§4112 Requirement for Information Sharing Agreements

Summary

The President must name two people within 30 days after December 23, 2022: one to be the main contact for tactical and operational cybersecurity matters with Congress, and one to be the main contact for tactical and operational counterintelligence matters. Those two must work with the right executive agencies and officers and, within 90 days after December 23, 2022, make one or more written agreements to share information with four congressional offices: the Senate Sergeant at Arms and Doorkeeper (cybersecurity), the Secretary of the Senate (counterintelligence), the House Chief Administrative Officer (cybersecurity), and the House Sergeant at Arms (counterintelligence). Each agreement needs the approvals and consultations with the named congressional leaders and committee leaders described in the law. The agreements must set up procedures for fast sharing of tactical and operational cyber threat data, security vulnerability information, and planned or ongoing counterintelligence operations or targeted collection efforts with the legislative branch. For three years starting December 23, 2022, the two presidential contacts must meet at least twice a year with the listed congressional officers and certain committee chairs to check that the agreements are being followed. The parties must jointly include key items in the agreements, such as direct and timely sharing of technical indicators and context, sharing of counterintelligence trends, naming the officials who will run day-to-day work, allowing certain congressional cybersecurity staff to sit in executive branch operations centers, and any other agreed elements. Congressional leadership means the Senate Majority and Minority Leaders for Senate matters and the Speaker and House Minority Leader for House matters. The terms “cybersecurity threat” and “security vulnerability” have the meanings given in section 650 of title 6, as added by section 5171 of this division.