§1522 — Title 6 Domestic Security | U.S. Code

Summary

Requires the Secretary to add advanced network security tools across the Department to better see network activity and to find and stop intrusions and strange activity, using commercial and free or open source tools when helpful. The Director must make a plan and the Secretary must carry it out so each agency uses these tools. The Director and Secretary must also review and update government-wide policies, prioritize these monitoring tools, and brief the proper congressional committees. The Secretary, with the Director, must update the security metrics in section 3554 of title 44 to track detection and response times. The Director, with the Secretary, must make more agency cybersecurity metrics public on federal performance websites, including for department parts, small agencies, and micro-agencies when practical. These rules do not apply to the Department of Defense, a national security system, or an element of the intelligence community.

Title 6, §1522

Domestic Security — Source: USLM XML via OLRC

(a)(1)The Secretary shall include, in the efforts of the Department to continuously diagnose and mitigate cybersecurity risks, advanced network security tools to improve visibility of network activity, including through the use of commercial and free or open source tools, and to detect and mitigate intrusions and anomalous activity.

(2)The Director shall develop and the Secretary shall implement a plan to ensure that each agency utilizes advanced network security tools, including those described in paragraph (1), to detect and mitigate intrusions and anomalous activity.

(b)The Director and the Secretary, in consultation with appropriate agencies, shall—

(1)review and update Government-wide policies and programs to ensure appropriate prioritization and use of network security monitoring tools within agency networks; and

(2)brief appropriate congressional committees on such prioritization and use.

(c)The Secretary, in collaboration with the Director, shall review and update the metrics used to measure security under section 3554 of title 44 to include measures of intrusion and incident detection and response times.

(d)The Director, in consultation with the Secretary, shall increase transparency to the public on agency cybersecurity posture, including by increasing the number of metrics available on Federal Government performance websites and, to the greatest extent practicable, displaying metrics for department components, small agencies, and micro-agencies.

(e)

(f)The requirements under this section shall not apply to the Department of Defense, a national security system, or an element of the intelligence community.

Editorial Notes

Codification Section is comprised of section 224 of title II of div. N of Pub. L. 114–113. Subsec. (e) of section 224 of title II of div. N of Pub. L. 114–113 amended section 3553 of Title 44, Public Printing and Documents.

§1522 Advanced internal defenses

Summary

Title 6, §1522

Notes & Related Subsidiaries

Editorial Notes

Citations & Metadata