§3552 — Title 44 Public Printing and Documents | U.S. Code

Summary

Adopts the meanings from section 3502 unless a different definition is given here. Binding operational directive — a required order to an agency to protect federal information or systems from a known or suspected threat; it must follow the Director’s policies and can be changed or removed by the Director if it does not follow those policies. Incident — an event that actually or nearly harms, without permission, the accuracy, secrecy, or access to information or systems, or that breaks or threatens to break laws or security rules. Information security — protecting information and systems from unauthorized access, use, disclosure, disruption, change, or destruction so they remain accurate (integrity), private (confidentiality), and accessible when needed (availability). Information technology — has the meaning in 40 U.S.C. 11101. Intelligence community — has the meaning in 50 U.S.C. 3003(4). National security system — an information or telecom system used by an agency, its contractor, or another organization for the agency that supports intelligence, national-security cryptology, military command and control, weapon systems equipment, or is critical to military or intelligence missions, or is always protected as classified under an Executive order or law; it does not include routine administrative or business systems (including payroll, finance, logistics, and personnel management). Secretary — means the Secretary of Homeland Security.

Title 44, §3552

Public Printing and Documents — Source: USLM XML via OLRC

(a)Except as provided under subsection (b), the definitions under section 3502 shall apply to this subchapter.

(b)As used in this subchapter:

(1)The term “binding operational directive” means a compulsory direction to an agency that—

(A)is for purposes of safeguarding Federal information and information systems from a known or reasonably suspected information security threat, vulnerability, or risk;

(B)shall be in accordance with policies, principles, standards, and guidelines issued by the Director; and

(C)may be revised or repealed by the Director if the direction issued on behalf of the Director is not in accordance with policies and principles developed by the Director.

(2)The term “incident” means an occurrence that—

(A)actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or

(B)constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.

(3)The term “information security” means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide—

(A)integrity, which means guarding against improper information modification or destruction, and includes ensuring information nonrepudiation and authenticity;

(B)confidentiality, which means preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information; and

(C)availability, which means ensuring timely and reliable access to and use of information.

(4)The term “information technology” has the meaning given that term in section 11101 of title 40.

(5)The term “intelligence community” has the meaning given that term in section 3(4) of the National Security Act of 1947 (50 U.S.C. 3003(4)).

(6)(A)The term “national security system” means any information system (including any telecommunications system) used or operated by an agency or by a contractor of an agency, or other organization on behalf of an agency—

(i)the function, operation, or use of which—

(I)involves intelligence activities;

(II)involves cryptologic activities related to national security;

(III)involves command and control of military forces;

(IV)involves equipment that is an integral part of a weapon or weapons system; or

(V)subject to subparagraph (B), is critical to the direct fulfillment of military or intelligence missions; or

(ii)is protected at all times by procedures established for information that have been specifically authorized under criteria established by an Executive order or an Act of Congress to be kept classified in the interest of national defense or foreign policy.

(B)Subparagraph (A)(i)(V) does not include a system that is to be used for routine administrative and business applications (including payroll, finance, logistics, and personnel management applications).

(7)The term “Secretary” means the Secretary of Homeland Security.

Editorial Notes

Prior Provisions

Provisions similar to this section were contained in section 3532 and 3542 of this title prior to repeal by Pub. L. 113–283.

§3552 Definitions

Summary

Title 44, §3552

Notes & Related Subsidiaries

Editorial Notes

Prior Provisions

Citations & Metadata