Title 6, Domestic SecurityRelease 119-110

§677d Notification and Reporting

Title 6 › CHAPTER 1 — HOMELAND SECURITY ORGANIZATION › SUBCHAPTER XVIII — CYBERSECURITY AND INFRASTRUCTURE SECURITY AGENCY › Part C — Declaration of a Significant Incident › § 677d

Last updated Sep 22, 2026|Official source

Summary

When the Secretary declares or renews a cyber emergency, they must immediately tell the National Cyber Director and the right congressional committees. The notice must say how long the declaration is expected to last, why it was made (for a declaration this includes facts about the specific incident such as its effect on operations, who did it if known, and which federal and non‑federal groups are or may be affected), why a renewal was needed, why other resources besides the Fund are not enough, and what coordination the Secretary expects the National Cyber Director to carry out. Within 180 days of the declaration or renewal, the Secretary must send a written report to those committees. The report must cover the reasons and intelligence behind the action, any use of Fund money, what federal, state, local, and private partners did to respond and recover, a record of Fund obligations and spending, and an analysis of the incident’s impact, how the declaration/renewal affected response and recovery, and how the Fund money helped. Notices and reports must be unclassified with markings for information exempt under section 552 of title 5 (FOIA) and can include a classified annex. The Secretary can combine reports if multiple declarations or renewals are about the same incident. The Paperwork Reduction Act does not apply to voluntary information collection during an investigation, response, or immediate post‑response review of the incident.

Full Legal Text

Title 6, §677d

Domestic Security, Source: USLM XML via OLRC

(a)Notification

Upon a declaration or renewal, the Secretary shall immediately notify the National Cyber Director and appropriate congressional committees and include in the notification—

(1)an estimation of the planned duration of the declaration;

(2)with respect to a notification of a declaration, the reason for the declaration, including information relating to the specific significant incident or imminent specific significant incident, including—

(A)the operational or mission impact or anticipated impact of the specific significant incident on Federal and non-Federal entities;

(B)if known, the perpetrator of the specific significant incident; and

(C)the scope of the Federal and non-Federal entities impacted or anticipated to be impacted by the specific significant incident;

(3)with respect to a notification of a renewal, the reason for the renewal;

(4)justification as to why available resources, other than the Fund, are insufficient to respond to or mitigate the specific significant incident; and

(5)a description of the coordination activities described in section 677b(b) of this title that the Secretary anticipates the Director to perform.

(b)Report to Congress

Not later than 180 days after the date of a declaration or renewal, the Secretary shall submit to the appropriate congressional committees a report that includes—

(1)the reason for the declaration or renewal, including information and intelligence relating to the specific significant incident that led to the declaration or renewal;

(2)the use of any funds from the Fund for the purpose of responding to the incident or threat described in paragraph (1);

(3)a description of the actions, initiatives, and projects undertaken by the Department and State and local governments and public and private entities in responding to and recovering from the specific significant incident described in paragraph (1);

(4)an accounting of the specific obligations and outlays of the Fund; and

(5)an analysis of—

(A)the impact of the specific significant incident described in paragraph (1) on Federal and non-Federal entities;

(B)the impact of the declaration or renewal on the response to, and recovery from, the specific significant incident described in paragraph (1); and

(C)the impact of the funds made available from the Fund as a result of the declaration or renewal on the recovery from, and response to, the specific significant incident described in paragraph (1).

(c)Classification

Each notification made under subsection (a) and each report submitted under subsection (b)—

(1)shall be in an unclassified form with appropriate markings to indicate information that is exempt from disclosure under section 552 of title 5 (commonly known as the “Freedom of Information Act”); and

(2)may include a classified annex.

(d)Consolidated report

The Secretary shall not be required to submit multiple reports under subsection (b) for multiple declarations or renewals if the Secretary determines that the declarations or renewals substantively relate to the same specific significant incident.

(e)Exemption

The requirements of subchapter I of chapter 35 of title 44 (commonly known as the “Paperwork Reduction Act”) shall not apply to the voluntary collection of information by the Department during an investigation of, a response to, or an immediate post-response review of, the specific significant incident leading to a declaration or renewal.

Reference

Citations & Metadata

Citation

6 U.S.C. § 677d

Title 6, Domestic Security

Last Updated

Sep 22, 2026

Release point: 119-110