,,ii  #aag? ,,congress  #a/ ,session    
,s4 #bedj  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,july #bi1 #bjba,mr4   
,portman 7= himself & ,mr4 ,pet]s7      
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,homel& ,security & ,gov]nm5tal ,affairs
  ,a ,,bill  ,to make te*nical          
corrections to title ,,xxii ( ! ,homel& 
,security ,act ( #bjjb1 & = o!r         
purposes4  #a4 ,%ort title ,?is ,act may
 be cit$ z ! ,,cisa ,te*nical           
,corrections & ,improvem5ts ,act (      
#bjba4  #b4 ,r$esignations  7a7 ,9 g5]al
 ,subtitle ,a ( title ,,xxii ( ! ,homel&
 ,security ,act ( #bjjb 7#f ,u4,s4,c4   
#fea et seq47 is am5d$-- 7#a7 by /rik+  
section #bbja 7#f ,u4,s4,c4 #fea72  7#b7
 by r$esignat+ sections #bbjb ?r\gh     
#bbad z sections #bbja ?r\gh #bbac1     
respectively2  7#c7 by r$esignat+       
section #bbag 7#f ,u4,s4,c4 #ffe;f7 z   
section #bbai2  7#d7 by r$esignat+      
section #bbaf 7#f ,u4,s4,c4 #ffe;e7 z   
section #bbah2  7#e7 by r$esignat+ !    

f\r? section #bbae 7relat+ to ,sector   
,risk ,managem5t ,ag5cies7 7#f ,u4,s4,c4
 #ffe;d7 z section #bbag2  7#f7 by      
r$esignat+ ! ?ird section #bbae 7relat+ 
to ! ,cyb]security ,/ate ,coord9ator7   
7#f ,u4,s4,c4 #ffe;c7 z section #bbaf2 &
  7#g7 by r$esignat+ ! fir/ section     
#bbae 7relat+ to ,duties & ,au?orities  
,relat+ to 4,,gov ,int]net ,doma97 7#f  
,u4,s4,c4 #ffe7 z section #bbad4  7b7   
,te*nical & con=m+ am5dm5ts ,! ,homel&  
,security ,act ( #bjjb 7#f ,u4,s4,c4    
#aja et seq47 is am5d$-- 7#a7 9 section 
#cbj7;d77#c77;,c7 7#f ,u4,s4,c4         
#aie;f7d77#c77;,c77 by /rik+ section    
#bbja & ins]t+ section #bbjj2  7#b7 9   
section #hdf7a7 7#f ,u4,s4,c4 #dag7a771 
by /rik+ section #bbji & ins]t+ section 
#bbjh2  7#c7 9 section #ahja7;c77#af7   
7#f ,u4,s4,c4 #ega7;c77#af77 by /rik+   
section #bbjb7;c77#g7 & ins]t+ section  
#bbja7;c77#g72  7#d7 9 section          
#bjja7d77;,a77iii77,,ii7 7#f ,u4,s4,c4  
#fja7d77;,a77iii77,,ii771 by /rik+      
section #bbad7;a77#b7 & ins]t+ section  

#bbac7;a77#b72  7#e7 9 section          
#bjjh7;a77#c7 7#f ,u4,s4,c4             
#fji7;a77#c771 by /rik+ section         
#bbad7;a77#b7 & ins]t+ section          
#bbac7;a77#b72  7#f7 9 section #bbja1 z 
s r$esignat$-- 7,a7 9 subsection 7c7--  
7i7 9 ! fir/ p>agraph 7#ab71 by /rik+   
section #bbae & ins]t+ section #bbaf2   
7ii7 by r$esignat+ ! second & ?ird      
p>agraphs 7#ab7 z p>agraphs 7#ac7 &     
7#ad71 respectively2 &  7iii7 9 p>agraph
 7#ac71 z s r$esignat$1 by /rik+ section
 #bbae & ins]t+ section #bbad2 &  7,b7 9
 subsection 7e77#b71 by /rik+ sections  
#bbjc7;b7 & #bbjd7;b7 & ins]t+ sections 
#bbjb7;b7 & #bbjc7;b72  7#g7 9 section  
#bbjb7;b77#c71 z s r$esignat$1 by /rik+ 
section #bbjb7;c77#g7 & ins]t+ section  
#bbja7;c77#g72  7#h7 9 section          
#bbjc7;b77#c71 z s r$esignat$1 by /rik+ 
section #bbjb7;c77#g7 & ins]t+ section  
#bbja7;c77#g72  7#i7 9 section #bbjd1 z 
s r$esignat$1 9 ! matt] prec$+ p>agraph 
7#a71 by /rik+ section #bbjb & ins]t+   
section #bbja2  7#aj7 9 section         

#bbaj7;b77#b77;,a71 z s r$esignat$1 by  
/rik+ section #bbji & ins]t+ section    
#bbjh2 &  7#aa7 9 section               
#bbag7;c77#d77;,a71 by /rik+ section    
#bbji & ins]t+ section #bbjh4  7c7      
,table ( cont5ts ,! table ( cont5ts 9   
section #a7;b7 ( ! ,homel& ,security    
,act ( #bjjb 7,public ,law #ajg-bif2    
#aaf ,/at4 #bace7 is am5d$-- 7#a7 by    
/rik+ ins]t+ be=e ! item relat+ to      
subtitle ,a ( title ,,xxii ! foll[+3    
,sec4 #bbjj4 ,def9itions4  2  &  7#b7 by
 /rik+ ! items relat+ to sections #bbja 
?r\gh #bbag & ins]t+ ! foll[+3  ,sec4   
#bbja4 ,cyb]security & ,infra/ructure   
,security ,ag5cy4,sec4 #bbjb4           
,cyb]security ,division4,sec4 #bbjc4    
,infra/ructure ,security ,division4,sec4
 #bbjd4 ,enhancem5t ( ,f$]al &          
non-,f$]al cyb]security4 ,sec4 #bbje4   
,net gu>d4,sec4 #bbjf4 ,cyb] ,security  
,enhancem5t ,act ( #bjjb4,sec4 #bbjg4   
,cyb]security recruitm5t &              
ret5tion4,sec4 #bbjh4 ,national         
cyb]security & communications           

integration c5t]4,sec4 #bbji4           
,cyb]security plans4,sec4 #bbaj4        
,cyb]security /rategy4,sec4 #bbaa4      
,cle>ances4,sec4 #bbab4 ,f$]al intrusion
 detection & prev5tion sy/em4,sec4      
#bbac4 ,national ,asset ,database4,sec4 
#bbad4 ,duties & au?orities relat+ to   
4gov int]net doma94,sec4 #bbae4 ,jo9t   
,cyb] ,plann+ ,(fice4 ,sec4 #bbaf4      
,cyb]security ,/ate ,coord9ator4,sec4   
#bbag4 ,sector ,risk ,managem5t         
,ag5cies4 ,sec4 #bbah4 ,cyb]security    
,advisory ,committee4,sec4 #bbai4       
,cyb]security education & tra9+         
programs4  4  7d7 ,additional te*nical  
am5dm5t  7#a7 ,am5dm5t ,section         
#ijd7;b77#a7 ( ! ,,dotgov ,act ( #bjbj  
7title ,,ix ( division ,u ( ,public ,law
 #aaf-bfj7 is am5d$1 9 ! matt] prec$+   
subp>agraph 7,a71 by /rik+ ,homel&      
,security ,act & ins]t+ ,homel&         
,security ,act ( #bjjb4  7#b7 ,effective
 date ,! am5dm5t made by p>agraph 7#a7  
%all take effect z if enact$ z "p ( !   
,,dotgov ,act ( #bjbj 7title ,,ix (     

division ,u ( ,public ,law #aaf-bfj74   
#c4 ,consolidation ( def9itions  7a7 ,9 
g5]al ,title ,,xxii ( ! ,homel&         
,security ,act ( #bjjb 7#f ,u4,s4,c4    
#fea7 is am5d$-- 7#a7 by /rik+ section  
#bbja2 &  7#b7 by ins]t+ be=e ! subtitle
 ,a head+ ! foll[+3  #bbjj4 ,def9itions 
,except z o!rwise specifically provid$1 
9 ?is title3 7#a7 ,ag5cy ,! t]m ,ag5cy  
means ! ,cyb]security & ,infra/ructure  
,security ,ag5cy4  7#b7 ,ag5cy in=mation
 ,! t]m ag5cy in=mation means in=mation 
collect$ or ma9ta9$ by or on behalf ( an
 ag5cy4  7#c7 ,ag5cy in=mation sy/em ,! 
t]m ag5cy in=mation sy/em means an      
in=mation sy/em us$ or op]at$ by an     
ag5cy or by ano!r entity on behalf ( an 
ag5cy4  7#d7 ,appropriate congressional 
committees ,! t]m appropriate           
congressional committees means-- 7,a7 ! 
,committee on ,homel& ,security &       
,gov]nm5tal ,affairs ( ! ,s5ate2 &  7,b7
 ! ,committee on ,homel& ,security ( !  
,h\se ( ,repres5tatives4  7#e7 ,critical
 infra/ructure in=mation ,! t]m critical

 infra/ructure in=mation means in=mation
 n cu/om>ily 9 ! public doma9 & relat$  
to ! security ( critical infra/ructure  
or protect$ sy/ems-- 7,a7 actual1       
pot5tial1 or ?reat5$ int]f]5ce )1 attack
 on1 compromise (1 or incapacitation (  
critical infra/ructure or protect$      
sy/ems by ei!r physical or comput]-bas$ 
attack or o!r simil> conduct 7includ+ ! 
misuse ( or unau?oriz$ access to all    
types ( communications & data           
transmission sy/ems7 t violates ,f$]al1 
,/ate1 or local law1 h>ms int]/ate      
comm]ce ( ! ,unit$ ,/ates1 or ?reat5s   
public heal? or safety2  7,b7 ! ability 
( any critical infra/ructure or protect$
 sy/em to resi/ su* int]f]5ce1          
compromise1 or incapacitation1 includ+  
any plann$ or pa/ assessm5t1 projection1
 or e/imate ( ! vuln]ability ( critical 
infra/ructure or a protect$ sy/em1      
includ+ security te/+1 risk evaluation  
!reto1 risk managem5t plann+1 or risk   
audit2 or  7,c7 any plann$ or pa/       
op]ational problem or solution reg>d+   

critical infra/ructure or protect$      
sy/ems1 includ+ repair1 recov]y1        
recon/ruction1 insurance1 or cont9uity1 
to ! ext5t x is relat$ to su* int]f]5ce1
 compromise1 or incapacitation4  7#f7   
,cyb] ?reat indicator ,! t]m cyb] ?reat 
indicator means in=mation t is necess>y 
to describe or id5tify-- 7,a7 malici\s  
reconnaissance1 includ+ anomal\s patt]ns
 ( communications t appe> to be         
transmitt$ = ! purpose ( ga!r+ te*nical 
in=mation relat$ to a cyb]security ?reat
 or security vuln]ability2  7,b7 a me?od
 ( defeat+ a security control or        
exploitation ( a security vuln]ability2 
7,c7 a security vuln]ability1 includ+   
anomal\s activity t appe>s to indicate !
 exi/5ce ( a security vuln]ability2     
7,d7 a me?od ( caus+ a us] ) legitimate 
access to an in=mation sy/em or         
in=mation t is /or$ on1 process$ by1 or 
transit+ an in=mation sy/em to unwitt+ly
 enable ! defeat ( a security control or
 exploitation ( a security vuln]ability2
  7,e7 malici\s cyb] comm& & control2   

7,f7 ! actual or pot5tial h>m caus$ by  
an incid5t1 includ+ a description ( !   
in=mation exfiltrat$ z a result ( a     
p>ticul> cyb]security ?reat2  7,g7 any  
o!r attribute ( a cyb]security ?reat1 if
 disclosure ( su* attribute is n o!rwise
 prohibit$ by law2 or  7,h7 any         
comb9ation !re(4  7#g7 ,cyb]security    
purpose ,! t]m cyb]security purpose     
means ! purpose ( protect+ an in=mation 
sy/em or in=mation t is /or$ on1        
process$ by1 or transit+ an in=mation   
sy/em f a cyb]security ?reat or security
 vuln]ability4  7#h7 ,cyb]security risk 
,! t]m cyb]security risk-- 7,a7 means   
?reats to & vuln]abilities ( in=mation  
or in=mation sy/ems & any relat$        
consequ5ces caus$ by or result+ f       
unau?oriz$ access1 use1 disclosure1     
degradation1 disruption1 modification1  
or de/ruction ( su* in=mation or        
in=mation sy/ems1 includ+ su* relat$    
consequ5ces caus$ by an act ( t]rorism2 
&  7,b7 does n include any action t     
solely involves a violation ( a consum] 

t]m ( s]vice or a consum] lic5s+        
agreem5t4  7#i7 ,cyb]security ?reat     
7,a7 ,9 g5]al ,except z provid$ 9       
subp>agraph 7,b71 ! t]m cyb]security    
?reat means an action1 n protect$ by !  
,fir/ ,am5dm5t to ! ,con/itution ( !    
,unit$ ,/ates1 on or ?r\gh an in=mation 
sy/em t may result 9 an unau?oriz$ ef=t 
to adv]sely impact ! security1          
availability1 confid5tiality1 or        
integrity ( an in=mation sy/em or       
in=mation t is /or$ on1 process$ by1 or 
transit+ an in=mation sy/em4  7,b7      
,exclusion ,! t]m cyb]security ?reat    
does n include any action t solely      
involves a violation ( a consum] t]m (  
s]vice or a consum] lic5s+ agreem5t4    
7#aj7 ,def5sive measure  7,a7 ,9 g5]al  
,except z provid$ 9 subp>agraph 7,b71 ! 
t]m def5sive measure means an action1   
device1 proc$ure1 signature1 te*nique1  
or o!r measure appli$ to an in=mation   
sy/em or in=mation t is /or$ on1        
process$ by1 or transit+ an in=mation   
sy/em t detects1 prev5ts1 or mitigates a

 kn[n or suspect$ cyb]security ?reat or 
security vuln]ability4  7,b7 ,exclusion 
,! t]m def5sive measure does n include a
 measure t de/roys1 r5d]s unusable1     
provides unau?oriz$ access to1 or       
sub/antially h>ms an in=mation sy/em or 
in=mation /or$ on1 process$ by1 or      
transit+ su* in=mation sy/em n own$ by--
 7i7 ! entity op]at+ ! measure2 or  7ii7
 ano!r entity or ,f$]al entity t is     
au?oriz$ to provide cons5t & has provid$
 cons5t to t private entity = op]ation (
 su* measure4  7#aa7 ,homel& ,security  
,ent]prise ,! t]m ,homel& ,security     
,ent]prise means relevant gov]nm5tal &  
nongov]nm5tal entities involv$ 9 homel& 
security1 includ+ ,f$]al1 ,/ate1 local1 
& tribal gov]nm5t (ficials1 private     
sector repres5tatives1 academics1 & o!r 
policy exp]ts4  7#ab7 ,incid5t ,! t]m   
incid5t means an occurr5ce t actually or
 imm95tly jeop>dizes1 )\t lawful        
au?ority1 ! integrity1 confid5tiality1  
or availability ( in=mation on an       
in=mation sy/em1 or actually or imm95tly

 jeop>dizes1 )\t lawful au?ority1 an    
in=mation sy/em4  7#ac7 ,in=mation %>+ &
 analysis organization ,! t]m ,in=mation
 ,%>+ & ,analysis ,organization means   
any =mal or in=mal entity or            
collaboration creat$ or employ$ by      
public or private sector organizations1 
= purposes (-- 7,a7 ga!r+ & analyz+     
critical infra/ructure in=mation1       
includ+ in=mation relat$ to cyb]security
 risks & incid5ts1 9 ord] to bett]      
und]/& security problems &              
int]dep5d5cies relat$ to critical       
infra/ructure1 includ+ cyb]security     
risks & incid5ts1 & protect$ sy/ems1 s z
 to ensure ! availability1 integrity1 & 
reliability !re(2  7,b7 communicat+ or  
disclos+ critical infra/ructure         
in=mation1 includ+ cyb]security risks & 
incid5ts1 to help prev5t1 detect1       
mitigate1 or recov] f ! effects ( a     
int]f]5ce1 compromise1 or a             
incapacitation problem relat$ to        
critical infra/ructure1 includ+         
cyb]security risks & incid5ts1 or       

protect$ sy/ems2 &  7,c7 volunt>ily     
dissem9at+ critical infra/ructure       
in=mation1 includ+ cyb]security risks & 
incid5ts1 to its memb]s1 ,/ate1 local1 &
 ,f$]al ,gov]nm5ts1 or any o!r entities 
t may be ( assi/ance 9 c>ry+ out !      
purposes specifi$ 9 subp>agraphs 7,a7 & 
7,b74  7#ad7 ,in=mation sy/em ,! t]m    
in=mation sy/em has ! mean+ giv5 ! t]m 9
 section #cejb ( title #dd1 ,unit$      
,/ates ,code4  7#ae7 ,intellig5ce       
community ,! t]m intellig5ce community  
has ! mean+ giv5 ! t]m 9 section #c7d7 (
 ! ,national ,security ,act ( #aidg 7#ej
 ,u4,s4,c4 #cjjc7d774  7#af7 ,monitor ,!
 t]m monitor means to acquire1 id5tify1 
or scan1 or to possess1 in=mation t is  
/or$ on1 process$ by1 or transit+ an    
in=mation sy/em4  7#ag7 ,national       
cyb]security asset response activities  
,! t]m national cyb]security asset      
response activities means-- 7,a7 furni%+
 cyb]security te*nical assi/ance to     
entities affect$ by cyb]security risks  
to protect assets1 mitigate             

vuln]abilities1 & r$uce impacts ( cyb]  
incid5ts2  7,b7 id5tify+ o!r entities t 
may be at risk ( an incid5t & assess+   
risk to ! same or simil> vuln]abilities2
  7,c7 assess+ pot5tial cyb]security    
risks to a sector or region1 includ+    
pot5tial cascad+ effects1 & develop+    
c\rses ( action to mitigate su* risks2  
7,d7 facilitat+ in=mation %>+ &         
op]ational coord9ation ) ?reat response2
 &  7,e7 provid+ guidance on h[ be/ to  
utilize ,f$]al res\rces & capabilities 9
 a timely1 effective mann] to spe$      
recov]y f cyb]security risks4  7#ah7    
,national security sy/em ,! t]m national
 security sy/em has ! mean+ giv5 ! t]m 9
 section #aaajc ( title #dj1 ,unit$     
,/ates ,code4  7#ai7 ,sector risk       
managem5t ag5cy ,! t]m ,sector ,risk    
,managem5t ,ag5cy means a ,f$]al        
dep>tm5t or ag5cy1 designat$ by law or  
,presid5tial directive1 ) responsibility
 = provid+ in/itutional k & specializ$  
exp]tise ( a sector1 z well z lead+1    
facilitat+1 or support+ programs &      

associat$ activities ( its designat$    
critical infra/ructure sector 9 ! all   
haz>ds environm5t 9 coord9ation ) !     
,dep>tm5t4  7#bj7 ,security vuln]ability
 ,! t]m security vuln]ability means any 
attribute ( h>dw>e1 s(tw>e1 process1 or 
proc$ure t c\ld enable or facilitate !  
defeat ( a security control4  7#ba7 ,%>+
 ,! t]m %>+ 7includ+ all conjugations   
!re(7 means provid+1 reciev+1 &         
dissem9at+ 7includ+ all conjugations (  
ea* su* t]ms74  4  7b7 ,te*nical &      
con=m+ am5dm5ts ,! ,homel& ,security    
,act ( #bjjb 7#f ,u4,s4,c4 #aja et seq47
 is am5d$-- 7#a7 9 section #bbja1 z s   
r$esignat$-- 7,a7 9 subsection 7a77#a71 
by /rik+ 79 ?is subtitle ref]r$ to z !  
,ag5cy72  7,b7 9 subsection 7f7-- 7i7 9 
p>agraph 7#a71 by ins]t+ ,executive be=e
 ,assi/ant ,director2 &  7ii7 9 p>agraph
 7#b71 by ins]t+ ,executive be=e        
,assi/ant ,director2  7#b7 9 section    
#bbjb7;a77#b71 z s r$esignat$1 by /rik+ 
z ! ,assi/ant ,director & ins]t+ z !    
,executive ,assi/ant ,director2  7#c7 9 

section #bbjc7;a77#b71 z s r$esignat$1  
by /rik+ z ! ,assi/ant ,director &      
ins]t+ z ! ,executive ,assi/ant         
,director2  7#d7 9 section #bbjh1 z s   
r$esignat$-- 7,a7 by /rik+ subsection   
7a72  7,b7 by r$esignat+ subsections 7b7
 ?r\gh subsection 7o7 z subsections 7a7 
?r\gh 7n71 respectively2  7,c7 9        
subsection 7c77#a77;,a77iii71 z s       
r$esignat$1 by /rik+ 1 z t t]m is def9$ 
"u section #c7d7 ( ! ,national ,security
 ,act ( #aidg 7#ej ,u4,s4,c4 #cjjc7d772 
7,d7 9 subsection 7d71 z s r$esignat$1 9
 ! matt] prec$+ p>agraph 7#a71 by /rik+ 
subsection 7c7 & ins]t+ subsection 7b72 
7,e7 9 subsection 7j71 z s r$esignat$1  
by /rik+ subsection 7c77#h7 & ins]t+    
subsection 7b77#h72 &  7,f7 9 subsection
 7n71 z s r$esignat$-- 7i7 9 p>agraph   
7#b77;,a71 by /rik+ subsection 7c77#ab7 
& ins]t+ subsection 7b77#ab72 &  7ii7 9 
p>agraph 7#c77;,b77i71 by /rik+         
subsection 7c77#ab7 & ins]t+ subsection 
7b77#ab72  7#e7 9 section #bbji1 z s    
r$esignat$-- 7,a7 by /rik+ subsection   

7a72  7,b7 by r$esignat+ subsections 7b7
 ?r\gh 7d7 z subsections 7a7 ?r\gh 7c71 
respectively2  7,c7 9 subsection 7b71 z 
s r$esignat$-- 7i7 by /rik+ in=mation   
%>+ & analysis organizations 7z def9$ 9 
section #bbbb7e77 & ins]t+ ,in=mation   
,%>+ & ,analysis ,organizations2 &  7ii7
 by /rik+ 7z def9$ 9 section #bbji72 &  
7,d7 9 subsection 7c71 z s r$esignat$1  
by /rik+ subsection 7c7 & ins]t+        
subsection 7b72  7#f7 9 section #bbaj1 z
 s r$esignat$1 by /rik+ subsection 7h72 
7#g7 9 section #bbaa1 z s r$esignat$1 by
 /rik+ in=mation %>+ & analysis         
organizations 7z def9$ 9 section        
#bbbb7e77 & ins]t+ ,in=mation ,%>+ &    
,analysis ,organizations2  7#h7 9       
section #bbab1 z s r$esignat$-- 7,a7 by 
/rik+ subsection 7a72  7,b7 by          
r$esignat+ subsections 7b7 ?r\gh 7f7 z  
subsections 7a7 ?r\gh 7e72 respectively2
  7,c7 9 subsection 7b71 z s r$esignat$1
 by /rik+ subsection 7b7 ea* place x    
appe>s & ins]t+ subsection 7a72  7,d7 9 
subsection 7c71 z s r$esignat$1 9 !     

matt] prec$+ p>agraph 7#a71 by /rik+    
subsection 7b7 & ins]t+ subsection 7a72 
&  7,e7 9 subsection 7d71 z s           
r$esignat$-- 7i7 9 p>agraph 7#a7-- 7,i7 
9 ! matt] prec$+ subp>agraph 7,a71 by   
/rik+ subsection 7c77#b7 & ins]t+       
subsection 7b77#b72  7,,ii7 9           
subp>agraph 7,a71 by /rik+ subsection   
7c77#a7 & ins]t+ subsection 7b77#a72 &  
7,,iii7 9 subp>agraph 7,b71 by /rik+    
subsection 7c77#b7 & ins]t+ subsection  
7b77#b72 &  7ii7 9 p>agraph 7#b71 by    
/rik+ subsection 7c77#b7 & ins]t+       
subsection 7b77#b72  7#i7 9 section     
#bbae 7#f ,u4,s4,c4 #ffe;b7-- 7,a7 by   
/rik+ subsection 7a72  7,b7 by          
r$esignat+ subsections 7b7 ?r\gh 7h7 z  
subsections 7a7 ?r\gh 7g71 respectively2
  7,c7 9 subsection 7a71 z s            
r$esignat$-- 7i7 9 ! matt] prec$+       
p>agraph 7#a71 by /rik+ subsection 7e7 &
 ins]t+ subsection 7d72  7ii7 9 p>agraph
 7#a71 by /rik+ subsection 7c7 & ins]t+ 
subsection 7b72 &  7iii7 9 p>agraph     
7#b71 by /rik+ subsection 7c7 & ins]t+  

subsection 7b72  7,d7 9 subsection      
7b77#d71 z s r$esignat$-- 7i7 by /rik+  
subsection 7e7 & ins]t+ subsection 7d72 
&  7ii7 by /rik+ subsection 7h7 & ins]t+
 subsection 7g72  7,e7 9 subsection 7d71
 z s r$esignat$1 by /rik+ subsection    
7b77#a7 ea* place x appe>s & ins]t+     
subsection 7a77#a72  7,f7 9 subsection  
7e71 z s r$esignat$-- 7i7 by /rik+      
subsection 7b7 & ins]t+ subsection 7a72 
7ii7 by /rik+ subsection 7e7 & ins]t+   
subsection 7d72 &  7iii7 by /rik+       
subsection 7b77#a7 & ins]t+ subsection  
7a77#a72 &  7,g7 9 subsection 7f71 z s  
r$esignat$1 by /rik+ subsection 7c7 &   
ins]t+ subsection 7b72  7#aj7 9 section 
#bbaf1 z s r$esignat$1 by /rik+         
subsection 7f7 & ins]t+ ! foll[+3  7f7  
,cyb] def5se op]ation def9$ ,9 ?is      
section1 ! t]m cyb] def5se op]ation     
means ! use ( a def5sive measure4  2 &  
7#aa7 9 section #bbbb-- 7,a7 by /rik+   
p>agraphs 7#c71 7#e71 & 7#h72  7,b7 by  
r$esignat+ p>agraph 7#d7 z p>agraph     
7#c72 &  7,c7 by r$esignat+ p>agraphs   

7#f7 & 7#g7 z p>agraphs 7#d7 & 7#e71    
respectively4  7c7 ,cyb]security ,act ( 
#bjae def9itions ,section #ajb ( !      
,cyb]security ,act ( #bjae 7#f ,u4,s4,c4
 #aeja7 is am5d$-- 7#a7 by /rik+        
p>agraphs 7#d7 ?r\gh 7#g7 & ins]t+ !    
foll[+3  7#d7 ,cyb]security purpose ,!  
t]m cyb]security purpose has ! mean+    
giv5 ! t]m 9 section #bbjj ( ! ,homel&  
,security ,act ( #bjjb4  7#e7           
,cyb]security ?reat ,! t]m cyb]security 
?reat has ! mean+ giv5 ! t]m 9 section  
#bbjj ( ! ,homel& ,security ,act (      
#bjjb4  7#f7 ,cyb] !at indicator ,! t]m 
cyb] ?reat indicator has ! mean+ giv5 ! 
t]m 9 section #bbjj ( ! ,homel&         
,security ,act ( #bjjb4  7#g7 ,def5sive 
measure ,! t]m def5sive measure has !   
mean+ giv5 ! t]m 9 section #bbjj ( !    
,homel& ,security ,act ( #bjjb4  2  7#b7
 by /rik+ p>agraph 7#ac7 & ins]t+ !     
foll[+3  7#ac7 ,monitor ,! t]m monitor  
has ! mean+ giv5 ! t]m 9 section #bbjj (
 ! ,homel& ,security ,act ( #bjjb4  2 & 
7#c7 by /rik+ p>agraph 7#ag7 & ins]t+ ! 

foll[+3  7#ag7 ,security vuln]ability ,!
 t]m security vuln]ability has ! mean+  
giv5 ! t]m 9 section #bbjj ( ! ,homel&  
,security ,act ( #bjjb4  4  #d4         
,additional te*nical & con=m+ am5dm5ts  
7a7 ,f$]al ,cyb]security ,enhancem5t    
,act ( #bjae ,! ,f$]al ,cyb]security    
,enhancem5t ,act ( #bjae 7#f ,u4,s4,c4  
#aeba et seq47 is am5d$-- 7#a7 9 section
 #bbb 7#f ,u4,s4,c4 #aeba7-- 7,a7 9     
p>agraph 7#b71 by /rik+ section #bbaj & 
ins]t+ section #bbjj2 &  7,b7 9 p>agraph
 7#d71 by /rik+ section #bbji & ins]t+  
section #bbjj2  7#b7 9 section #bbc 7#f 
,u4,s4,c4 #aea note7 is am5d$ by /rik+  
section #bbac7;b77#a7 ea* place x appe>s
 & ins]t+ section #bbab7;a77#a72 &  7#c7
 9 section #bbf-- 7,a7 9 subsection     
7a7-- 7i7 9 p>agraph 7#a71 by /rik+     
section #bbac & ins]t+ section #bbjj2   
7ii7 9 p>agraph 7#d71 by /rik+ section  
#bbaj7;b77#a7 & ins]t+ section          
#bbji7;a77#a72 &  7iii7 9 p>agraph 7#e71
 by /rik+ section #bbac7;b7 & ins]t+    
section #bbab7;a72 &  7,b7 9 subsection 

7c77#a77;,a77vi71 by /rik+ section      
#bbac7;c77#e7 & ins]t+ section          
#bbab7;b77#e72 &  7#d7 9 section #bbg   
7#f ,u4,s4,c4 #aebe7-- 7,a7 9 subsection
 7a71 by /rik+ section #bbac & ins]t+   
section #bbab2 &  7,b7 9 subsection 7b71
 by /rik+ section #bbac7;d77#b7 & ins]t+
 section #bbab7;c77#b74  7b7 ,public    
,heal? ,s]vice ,act ,section            
#bhaa7;b77#d77;,d7 ( ! ,public ,heal?   
,s]vice ,act 7#db ,u4,s4,c4             
#cjj;hh-#aj7;b77#d77;,d77 is am5d$ by   
/rik+ section #bbh7;c7 ( ! ,homel&      
,security ,act ( #bjjb 7#f ,u4,s4,c4    
#adi7;c77 & ins]t+ section #bbji7;c7 ( !
 ,homel& ,security ,act ( #bjjb4  7c7   
,william ,m4 7,mac7 ,?ornb]ry ,national 
,def5se ,au?orization ,act ( ,fiscal    
,ye> #bjba ,section #ijjb ( ! ,william  
,m4 7,mac7 ,?ornb]ry ,national ,def5se  
,au?orization ,act = ,fiscal ,ye> #bjba 
7#f ,u4,s4,c4 #feb;a7 is am5d$-- 7#a7 9 
subsection 7a7-- 7,a7 9 p>agraph 7#e71  
by /rik+ section #bbbb7e7 ( ! ,homel&   
,security ,act ( #bjjb 7#f ,u4,s4,c4    

#fga7e77 & ins]t+ section #bbjj ( !     
,homel& ,security ,act ( #bjjb2 &  7,b7 
9 p>agraph 7#g71 by /rik+ giv5 ! t]m &  
all t foll[s & ins]t+ giv5 ! t]m 9      
section #bbjj ( ! ,homel& ,security ,act
 ( #bjjb2  7#b7 9 subsection            
7b77#a77;,a71 by /rik+ section          
#bbjb7;c77#d7 ( ! ,homel& ,security ,act
 7#f ,u4,s4,c4 #feb7;c77#d77 & ins]t+   
section #bbja7;c77#d72  7#c7 9          
subsection 7c77#c77;,b71 by /rik+       
section #bbja7e7 ( ! ,homel& ,security  
,act ( #bjjb 7#f ,u4,s4,c4 #fea7e77 &   
ins]t+ section #bbjj ( ! ,homel&        
,security ,act ( #bjjb2 &  7#d7 9       
subsection 7d7-- 7,a7 by /rik+ section  
#bbae & ins]t+ #bbag2 &  7,b7 by /rik+ 1
 z add$ by ?is section4  7d7 ,national  
,security ,act ( #aidg ,section #aac;,b 
( ! ,national ,security ,act ( #aidg    
7#ej ,u4,s4,c4 #cjdi;a7b77#d77 is am5d$ 
by /rik+ section #bbf ( ! ,homel&       
,security ,act ( #bjjb 7#f ,u4,s4,c4    
#adg7 & ins]t+ section #bbjg ( ! ,homel&
 ,security ,act ( #bjjb4  7e7           

,cyb]security ,act ( #bjae ,section     
#djd7;a7 ( ! ,cyb]security ,act ( #bjae 
7#f ,u4,s4,c4 #aecb7;a77 is am5d$ by    
/rik+ section #bbji & ins]t+ section    
#bbjh4  7f7 ,io,t ,cyb]security         
,improvem5t ,act ( #bjbj ,section       
#e7;b77#c7 ( ! ,io,t ,cyb]security      
,improvem5t ,act ( #bjbj 7#ae ,u4,s4,c4 
#bgh;g-#c;c7 is am5d$ by /rik+ section  
#bbji7m7 & ins]t+ section #bbjh7l74  7g7
 ,small ,bus9ess ,act ,section          
#ba7;a77#h77;,b7 ( ! ,small ,bus9ess    
,act 7#ae ,u4,s4,c4 #fdh7;a77#h77;,b77  
is am5d$ by /rik+ section #bbji7;a7 &   
ins]t+ section #bbjj4  7h7 ,title #df   
,section #gjaja7b7 ( title #df1 ,unit$  
,/ates ,code1 is am5d$ by /rik+ section 
#bbg ( ! ,homel& ,security ,act ( #bjjb 
7#f ,u4,s4,c4 #adh7 & ins]t+ section    
#bbjj ( ! ,homel& ,security ,act (      
#bjjb4