§3556 — Title 44 Public Printing and Documents | U.S. Code

Summary

The Secretary must run a central federal center for information security incidents. The center must give fast technical help to agency IT operators on finding and handling incidents, collect and study incident data, warn operators about current and possible threats and weaknesses, share intelligence and other cyber information to help agencies with risk assessments under section 3554(b), and work with NIST, agencies that run national security systems (including the NSA), and other offices as the President directs. Agencies that run national security systems must share incident, threat, and vulnerability information with the center as allowed by rules for those systems and by the President.

Title 44, §3556

Public Printing and Documents — Source: USLM XML via OLRC

(a)The Secretary shall ensure the operation of a central Federal information security incident center to—

(1)provide timely technical assistance to operators of agency information systems regarding security incidents, including guidance on detecting and handling information security incidents;

(2)compile and analyze information about incidents that threaten information security;

(3)inform operators of agency information systems about current and potential information security threats, and vulnerabilities;

(4)provide, as appropriate, intelligence and other information about cyber threats, vulnerabilities, and incidents to agencies to assist in risk assessments conducted under section 3554(b); and

(5)consult with the National Institute of Standards and Technology, agencies or offices operating or exercising control of national security systems (including the National Security Agency), and such other agencies or offices in accordance with law and as directed by the President regarding information security incidents and related matters.

(b)Each agency operating or exercising control of a national security system shall share information about information security incidents, threats, and vulnerabilities with the Federal information security incident center to the extent consistent with standards and guidelines for national security systems, issued in accordance with law and as directed by the President.

Editorial Notes

Prior Provisions

Provisions similar to this section were contained in section 3546 of this title prior to repeal by Pub. L. 113–283.

§3556 Federal information security incident center

Summary

Title 44, §3556

Notes & Related Subsidiaries

Editorial Notes

Prior Provisions

Citations & Metadata