§664 National Asset Database

Summary

The Secretary of Homeland Security must create and keep a national database of systems and assets the Secretary finds vital to the economy, public health, or safety, or that the Secretary decides should be included. The Secretary must also keep a single classified, prioritized list of items in that database whose loss would cause national or regional catastrophe, following Homeland Security Presidential Directive–7 as it existed on January 1, 2007. DHS must use the database when making plans and running programs. The database and the classified list must be updated every year. DHS must give states guidance on what data to send, let state homeland security officials submit and review entries, check submissions for errors, and allow corrections before finalizing. The database must be organized by the sectors in the National Infrastructure Protection Plan and by state and county. DHS should find ways to include private-sector information, including through the Protected Critical Infrastructure Information program. If a Sector Risk Management Agency assigns a classification level to information provided under this law, Congress, DHS, and other federal agencies must honor that classification. Within 180 days after August 3, 2007, and each year after, the Secretary must report to the Senate Committee on Homeland Security and Governmental Affairs and the House Committee on Homeland Security. The report must name and locate items on the classified prioritized list, identify those most at risk from terrorism, note major challenges or changes, describe use of the database for federal funding decisions, and describe coordination with the private sector. Reports are unclassified but may include a classified annex. The Secretary may also set up a National Infrastructure Protection Consortium of labs, government, state and local officials, academics, and Centers of Excellence to advise on the database and list.