§665d — Title 6 Domestic Security | U.S. Code

Summary

Sector Risk Management Agencies must give special, sector-specific help to the companies and organizations that run the critical infrastructure they are assigned. They must support programs and activities for that sector. They must follow laws, presidential direction, federal rules, and guidance from the Secretary of Homeland Security. They must work with the Director and other parts of the federal government. They must coordinate with the Department of Homeland Security, other federal agencies, and with state, local, Tribal, and territorial governments and regulators. Using their expertise and legal authorities, they must help owners find and reduce risks and recommend security steps. They must find, assess, and set priorities for physical and cyber risks and help with national risk studies. They serve as the day-to-day federal contact and chair the federal coordinating council for their sector and join cross-sector groups. They must help share threat and intelligence information with the Department, other agencies, and sector partners, including identifying intelligence needs and giving ongoing or real-time awareness, and provide annual sector-specific reports. They must support incident response and recovery, help with national cyber responses when asked, and take part in emergency planning, exercises, and simulations.

Title 6, §665d

Domestic Security — Source: USLM XML via OLRC

(a)Consistent with applicable law, Presidential directives, Federal regulations, and strategic guidance from the Secretary, each Sector Risk Management Agency, in coordination with the Director, shall—

(1)provide specialized sector-specific expertise to critical infrastructure owners and operators within its designated critical infrastructure sector or subsector of such sector; and

(2)support programs and associated activities of such sector or subsector of such sector.

(b)In carrying out this section, Sector Risk Management Agencies shall—

(1)coordinate with the Department and, as appropriate, other relevant Federal departments and agencies;

(2)collaborate with critical infrastructure owners and operators within the designated critical infrastructure sector or subsector of such sector; and

(3)coordinate with independent regulatory agencies, and State, local, Tribal, and territorial entities, as appropriate.

(c)Consistent with applicable law, Presidential directives, Federal regulations, and strategic guidance from the Secretary, each Sector Risk Management Agency shall utilize its specialized expertise regarding its designated critical infrastructure sector or subsector of such sector and authorities under applicable law to—

(1)support sector risk management, in coordination with the Director, including—

(A)establishing and carrying out programs to assist critical infrastructure owners and operators within the designated sector or subsector of such sector in identifying, understanding, and mitigating threats, vulnerabilities, and risks to their systems or assets, or within a region, sector, or subsector of such sector; and

(B)recommending security measures to mitigate the consequences of destruction, compromise, and disruption of systems and assets;

(2)assess sector risk, in coordination with the Director, including—

(A)identifying, assessing, and prioritizing risks within the designated sector or subsector of such sector, considering physical security and cybersecurity threats, vulnerabilities, and consequences; and

(B)supporting national risk assessment efforts led by the Department;

(3)sector coordination, including—

(A)serving as a day-to-day Federal interface for the prioritization and coordination of sector-specific activities and responsibilities under this title;

(B)serving as the Federal Government coordinating council chair for the designated sector or subsector of such sector; and

(C)participating in cross-sector coordinating councils, as appropriate;

(4)facilitating, in coordination with the Director, the sharing with the Department and other appropriate Federal department of information regarding physical security and cybersecurity threats within the designated sector or subsector of such sector, including—

(A)facilitating, in coordination with the Director, access to, and exchange of, information and intelligence necessary to strengthen the security of critical infrastructure, including through Information Sharing and Analysis Organizations and the national cybersecurity and communications integration center established pursuant to section 659 of this title;

(B)facilitating the identification of intelligence needs and priorities of critical infrastructure owners and operators in the designated sector or subsector of such sector, in coordination with the Director of National Intelligence and the heads of other Federal departments and agencies, as appropriate;

(C)providing the Director, and facilitating awareness within the designated sector or subsector of such sector, of ongoing, and where possible, real-time awareness of identified threats, vulnerabilities, mitigations, and other actions related to the security of such sector or subsector of such sector; and

(D)supporting the reporting requirements of the Department under applicable law by providing, on an annual basis, sector-specific critical infrastructure information;

(5)supporting incident management, including—

(A)supporting, in coordination with the Director, incident management and restoration efforts during or following a security incident; and

(B)supporting the Director, upon request, in national cybersecurity asset response activities for critical infrastructure; and

(6)contributing to emergency preparedness efforts, including—

(A)coordinating with critical infrastructure owners and operators within the designated sector or subsector of such sector and the Director in the development of planning documents for coordinated action in the event of a natural disaster, act of terrorism, or other man-made disaster or emergency;

(B)participating in and, in coordination with the Director, conducting or facilitating, exercises and simulations of potential natural disasters, acts of terrorism, or other man-made disasters or emergencies within the designated sector or subsector of such sector; and

(C)supporting the Department and other Federal departments or agencies in developing planning documents or conducting exercises or simulations when relevant to the designated sector or subsector or such sector.

Notes & Related Subsidiaries

Editorial Notes

Prior Provisions

A prior section 2218 of Pub. L. 107–296 was renumbered section 2220A and is classified to section 665g of this title.

Amendments

2022—Subsec. (c)(4)(A). Pub. L. 117–263 substituted “Information Sharing and Analysis Organizations” for “information sharing and analysis organizations”. 2021—Pub. L. 117–81 reenacted section catchline.

§665d Sector Risk Management Agencies