Title 6, Domestic SecurityRelease 119-110

§1508 Report on Cybersecurity Threats

Title 6 › CHAPTER 6 — CYBERSECURITY › SUBCHAPTER I — CYBERSECURITY INFORMATION SHARING › § 1508

Last updated Sep 22, 2026|Official source

Summary

No later than 180 days after December 18, 2015, the Director of National Intelligence must work with other intelligence leaders and give a report to the Senate Select Committee on Intelligence and the House Permanent Select Committee on Intelligence about cybersecurity threats. The report must be available in both classified and unclassified versions. The report must assess U.S. intelligence sharing with other countries about hacking, stolen data, and security breaches, say how useful those partnerships are, which intelligence parts take part, and how to improve them. It must name and evaluate the main country and nonstate threats. It must explain how delays by private companies in reporting incidents hurt the government’s ability to respond. It must list technologies or capabilities that would help prevent or respond to threats, and note private-sector tools or practices that could be quickly used by the intelligence community. “Intelligence community” means the agencies listed in 50 U.S.C. 3003.

Full Legal Text

Title 6, §1508

Domestic Security, Source: USLM XML via OLRC

(a)Report required

Not later than 180 days after December 18, 2015, the Director of National Intelligence, in coordination with the heads of other appropriate elements of the intelligence community, shall submit to the Select Committee on Intelligence of the Senate and the Permanent Select Committee on Intelligence of the House of Representatives a report on cybersecurity threats, including cyber attacks, theft, and data breaches.

(b)Contents

The report required by subsection (a) shall include the following:

(1)An assessment of the current intelligence sharing and cooperation relationships of the United States with other countries regarding cybersecurity threats, including cyber attacks, theft, and data breaches, directed against the United States and which threaten the United States national security interests and economy and intellectual property, specifically identifying the relative utility of such relationships, which elements of the intelligence community participate in such relationships, and whether and how such relationships could be improved.

(2)A list and an assessment of the countries and nonstate actors that are the primary threats of carrying out a cybersecurity threat, including a cyber attack, theft, or data breach, against the United States and which threaten the United States national security, economy, and intellectual property.

(3)A description of the extent to which the capabilities of the United States Government to respond to or prevent cybersecurity threats, including cyber attacks, theft, or data breaches, directed against the United States private sector are degraded by a delay in the prompt notification by private entities of such threats or cyber attacks, theft, and data breaches.

(4)An assessment of additional technologies or capabilities that would enhance the ability of the United States to prevent and to respond to cybersecurity threats, including cyber attacks, theft, and data breaches.

(5)An assessment of any technologies or practices utilized by the private sector that could be rapidly fielded to assist the intelligence community in preventing and responding to cybersecurity threats.

(c)Form of report

The report required by subsection (a) shall be made available in classified and unclassified forms.

(d)Intelligence community defined

In this section, the term “intelligence community” has the meaning given that term in section 3003 of title 50.

Reference

Citations & Metadata

Citation

6 U.S.C. § 1508

Title 6, Domestic Security

Last Updated

Sep 22, 2026

Release point: 119-110