§677c Cyber Response and Recovery Fund

Summary

Creates a Cyber Response and Recovery Fund to pay for coordinating and helping recover from a major cyber incident tied to an official declaration. The Fund can pay for coordination and technical help for Federal, State, local, Tribal, and public or private entities, either repayable or not. Help can include vulnerability checks, incident mitigation, malware analysis, threat hunting, network protection, buying or upgrading hardware or software, paying contract tech staff, and certain advance actions the Secretary may take. Money for the Fund comes from Congress appropriations and from payments back by Federal agencies, but those payments must come only from money Congress set aside in advance. Spending must come from Fund deposits and is extra to other CISA funding. Fund money must add to, not replace, other government response funds. Recipients must report to the Secretary exactly how they used the money.