§665d — Title 6 Domestic Security | U.S. Code

Summary

Each Sector Risk Management Agency must use its sector knowledge to help owners and operators protect their critical infrastructure. They must work with the Department, the Director, other federal agencies, independent regulators, and State, local, Tribal, and territorial partners, and must collaborate with the private owners and operators in their sector. They must set up and run programs to find and reduce risks, recommend security steps, and help assess and prioritize risks (including physical and cyber threats). They act as the daily federal contact for their sector and chair the federal coordinating council. They must share threat and intelligence information (including through Information Sharing and Analysis Organizations and the national cybersecurity and communications integration center), help identify intelligence needs with the Director of National Intelligence, give the Director timely threat awareness, provide annual sector-specific information to the Department, support incident response and restoration (and national cyber responses when asked), and help plan and run preparedness exercises.

Title 6, §665d

Domestic Security — Source: USLM XML via OLRC

(a)Consistent with applicable law, Presidential directives, Federal regulations, and strategic guidance from the Secretary, each Sector Risk Management Agency, in coordination with the Director, shall—

(1)provide specialized sector-specific expertise to critical infrastructure owners and operators within its designated critical infrastructure sector or subsector of such sector; and

(2)support programs and associated activities of such sector or subsector of such sector.

(b)In carrying out this section, Sector Risk Management Agencies shall—

(1)coordinate with the Department and, as appropriate, other relevant Federal departments and agencies;

(2)collaborate with critical infrastructure owners and operators within the designated critical infrastructure sector or subsector of such sector; and

(3)coordinate with independent regulatory agencies, and State, local, Tribal, and territorial entities, as appropriate.

(c)Consistent with applicable law, Presidential directives, Federal regulations, and strategic guidance from the Secretary, each Sector Risk Management Agency shall utilize its specialized expertise regarding its designated critical infrastructure sector or subsector of such sector and authorities under applicable law to—

(1)support sector risk management, in coordination with the Director, including—

(A)establishing and carrying out programs to assist critical infrastructure owners and operators within the designated sector or subsector of such sector in identifying, understanding, and mitigating threats, vulnerabilities, and risks to their systems or assets, or within a region, sector, or subsector of such sector; and

(B)recommending security measures to mitigate the consequences of destruction, compromise, and disruption of systems and assets;

(2)assess sector risk, in coordination with the Director, including—

(A)identifying, assessing, and prioritizing risks within the designated sector or subsector of such sector, considering physical security and cybersecurity threats, vulnerabilities, and consequences; and

(B)supporting national risk assessment efforts led by the Department;

(3)sector coordination, including—

(A)serving as a day-to-day Federal interface for the prioritization and coordination of sector-specific activities and responsibilities under this title;

(B)serving as the Federal Government coordinating council chair for the designated sector or subsector of such sector; and

(C)participating in cross-sector coordinating councils, as appropriate;

(4)facilitating, in coordination with the Director, the sharing with the Department and other appropriate Federal department of information regarding physical security and cybersecurity threats within the designated sector or subsector of such sector, including—

(A)facilitating, in coordination with the Director, access to, and exchange of, information and intelligence necessary to strengthen the security of critical infrastructure, including through Information Sharing and Analysis Organizations and the national cybersecurity and communications integration center established pursuant to section 659 of this title;

(B)facilitating the identification of intelligence needs and priorities of critical infrastructure owners and operators in the designated sector or subsector of such sector, in coordination with the Director of National Intelligence and the heads of other Federal departments and agencies, as appropriate;

(C)providing the Director, and facilitating awareness within the designated sector or subsector of such sector, of ongoing, and where possible, real-time awareness of identified threats, vulnerabilities, mitigations, and other actions related to the security of such sector or subsector of such sector; and

(D)supporting the reporting requirements of the Department under applicable law by providing, on an annual basis, sector-specific critical infrastructure information;

(5)supporting incident management, including—

(A)supporting, in coordination with the Director, incident management and restoration efforts during or following a security incident; and

(B)supporting the Director, upon request, in national cybersecurity asset response activities for critical infrastructure; and

(6)contributing to emergency preparedness efforts, including—

(A)coordinating with critical infrastructure owners and operators within the designated sector or subsector of such sector and the Director in the development of planning documents for coordinated action in the event of a natural disaster, act of terrorism, or other man-made disaster or emergency;

(B)participating in and, in coordination with the Director, conducting or facilitating, exercises and simulations of potential natural disasters, acts of terrorism, or other man-made disasters or emergencies within the designated sector or subsector of such sector; and

(C)supporting the Department and other Federal departments or agencies in developing planning documents or conducting exercises or simulations when relevant to the designated sector or subsector or such sector.

Notes & Related Subsidiaries

Editorial Notes

Prior Provisions

A prior section 2218 of Pub. L. 107–296 was renumbered section 2220A and is classified to section 665g of this title.

Amendments

2022—Subsec. (c)(4)(A). Pub. L. 117–263 substituted “Information Sharing and Analysis Organizations” for “information sharing and analysis organizations”. 2021—Pub. L. 117–81 reenacted section catchline.

§665d Sector Risk Management Agencies