§661 Cybersecurity strategy

Summary

The Secretary must create a departmental cybersecurity strategy within 90 days after December 23, 2016. The plan must set strategic and operational goals and describe the programs, policies, and activities needed to meet those goals. It must cover things like the cybersecurity functions in section 659, cybersecurity investigations, research and development, and work with international partners. In making the strategy, the Secretary must consider the November 2011 Homeland Security Enterprise cybersecurity strategy, the Department of Homeland Security Fiscal Years 2014–2018 Strategic Plan, and the most recent Quadrennial Homeland Security Review under section 347, and include the roles of department offices where practical. Within 90 days after the strategy is finished, the Secretary must issue an implementation plan with objectives and tasks, timelines and costs, and performance metrics. The Secretary must give copies of the strategy and the implementation plan to Congress when issued, and include any related legislative or budget proposals with the implementation plan. The strategy must be unclassified but may have a classified annex. The Department may not use this authority to monitor, spy on, steal, or collect people’s personal information to track an individual.