PRIA, Government Policy, Made Personal

Summary

Requires the Secretary of Homeland Security to set up, within 90 days after December 18, 2015, a way for a Statewide Interoperability Coordinator to report any cybersecurity risk or incident that affects information systems or networks used by emergency response providers (as defined in law) in the State. Within 1 year after December 18, 2015, the Secretary, through the National Cybersecurity and Communications Integration Center and working with other federal partners and the Assistant Director for Emergency Communications, must analyze the reported data and, after consulting the Secretary of Commerce through the Director of NIST, develop information and recommendations on security and resilience for those systems. The Director of NIST must use those results to help create methods to lower cybersecurity risks for emergency responders, report those activities and methods to Congress, and post the report on the NIST website. Nothing in this requires a State to report, nor forces a non‑Federal entity to adopt any recommended measures or follow the methods.

Title 6, §1532

Domestic Security, Source: USLM XML via OLRC

(a)Collection of data

Not later than 90 days after December 18, 2015, the Secretary of Homeland Security, acting through the center established under section 659 of this title, in coordination with appropriate Federal entities and the Assistant Director for Emergency Communications, shall establish a process by which a Statewide Interoperability Coordinator may report data on any cybersecurity risk or incident involving any information system or network used by emergency response providers (as defined in section 101 of this title) within the State.

(b)Analysis of data

Not later than 1 year after December 18, 2015, the Secretary of Homeland Security, acting through the Director of the National Cybersecurity and Communications Integration Center, in coordination with appropriate entities and the Assistant Director for Emergency Communications, and in consultation with the Secretary of Commerce, acting through the Director of the National Institute of Standards and Technology, shall conduct integration and analysis of the data reported under subsection (a) to develop information and recommendations on security and resilience measures for any information system or network used by State emergency response providers.

(c)Best practices

(1)In general

Using the results of the integration and analysis conducted under subsection (b), and any other relevant information, the Director of the National Institute of Standards and Technology shall, on an ongoing basis, facilitate and support the development of methods for reducing cybersecurity risks to emergency response providers using the process described in section 272(e) of title 15.

(2)Report

The Director of the National Institute of Standards and Technology shall submit to Congress a report on the result of the activities of the Director under paragraph (1), including any methods developed by the Director under such paragraph, and shall make such report publicly available on the website of the National Institute of Standards and Technology.

(d)Rule of construction

Nothing in this section shall be construed to—

(1)require a State to report data under subsection (a); or

(2)require a non-Federal entity (as defined in section 1501 of this title) to—

(A)adopt a recommended measure developed under subsection (b); or

(B)follow the result of the activities carried out under subsection (c), including any methods developed under such subsection.

Notes & Related Subsidiaries

Editorial Notes

Amendments

2018—Subsec. (a). Pub. L. 115–278, § 2(h)(1)(H), substituted “section 659 of this title” for “section 148 of this title, as redesignated by section 223(a)(3) of this division,” and “Assistant Director for Emergency Communications” for “Director for Emergency Communications”. Subsec. (b). Pub. L. 115–278, § 2(h)(1)(H)(ii), substituted “Assistant Director for Emergency Communications” for “Director for Emergency Communications”.

Statutory Notes and Related Subsidiaries

Change of Name

Reference to the Assistant Director for Emergency Communications deemed to be a reference to the Executive Assistant Director for Emergency Communications, see section 571(g) of this title, enacted Jan. 1, 2021.

§1532 Enhancement of Emergency Services