crit]ia = ,sector ,risk ,managem5t ,ag5cies & o!r ,f$]al ag5cies z id5tifi$ by ! ,director to submit cyb]security notifications reg>d+ cyb]security incid5ts affect+ cov]$ entities 9 _! respective sectors or cov]$ entities regulat$ by su* ,f$]al ag5cies to ! ,ag5cy ?r\gh ! ,cyb] ,intrusion ,report+ ,capabilities2 & 7#b7 take /eps to h>monize ! crit]ia describ$ 9 p>agraph 7#a7 ) ! regulatory report+ requirem5ts 9 effect on ! date ( enactm5t ( ?is subtitle4 7g7 ,protection f liability ,no cause ( action %all lie or be ma9ta9$ 9 any c\rt by any p]son or entity1 o!r ?an ! ,f$]al ,gov]nm5t pursuant to subsection 7h7 or any applicable law1 aga9/ any cov]$ entity due to ! submission by t p]son or entity ( a cyb]security notification to ! ,ag5cy ?r\gh ! ,cyb] ,intrusion ,report+ ,sy/em1 9 con=mance ) ?is subtitle & ! rules promulgat$ "u subsection 7d71 & any su* action %all be promptly dismiss$4 7h7 ,en=cem5t 7#a7 ,9 g5]al ,if1 on ! basis ( any in=mation1 ! ,director det]m9es t a cov]$ entity has violat$1 or is 9 violation (1 ! requirem5ts ( ?is subtitle1 includ+ rules promulgat$ "u ?is subtitle1 ! ,director may assess a civil p5alty n to exce$ #j4e p]c5t ( ! entity's gross rev5ue f ! prior ye> = ea* day ! violation cont9u$ or cont9ues4 7#b7 ,det]m9ation ( am\nt ,! ,director %all h ! au?ority to r$uce or o!rwise modify ! civil p5alties assess$ "u p>agraph 7#a7 & may take into acc\nt mitigat+ or aggravat+ factors1 includ+ ! nature1 circum/ances1 ext5t1 & gravity ( ! violations &1 ) respect to ! cov]$ entity1 ! cov]$ entity's ability to pay1 degree ( culpability1 & hi/ory ( prior violations4 7#c7 ,proc$ures ,! ,director %all e/abli% proc$ures = conte/+ civil p5alties impos$ "u ?is section4 7#d7 ,cov]$ entities ) f$]al gov]nm5t contracts ,9 addition to ! p5alties au?oriz$ "u ?is subsection1 if a cov]$ entity ) a ,f$]al ,gov]nm5t contract violates ! requirem5ts ( ?is subtitle1 includ+ rules promulgat$ "u ?is subtitle1 ! ,adm9i/rator ( ! ,g5]al ,s]vices ,adm9i/ration may assess additional available p5alties1 includ+ removal f ! ,f$]al ,contract+ ,s*$ule4 7#e7 ,f$]al ag5cies ,if a ,f$]al ag5cy violates ! requirem5ts ( ?is subtitle1 ! violation %all be ref]r$ to ! ,inspector ,g5]al = ! ag5cy1 & %all be treat$ by ! ,inspector ,g5]al = ! ag5cy z a matt] ( urg5t conc]n4 7i7 ,exemption ,all in=mation collection activities "u sections #bbcb & #bbcc ( ?is subtitle %all be exempt f ! requirem5ts ( sections #cejf7;c71 #cejg1 #cejh1 & #ceji ( title #dd1 ,unit$ ,/ates ,code 7commonly kn[n z ! ,pap]work ,r$uction ,act74 7j7 ,rule ( con/ruction ,no?+ 9 ?is subtitle %all be con/ru$ to sup]s$e any report+ requirem5ts "u sub*apt] ,i ( *apt] #ce ( title #dd1 ,unit$ ,/ates ,code4 #bbcd4 ,pres]vation ( in=mation 7a7 ,9 g5]al ,n lat] ?an #fj days aft] ! date ( enactm5t ( ?is subtitle1 ! ,secret>y1 act+ ?r\gh ! ,director1 9 coord9ation ) ! ,director ( ! ,(fice ( ,managem5t & ,budget1 %all promulgate rules = data pres]vation /&>ds & requirem5ts = ,f$]al ag5cies & cov]$ entities to assi/ ) cyb]security intrusion response & associat$ inve/igatory activities4 7b7 ,m9imum requirem5ts ,! rules = data pres]vation promulgat$ "u subsection 7a7 %all require1 at a m9imum1 t a ,f$]al ag5cy or cov]$ entity t submits a cyb]security notification "u ?is subtitle %all pres]ve all ( ! data designat$ = pres]vation "u su* rules4 #bbce4 ,analysis ( cyb]security notifications 7a7 ,analysis 7#a7 ,9 g5]al ,! ,secret>y1 act+ ?r\gh ! ,director1 ! ,attorney ,g5]al1 & ! ,director ( ,national ,intellig5ce1 %all jo9tly develop proc$ures = ensur+ any cyb]security notification submitt$ to ! ,sy/em is promptly & appropriately analyz$ to-- 7,a7 det]m9e ! impact ( ! brea* or intrusion on ! national economy & national security2 7,b7 id5tify ! pot5tial s\rce or s\rces ( ! brea* or intrusion2 7,c7 recomm5d actions to mitigate ! impact ( ! brea* or intrusion2 & 7,d7 provide in=mation on me?ods ( secur+ ! sy/em or sy/ems aga9/ future brea*es or intrusions4 7#b7 ,requirem5t ,! proc$ures requir$ to be develop$ "u p>agraph 7#a7 %all include crit]ia = :5 rapid analysis1 notification1 or public dissem9ation is requir$4 7#c7 ,au?ority ,! ,secret>y1 act+ ?r\gh ! ,director1 ! ,attorney ,g5]al1 & ! ,director ( ,national ,intellig5ce may ea* designate employees )9 ea* respective ag5cy :o may se>* intellig5ce & law en=cem5t in=mation = cyb] ?reat intellig5ce in=mation ) a national security or public safety purpose1 bas$ on cyb]security notifications receiv$ by ! ,ag5cy ?r\gh ! ,cyb] ,intrusion ,report+ ,capabilities1 & consi/5t ) ! proc$ures develop$ "u p>agraph 7#a74 7b7 ,analytic production 7#a7 ,9 g5]al ,n less frequ5tly ?an once e #cj days1 ! ,secret>y1 act+ ?r\gh ! ,director1 ! ,attorney ,g5]al1 & ! ,director ( ,national ,intellig5ce %all produce a jo9t cyb] ?reat intellig5ce report t *>act]izes ! curr5t cyb] ?reat picture fac+ ,f$]al ag5cies & cov]$ entities4 7#b7 ,requirem5ts ,ea* report requir$ to be produc$ "u p>agraph 7#a7-- 7,a7 %all be 9 a =m :i* may be made publicly available2 7,b7 may include a classifi$ annex1 z necess>y2 & 7,c7 %all1 to ! maximum ext5t practical1 anonymize attribution in=mation f cyb]security notifications receiv$ ?r\gh ! ,cyb] ,intrusion ,report+ ,capabilities4 7#c7 ,au?ority to declassify ,! ,director ( ,national ,intellig5ce may declassify any analytic products1 or portions !re(1 produc$ "u ?is section if su* declassification is requir$ to mitigate cyb] ?reats fac+ ! ,unit$ ,/ates4 4 7b7 ,table ( cont5ts ,! table ( cont5ts 9 section #a7;b7 ( ! ,homel& ,security ,act ( #bjjb 7,public ,law #ajg-bif2 #aaf ,/at4 #bace7 is am5d$ by add+ at ! end ! foll[+3 ,subtitle ,c--,cyb]security ,intrusion ,report+ ,capabilities ,sec4 #bbca4 ,def9itions4 ,sec4 #bbcb4 ,e/abli%m5t ( cyb]security intrusion report+ capabilities4 ,sec4 #bbcc4 ,requir$ notifications4 ,sec4 #bbcd4 ,pres]vation ( in=mation4 ,sec4 #bbce4 ,analysis ( cyb]security notifications4 4 7c7 ,te*nical & con=m+ am5dm5ts ,section #bbjb7;c7 ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #feb7;c77 is am5d$-- 7#a7 by r$esignat+ ! second & ?ird p>agraphs 7#ab7 z p>agraphs 7#ad7 & 7#ae71 respectively2 & 7#b7 by ins]t+ be=e p>agraph 7#ad71 z s r$esignat$1 ! foll[+3 7#ac7 c>ry out ! responsibilities describ$ 9 subtitle ,c relat+ to ! cyb]security intrusion report+ capabilities2 4