† HR 3359 EAS 
sessments are provided or produced by the De-
partment, in order to make recommendations, 
including prioritization, for protective and sup-
port measures by the Department, other Federal 
Government agencies, State, local, tribal, and 
territorial government agencies and authorities, 
the private sector, and other entities regarding 
terrorist and other threats to homeland security. 
‘‘(D) To ensure, pursuant to section 202, the 
timely and efficient access by the Department to 
all information necessary to discharge the re-
sponsibilities under this title, including obtain-
ing that information from other Federal Govern-
ment agencies. 
‘‘(E) To develop, in coordination with the 
Sector-Specific Agencies with available expertise, 
a comprehensive national plan for securing the 
key resources and critical infrastructure of the 
United States, including power production, gen-
eration, and distribution systems, information 
technology and telecommunications systems (in-
cluding satellites), electronic financial and prop-
erty record storage and transmission systems, 
emergency communications systems, and the
† HR 3359 EAS 
physical and technological assets that support 
those systems. 
‘‘(F) To recommend measures necessary to 
protect the key resources and critical infrastruc-
ture of the United States in coordination with 
other Federal Government agencies, including 
Sector-Specific Agencies, and in cooperation 
with State, local, tribal, and territorial govern-
ment agencies and authorities, the private sector, 
and other entities. 
‘‘(G) To review, analyze, and make rec-
ommendations for improvements to the policies 
and procedures governing the sharing of infor-
mation relating to homeland security within the 
Federal Government and between Federal Gov-
ernment agencies and State, local, tribal, and 
territorial government agencies and authorities. 
‘‘(H) To disseminate, as appropriate, infor-
mation analyzed by the Department within the 
Department to other Federal Government agen-
cies with responsibilities relating to homeland se-
curity and to State, local, tribal, and territorial 
government agencies and private sector entities 
with those responsibilities in order to assist in 
the deterrence, prevention, or preemption of, or
† HR 3359 EAS 
response to, terrorist attacks against the United 
States. 
‘‘(I) To consult with State, local, tribal, and 
territorial government agencies and private sec-
tor entities to ensure appropriate exchanges of 
information, including law enforcement-related 
information, relating to threats of terrorism 
against the United States. 
‘‘(J) To ensure that any material received 
pursuant to this Act is protected from unauthor-
ized disclosure and handled and used only for 
the performance of official duties. 
‘‘(K) To request additional information 
from other Federal Government agencies, State, 
local, tribal, and territorial government agencies, 
and the private sector relating to threats of ter-
rorism in the United States, or relating to other 
areas of responsibility assigned by the Secretary, 
including the entry into cooperative agreements 
through the Secretary to obtain such informa-
tion. 
‘‘(L) To establish and utilize, in conjunc-
tion with the Chief Information Officer of the 
Department, a secure communications and infor-
mation 
technology 
infrastructure, 
including
† HR 3359 EAS 
data-mining and other advanced analytical 
tools, in order to access, receive, and analyze 
data and information in furtherance of the re-
sponsibilities under this section, and to dissemi-
nate information acquired and analyzed by the 
Department, as appropriate. 
‘‘(M) To coordinate training and other sup-
port to the elements and personnel of the Depart-
ment, other Federal Government agencies, and 
State, local, tribal, and territorial government 
agencies that provide information to the Depart-
ment, or are consumers of information provided 
by the Department, in order to facilitate the 
identification and sharing of information re-
vealed in their ordinary duties and the optimal 
utilization of information received from the De-
partment. 
‘‘(N) To coordinate with Federal, State, 
local, tribal, and territorial law enforcement 
agencies, and the private sector, as appropriate. 
‘‘(O) To exercise the authorities and over-
sight of the functions, personnel, assets, and li-
abilities of those components transferred to the 
Department pursuant to section 201(g).
† HR 3359 EAS 
‘‘(P) To carry out the functions of the na-
tional cybersecurity and communications inte-
gration center under section 2209. 
‘‘(Q) To carry out the requirements of the 
Chemical Facility Anti-Terrorism Standards 
Program established under title XXI and the se-
cure handling of ammonium nitrate program es-
tablished under subtitle J of title VIII, or any 
successor programs. 
‘‘(2) REALLOCATION.—The Secretary may reallo-
cate within the Agency the functions specified in sec-
tions 2203(b) and 2204(b), consistent with the respon-
sibilities provided in paragraph (1), upon certifying 
to and briefing the appropriate congressional commit-
tees, and making available to the public, at least 60 
days prior to the reallocation that the reallocation is 
necessary for carrying out the activities of the Agency. 
‘‘(3) STAFF.— 
‘‘(A) IN
GENERAL.—The Secretary shall 
provide the Agency with a staff of analysts hav-
ing appropriate expertise and experience to as-
sist the Agency in discharging the responsibil-
ities of the Agency under this section.
† HR 3359 EAS 
‘‘(B) PRIVATE
SECTOR
ANALYSTS.—Ana-
lysts under this subsection may include analysts 
from the private sector. 
‘‘(C) 
SECURITY
CLEARANCES.—Analysts 
under this subsection shall possess security clear-
ances appropriate for their work under this sec-
tion. 
‘‘(4) DETAIL OF PERSONNEL.— 
‘‘(A) IN GENERAL.—In order to assist the 
Agency in discharging the responsibilities of the 
Agency under this section, personnel of the Fed-
eral agencies described in subparagraph (B) may 
be detailed to the Agency for the performance of 
analytic functions and related duties. 
‘‘(B) AGENCIES.—The Federal agencies de-
scribed in this subparagraph are— 
‘‘(i) the Department of State; 
‘‘(ii) the Central Intelligence Agency; 
‘‘(iii) the Federal Bureau of Investiga-
tion; 
‘‘(iv) the National Security Agency; 
‘‘(v) the National Geospatial-Intel-
ligence Agency; 
‘‘(vi) the Defense Intelligence Agency; 
‘‘(vii) Sector-Specific Agencies; and
† HR 3359 EAS 
‘‘(viii) any other agency of the Federal 
Government that the President considers 
appropriate. 
‘‘(C) 
INTERAGENCY
AGREEMENTS.—The 
Secretary and the head of a Federal agency de-
scribed in subparagraph (B) may enter into 
agreements for the purpose of detailing personnel 
under this paragraph. 
‘‘(D) BASIS.—The detail of personnel under 
this paragraph may be on a reimbursable or 
non-reimbursable basis. 
‘‘(f) COMPOSITION.—The Agency shall be composed of 
the following divisions: 
‘‘(1) The Cybersecurity Division, headed by an 
Assistant Director. 
‘‘(2) The Infrastructure Security Division, head-
ed by an Assistant Director. 
‘‘(3) The Emergency Communications Division 
under title XVIII, headed by an Assistant Director. 
‘‘(g) CO-LOCATION.— 
‘‘(1) IN
GENERAL.—To the maximum extent 
practicable, the Director shall examine the establish-
ment of central locations in geographical regions with 
a significant Agency presence.
† HR 3359 EAS 
‘‘(2) COORDINATION.—When establishing the cen-
tral locations described in paragraph (1), the Director 
shall coordinate with component heads and the Under 
Secretary for Management to co-locate or partner on 
any new real property leases, renewing any occu-
pancy agreements for existing leases, or agreeing to 
extend or newly occupy any Federal space or new 
construction. 
‘‘(h) PRIVACY.— 
‘‘(1) IN GENERAL.—There shall be a Privacy Of-
ficer of the Agency with primary responsibility for 
privacy policy and compliance for the Agency. 
‘‘(2) RESPONSIBILITIES.—The responsibilities of 
the Privacy Officer of the Agency shall include— 
‘‘(A) assuring that the use of technologies by 
the Agency sustain, and do not erode, privacy 
protections relating to the use, collection, and 
disclosure of personal information; 
‘‘(B) assuring that personal information 
contained in systems of records of the Agency is 
handled in full compliance as specified in section 
552a of title 5, United States Code (commonly 
known as the ‘Privacy Act of 1974’);
† HR 3359 EAS 
‘‘(C) evaluating legislative and regulatory 
proposals involving collection, use, and disclosure 
of personal information by the Agency; and 
‘‘(D) conducting a privacy impact assess-
ment of proposed rules of the Agency on the pri-
vacy of personal information, including the type 
of personal information collected and the number 
of people affected. 
‘‘(i) SAVINGS.—Nothing in this title may be construed 
as affecting in any manner the authority, existing on the 
day before the date of enactment of this title, of any other 
component of the Department or any other Federal depart-
ment or agency, including the authority provided to the 
Sector-Specific Agency specified in section 61003(c) of divi-
sion F of the Fixing America’s Surface Transportation Act 
(6 U.S.C. 121 note; Public Law 114–94). 
‘‘SEC. 2203. CYBERSECURITY DIVISION. 
‘‘(a) ESTABLISHMENT.— 
‘‘(1) IN GENERAL.—There is established in the 
Agency a Cybersecurity Division. 
‘‘(2) ASSISTANT DIRECTOR.—The Cybersecurity 
Division shall be headed by an Assistant Director for 
Cybersecurity (in this section referred to as the ‘As-
sistant Director’), who shall—
† HR 3359 EAS 
‘‘(A) be at the level of Assistant Secretary 
within the Department; 
‘‘(B) be appointed by the President without 
the advice and consent of the Senate; and 
‘‘(C) report to the Director. 
‘‘(3) REFERENCE.—Any reference to the Assist-
ant Secretary for Cybersecurity and Communications 
in any law, regulation, map, document, record, or 
other paper of the United States shall be deemed to 
be a reference to the Assistant Director for Cybersecu-
rity. 
‘‘(b) FUNCTIONS.—The Assistant Director shall— 
‘‘(1) direct the cybersecurity efforts of the Agen-
cy; 
‘‘(2) carry out activities, at the direction of the 
Director, related to the security of Federal informa-
tion and Federal information systems consistent with 
law, including subchapter II of chapter 35 of title 44, 
United States Code, and the Cybersecurity Act of 
2015 (contained in division N of the Consolidated Ap-
propriations Act, 2016 (Public Law 114–113)); 
‘‘(3) fully participate in the mechanisms re-
quired under section 2202(c)(7); and 
‘‘(4) carry out such other duties and powers as 
prescribed by the Director.
† HR 3359 EAS 
‘‘SEC. 2204. INFRASTRUCTURE SECURITY DIVISION. 
‘‘(a) ESTABLISHMENT.— 
‘‘(1) IN GENERAL.—There is established in the 
Agency an Infrastructure Security Division. 
‘‘(2) ASSISTANT DIRECTOR.—The Infrastructure 
Security Division shall be headed by an Assistant Di-
rector for Infrastructure Security (in this section re-
ferred to as the ‘Assistant Director’), who shall— 
‘‘(A) be at the level of Assistant Secretary 
within the Department; 
‘‘(B) be appointed by the President without 
the advice and consent of the Senate; and 
‘‘(C) report to the Director. 
‘‘(3) REFERENCE.—Any reference to the Assist-
ant Secretary for Infrastructure Protection in any 
law, regulation, map, document, record, or other 
paper of the United States shall be deemed to be a ref-
erence to the Assistant Director for Infrastructure Se-
curity. 
‘‘(b) FUNCTIONS.—The Assistant Director shall— 
‘‘(1) direct the critical infrastructure security ef-
forts of the Agency; 
‘‘(2) carry out, at the direction of the Director, 
the Chemical Facilities Anti-Terrorism Standards 
Program established under title XXI and the secure 
handling of ammonium nitrate program established
† HR 3359 EAS 
under subtitle J of title VIII, or any successor pro-
grams; 
‘‘(3) fully participate in the mechanisms re-
quired under section 2202(c)(7); and 
‘‘(4) carry out such other duties and powers as 
prescribed by the Director.’’. 
(b) TREATMENT OF CERTAIN POSITIONS.— 
(1) UNDER SECRETARY.—The individual serving 
as the Under Secretary appointed pursuant to section 
103(a)(1)(H) of the Homeland Security Act of 2002 
(6 U.S.C. 113(a)(1)(H)) of the Department of Home-
land Security on the day before the date of enactment 
of this Act may continue to serve as the Director of 
Cybersecurity and Infrastructure Security of the De-
partment on and after such date. 
(2) DIRECTOR
FOR
EMERGENCY
COMMUNICA-
TIONS.—The individual serving as the Director for 
Emergency Communications of the Department of 
Homeland Security on the day before the date of en-
actment of this Act may continue to serve as the As-
sistant Director for Emergency Communications of 
the Department on and after such date. 
(3) ASSISTANT SECRETARY FOR CYBERSECURITY 
AND
COMMUNICATIONS.—The individual serving as 
the Assistant Secretary for Cybersecurity and Com-
† HR 3359 EAS 
munications on the day before the date of enactment 
of this Act may continue to serve as the Assistant Di-
rector for Cybersecurity on and after such date. 
(4) ASSISTANT
SECRETARY
FOR
INFRASTRUC-
TURE PROTECTION.—The individual serving as the 
Assistant Secretary for Infrastructure Protection on 
the day before the date of enactment of this Act may 
continue to serve as the Assistant Director for Infra-
structure Security on and after such date. 
(c) REFERENCE.—Any reference to— 
(1) the Office of Emergency Communications in 
any law, regulation, map, document, record, or other 
paper of the United States shall be deemed to be a ref-
erence to the Emergency Communications Division; 
and 
(2) the Director for Emergency Communications 
in any law, regulation, map, document, record, or 
other paper of the United States shall be deemed to 
be a reference to the Assistant Director for Emergency 
Communications. 
(d) OVERSIGHT.—The Director of Cybersecurity and 
Infrastructure Security of the Department of Homeland Se-
curity shall provide to Congress, in accordance with the 
deadlines specified in paragraphs (1) through (6), informa-
tion on the following:
† HR 3359 EAS 
(1) Not later than 60 days after the date of en-
actment of this Act, a briefing on the activities of the 
Agency relating to the development and use of the 
mechanisms required pursuant to section 2202(c)(6) 
of the Homeland Security Act of 2002 (as added by 
subsection (a)). 
(2) Not later than 1 year after the date of the 
enactment of this Act, a briefing on the activities of 
the Agency relating to the use and improvement by 
the Agency of the mechanisms required pursuant to 
section 2202(c)(6) of the Homeland Security Act of 
2002 and how such activities have impacted coordina-
tion, situational awareness, and communications 
with Sector-Specific Agencies. 
(3) Not later than 90 days after the date of the 
enactment of this Act, information on the mechanisms 
of the Agency for regular and ongoing consultation 
and collaboration, as required pursuant to section 
2202(c)(7) of the Homeland Security Act of 2002 (as 
added by subsection (a)). 
(4) Not later than 1 year after the date of the 
enactment of this Act, information on the activities of 
the consultation and collaboration mechanisms of the 
Agency as required pursuant to section 2202(c)(7) of 
the Homeland Security Act of 2002, and how such
† HR 3359 EAS 
mechanisms have impacted operational coordination, 
situational awareness, and integration across the 
Agency. 
(5) Not later than 180 days after the date of en-
actment of this Act, information, which shall be made 
publicly available and updated as appropriate, on the 
mechanisms and structures of the Agency responsible 
for stakeholder outreach and engagement, as required 
under section 2202(c)(10) of the Homeland Security 
Act of 2002 (as added by subsection (a)). 
(e) CYBER WORKFORCE.—Not later than 90 days after 
the date of enactment of this Act, the Director of the Cyber-
security and Infrastructure Security Agency of the Depart-
ment of Homeland Security, in coordination with the Di-
rector of the Office of Personnel Management, shall submit 
to Congress a report detailing how the Agency is meeting 
legislative requirements under the Cybersecurity Workforce 
Assessment Act (Public Law 113–246; 128 Stat. 2880) and 
the Homeland Security Cybersecurity Workforce Assessment 
Act (enacted as section 4 of the Border Patrol Agent Pay 
Reform Act of 2014; Public Law 113–277) to address cyber 
workforce needs. 
(f) FACILITY.—Not later than 180 days after the date 
of enactment of this Act, the Director of the Cybersecurity 
and Infrastructure Security Agency of the Department of
† HR 3359 EAS 
Homeland Security shall report to Congress on the most 
efficient and effective methods of consolidating Agency fa-
cilities, personnel, and programs to most effectively carry 
out the Agency’s mission. 
(g) TECHNICAL AND CONFORMING AMENDMENTS TO 
THE HOMELAND SECURITY ACT OF 2002.—The Homeland 
Security Act of 2002 (6 U.S.C. 101 et seq.) is amended— 
(1) by amending section 103(a)(1)(H) (6 U.S.C. 
113(a)(1)(H)) to read as follows: 
‘‘(H) A Director of the Cybersecurity and 
Infrastructure Security Agency.’’; 
(2) in title II (6 U.S.C. 121 et seq.)— 
(A) in the title heading, by striking ‘‘AND 
INFRASTRUCTURE PROTECTION’’; 
(B) in the subtitle A heading, by striking 
‘‘and Infrastructure Protection’’; 
(C) in section 201 (6 U.S.C. 121)— 
(i) in the section heading, by striking 
‘‘AND
INFRASTRUCTURE
PROTEC-
TION’’; 
(ii) in subsection (a)— 
(I) in the subsection heading, by 
striking ‘‘AND INFRASTRUCTURE PRO-
TECTION’’; and
† HR 3359 EAS 
(II) by striking ‘‘and an Office of 
Infrastructure Protection’’; 
(iii) in subsection (b)— 
(I) in the subsection heading, by 
striking ‘‘AND ASSISTANT SECRETARY 
FOR INFRASTRUCTURE PROTECTION’’; 
and 
(II) by striking paragraph (3); 
(iv) in subsection (c)— 
(I) by striking ‘‘and infrastruc-
ture protection’’; and 
(II) by striking ‘‘or the Assistant 
Secretary for Infrastructure Protection, 
as appropriate’’; 
(v) in subsection (d)— 
(I) in the subsection heading, by 
striking ‘‘AND INFRASTRUCTURE PRO-
TECTION’’; 
(II) in the matter preceding para-
graph (1), by striking ‘‘and infrastruc-
ture protection’’; 
(III) by striking paragraphs (5), 
(6), and (25);
† HR 3359 EAS 
(IV) by redesignating paragraphs 
(7) through (24) as paragraphs (5) 
through (22), respectively; 
(V) by redesignating paragraph 
(26) as paragraph (23); and 
(VI) in paragraph (23)(B)(i), as 
so redesignated, by striking ‘‘section 
319’’ and inserting ‘‘section 320’’; 
(vi) in subsection (e)(1), by striking 
‘‘and the Office of Infrastructure Protec-
tion’’; and 
(vii) in subsection (f)(1), by striking 
‘‘and the Office of Infrastructure Protec-
tion’’; 
(D) in section 202 (6 U.S.C. 122)— 
(i) in subsection (c), in the matter pre-
ceding paragraph (1), by striking ‘‘Director 
of Central Intelligence’’ and inserting ‘‘Di-
rector of National Intelligence’’; and 
(ii) in subsection (d)(2), by striking 
‘‘Director of Central Intelligence’’ and in-
serting ‘‘Director of National Intelligence’’; 
(E) in section 204 (6 U.S.C. 124a)— 
(i) in subsection (c)(1), in the matter 
preceding subparagraph (A), by striking
† HR 3359 EAS 
‘‘Assistant Secretary for Infrastructure Pro-
tection’’ and inserting ‘‘Director of the Cy-
bersecurity and Infrastructure Security 
Agency’’; and 
(ii) in subsection (d)(1), in the matter 
preceding subparagraph (A), by striking 
‘‘Assistant Secretary for Infrastructure Pro-
tection’’ and inserting ‘‘Director of the Cy-
bersecurity and Infrastructure Security 
Agency’’; 
(F) in section 210A(c)(2)(B) (6 U.S.C. 
124h(c)(2)(B)), by striking ‘‘Office of Infrastruc-
ture Protection’’ and inserting ‘‘Cybersecurity 
and Infrastructure Security Agency’’; 
(G) by redesignating section 210E (6 U.S.C. 
124l) as section 2214 and transferring such sec-
tion to appear after section 2213 (as redesig-
nated by subparagraph (I)); 
(H) in subtitle B, by redesignating sections 
211 through 215 (6 U.S.C. 101 note, and 131 
through 134) as sections 2221 through 2225, re-
spectively, and transferring such subtitle, includ-
ing the enumerator and heading of subtitle B 
and such sections, to appear after section 2214 
(as redesignated by subparagraph (G));
† HR 3359 EAS 
(I) by redesignating sections 223 through 
230 (6 U.S.C. 143 through 151) as sections 2205 
through 2213, respectively, and transferring such 
sections to appear after section 2204, as added 
by this Act; 
(J) by redesignating section 210F as section 
210E; and 
(K) by redesignating subtitles C and D as 
subtitles B and C, respectively; 
(3) in title III (6 U.S.C. 181 et seq.)— 
(A) in section 302 (6 U.S.C. 182)— 
(i) by striking ‘‘biological,,’’ each place 
that term appears and inserting ‘‘biologi-
cal,’’; and 
(ii) in paragraph (3), by striking ‘‘As-
sistant Secretary for Infrastructure Protec-
tion’’ and inserting ‘‘Director of the Cyber-
security and Infrastructure Security Agen-
cy’’; 
(B) by redesignating the second section 319 
(6 U.S.C. 195f) (relating to EMP and GMD 
mitigation research and development) as section 
320; and
† HR 3359 EAS 
(C) in section 320(c)(1), as so redesignated, 
by striking ‘‘Section 214’’ and inserting ‘‘Section 
2224’’; 
(4) in title V (6 U.S.C. 311 et seq.)— 
(A) in section 508(d)(2)(D) (6 U.S.C. 
318(d)(2)(D)), by striking ‘‘The Director of the 
Office of Emergency Communications of the De-
partment of Homeland Security’’ and inserting 
‘‘The Assistant Director for Emergency Commu-
nications’’; 
(B) in section 514 (6 U.S.C. 321c)— 
(i) by striking subsection (b); and 
(ii) by redesignating subsection (c) as 
subsection (b); and 
(C) in section 523 (6 U.S.C. 321l)— 
(i) in subsection (a), in the matter pre-
ceding paragraph (1), by striking ‘‘Assist-
ant Secretary for Infrastructure Protection’’ 
and inserting ‘‘Director of Cybersecurity 
and Infrastructure Security’’; and 
(ii) in subsection (c), by striking ‘‘As-
sistant Secretary for Infrastructure Protec-
tion’’ and inserting ‘‘Director of Cybersecu-
rity and Infrastructure Security’’; 
(5) in title VIII (6 U.S.C. 361 et seq.)—
† HR 3359 EAS 
(A) in section 884(d)(4)(A)(ii) (6 U.S.C. 
464(d)(4)(A)(ii)), by striking ‘‘Under Secretary 
responsible for overseeing critical infrastructure 
protection, cybersecurity, and other related pro-
grams of the Department’’ and inserting ‘‘Direc-
tor of Cybersecurity and Infrastructure Secu-
rity’’; and 
(B) in section 899B(a) (6 U.S.C. 488a(a)), 
by adding at the end the following: ‘‘Such regu-
lations shall be carried out by the Cybersecurity 
and Infrastructure Security Agency.’’; 
(6) in title XVIII (6 U.S.C. 571 et seq.)— 
(A) in section 1801 (6 U.S.C. 571)— 
(i) in the section heading, by striking 
‘‘OFFICE OF EMERGENCY COMMUNICA-
TIONS’’ 
and 
inserting 
‘‘EMERGENCY 
COMMUNICATIONS DIVISION’’; 
(ii) in subsection (a)— 
(I) by striking ‘‘Office of Emer-
gency Communications’’ and inserting 
‘‘Emergency 
Communications 
Divi-
sion’’; and 
(II) by adding at the end the fol-
lowing: ‘‘The Division shall be located
† HR 3359 EAS 
in the Cybersecurity and Infrastruc-
ture Security Agency.’’; 
(iii) by amending subsection (b) to 
read as follows: 
‘‘(b) ASSISTANT DIRECTOR.—The head of the Division 
shall be the Assistant Director for Emergency Communica-
tions. The Assistant Director shall report to the Director 
of Cybersecurity and Infrastructure Security. All decisions 
of the Assistant Director that entail the exercise of signifi-
cant authority shall be subject to the approval of the Direc-
tor of Cybersecurity and Infrastructure Security.’’; 
(iv) in subsection (c)— 
(I) in the matter preceding para-
graph (1), by inserting ‘‘Assistant’’ be-
fore ‘‘Director’’; 
(II) in paragraph (14), by strik-
ing ‘‘and’’ at the end; 
(III) in paragraph (15), by strik-
ing the period at the end and inserting 
‘‘; and’’; and 
(IV) by inserting after paragraph 
(15) the following: 
‘‘(16) fully participate in the mechanisms re-
quired under section 2202(c)(7).’’;
† HR 3359 EAS 
(v) in subsection (d), in the matter 
preceding paragraph (1), by inserting ‘‘As-
sistant’’ before ‘‘Director’’; and 
(vi) in subsection (e), in the matter 
preceding paragraph (1), by inserting ‘‘As-
sistant’’ before ‘‘Director’’; 
(B) in sections 1802 through 1805 (6 U.S.C. 
572 through 575), by striking ‘‘Director for 
Emergency Communications’’ each place that 
term appears and inserting ‘‘Assistant Director 
for Emergency Communications’’; 
(C) in section 1809 (6 U.S.C. 579)— 
(i) by striking ‘‘Director of Emergency 
Communications’’ each place that term ap-
pears and inserting ‘‘Assistant Director for 
Emergency Communications’’; 
(ii) in subsection (b)— 
(I) by striking ‘‘Director for 
Emergency Communications’’ and in-
serting ‘‘Assistant Director for Emer-
gency Communications’’; and 
(II) by striking ‘‘Office of Emer-
gency Communications’’ and inserting 
‘‘Emergency 
Communications 
Divi-
sion’’;
† HR 3359 EAS 
(iii) in subsection (e)(3), by striking 
‘‘the Director’’ and inserting ‘‘the Assistant 
Director’’; and 
(iv) in subsection (m)(1)— 
(I) by striking ‘‘The Director’’ 
and inserting ‘‘The Assistant Direc-
tor’’; 
(II) by striking ‘‘the Director de-
termines’’ and inserting ‘‘the Assistant 
Director determines’’; and 
(III) by striking ‘‘Office of Emer-
gency Communications’’ and inserting 
‘‘Cybersecurity and Infrastructure Se-
curity Agency’’; 
(D) in section 1810 (6 U.S.C. 580)— 
(i) in subsection (a)(1), by striking 
‘‘Director of the Office of Emergency Com-
munications (referred to in this section as 
the ‘Director’)’’ and inserting ‘‘Assistant 
Director for Emergency Communications 
(referred to in this section as the ‘Assistant 
Director’)’’; 
(ii) in subsection (c), by striking ‘‘Of-
fice of Emergency Communications’’ and
† HR 3359 EAS 
inserting ‘‘Emergency Communications Di-
vision’’; and 
(iii) by striking ‘‘Director’’ each place 
that term appears and inserting ‘‘Assistant 
Director’’; 
(7) in title XX (6 U.S.C. 601 et seq.)— 
(A) in paragraph (4)(A)(iii)(II) of section 
2001 (6 U.S.C. 601), by striking ‘‘section 
210E(a)(2)’’ and inserting ‘‘section 2214(a)(2)’’; 
(B) 
in 
section 
2008(a)(3) 
(6 
U.S.C. 
609(a)(3)), by striking ‘‘section 210E(a)(2)’’ and 
inserting ‘‘section 2214(a)(2)’’; and 
(C) in section 2021 (6 U.S.C. 611)— 
(i) by striking subsection (c); and 
(ii) by redesignating subsection (d) as 
subsection (c); 
(8) in title XXI (6 U.S.C. 621 et seq.)— 
(A) 
in 
section 
2102(a)(1) 
(6 
U.S.C. 
622(a)(1)), by inserting ‘‘, which shall be located 
in the Cybersecurity and Infrastructure Security 
Agency’’ before the period at the end; and 
(B) 
in 
section 
2104(c)(2) 
(6 
U.S.C. 
624(c)(2)), by striking ‘‘Under Secretary respon-
sible for overseeing critical infrastructure protec-
tion, cybersecurity, and other related programs
† HR 3359 EAS 
of the Department appointed under section 
103(a)(1)(H)’’ and inserting ‘‘Director of Cyber-
security and Infrastructure Security’’; and 
(9) in title XXII, as added by this Act— 
(A) in subtitle A— 
(i) in section 2205, as so redesig-
nated— 
(I) in the matter preceding para-
graph (1)— 
(aa) by striking ‘‘section 
201’’ 
and 
inserting 
‘‘section 
2202’’; and 
(bb) by striking ‘‘Under Sec-
retary appointed under section 
103(a)(1)(H)’’ and inserting ‘‘Di-
rector of Cybersecurity and Infra-
structure Security’’; and 
(II) in paragraph (1)(B), by 
striking ‘‘and’’ at the end; 
(ii) in section 2206, as so redesignated, 
by striking ‘‘Assistant Secretary for Infra-
structure Protection’’ and inserting ‘‘Direc-
tor of Cybersecurity and Infrastructure Se-
curity’’;
† HR 3359 EAS 
(iii) in section 2209, as so redesig-
nated— 
(I) by striking ‘‘Under Secretary 
appointed under section 103(a)(1)(H)’’ 
each place that term appears and in-
serting ‘‘Director’’; 
(II) in subsection (a)(4), by strik-
ing ‘‘section 212(5)’’ and inserting 
‘‘section 2222(5)’’; 
(III) in subsection (b), by adding 
at the end the following: ‘‘The Center 
shall be located in the Cybersecurity 
and Infrastructure Security Agency. 
The head of the Center shall report to 
the Assistant Director for Cybersecu-
rity.’’; and 
(IV) in subsection (c)(11), by 
striking ‘‘Office of Emergency Commu-
nications’’ and inserting ‘‘Emergency 
Communications Division’’; 
(iv) in section 2210, as so redesig-
nated— 
(I) by striking ‘‘section 227’’ each 
place that term appears and inserting 
‘‘section 2209’’; and
† HR 3359 EAS 
(II) in subsection (c)— 
(aa) by striking ‘‘Under Sec-
retary appointed under section 
103(a)(1)(H)’’ and inserting ‘‘Di-
rector of Cybersecurity and Infra-
structure Security’’; and 
(bb) 
by 
striking 
‘‘section 
212(5)’’ and inserting ‘‘section 
2222(5)’’; 
(v) in section 2211(b)(2)(A), as so re-
designated, by striking ‘‘the section 227’’ 
and inserting ‘‘section 2209’’; 
(vi) in section 2212, as so redesignated, 
by striking ‘‘section 212(5)’’ and inserting 
‘‘section 2222(5)’’; 
(vii) in section 2213(a), as so redesig-
nated— 
(I) in paragraph (3), by striking 
‘‘section 228’’ and inserting ‘‘section 
2210’’; and 
(II) in paragraph (4), by striking 
‘‘section 227’’ and inserting ‘‘section 
2209’’; and 
(viii) in section 2214, as so redesig-
nated—
† HR 3359 EAS 
(I) by striking subsection (e); and 
(II) by redesignating subsection 
(f) as subsection (e); and 
(B) in subtitle B— 
(i) in section 2222(8), as so redesig-
nated, by striking ‘‘section 227’’ and insert-
ing ‘‘section 2209’’; and 
(ii) in section 2224(h), as so redesig-
nated, by striking ‘‘section 213’’ and insert-
ing ‘‘section 2223’’; 
(h) TECHNICAL AND CONFORMING AMENDMENTS TO 
OTHER LAWS.— 
(1) CYBERSECURITY ACT OF 2015.—The Cyberse-
curity Act of 2015 (6 U.S.C. 1501 et seq.) is amend-
ed— 
(A) in section 202(2) (6 U.S.C. 131 note)— 
(i) by striking ‘‘section 227’’ and in-
serting ‘‘section 2209’’; and 
(ii) by striking ‘‘, as so redesignated by 
section 223(a)(3) of this division’’; 
(B) in section 207(2) (Public Law 114–113; 
129 Stat. 2962)— 
(i) by striking ‘‘section 227’’ and in-
serting ‘‘section 2209’’; and
† HR 3359 EAS 
(ii) by striking ‘‘, as redesignated by 
section 223(a) of this division,’’; 
(C) in section 208 (Public Law 114–113; 
129 Stat. 2962), by striking ‘‘Under Secretary 
appointed under section 103(a)(1)(H) of the 
Homeland Security Act of 2002 (6 U.S.C. 
113(a)(1)(H))’’ and inserting ‘‘Director of Cy-
bersecurity and Infrastructure Security of the 
Department’’; 
(D) in section 222 (6 U.S.C. 1521)— 
(i) in paragraph (2)— 
(I) by striking ‘‘section 228’’ and 
inserting ‘‘section 2210’’; and 
(II) by striking ‘‘, as added by 
section 223(a)(4) of this division’’; and 
(ii) in paragraph (4)— 
(I) by striking ‘‘section 227’’ and 
inserting ‘‘section 2209’’; and 
(II) by striking ‘‘, as so redesig-
nated by section 223(a)(3) of this divi-
sion’’; 
(E) in section 223(b) (6 U.S.C. 151 note)— 
(i) by striking ‘‘section 230(b)(1) of the 
Homeland Security Act of 2002, as added 
by subsection (a)’’ each place that term ap-
† HR 3359 EAS 
pears and inserting ‘‘section 2213(b)(1) of 
the Homeland Security Act of 2002’’; and 
(ii) in paragraph (1)(B), by striking 
‘‘section 230(b)(2) of the Homeland Secu-
rity Act of 2002, as added by subsection 
(a)’’ and inserting ‘‘section 2213(b)(2) of 
the Homeland Security Act of 2002’’; 
(F) in section 226 (6 U.S.C. 1524)— 
(i) in subsection (a)— 
(I) in paragraph (1)— 
(aa) by striking ‘‘section 
230’’ 
and 
inserting 
‘‘section 
2213’’; and 
(bb) by striking ‘‘, as added 
by section 223(a)(6) of this divi-
sion’’; 
(II) in paragraph (4)— 
(aa) by striking ‘‘section 
228(b)(1)’’ and inserting ‘‘section 
2210(b)(1)’’; and 
(bb) by striking ‘‘, as added 
by section 223(a)(4) of this divi-
sion’’; and 
(III) in paragraph (5)—
† HR 3359 EAS 
(aa) by striking ‘‘section 
230(b)’’ and inserting ‘‘section 
2213(b)’’; and 
(bb) by striking ‘‘, as added 
by section 223(a)(6) of this divi-
sion’’; and 
(ii) in subsection (c)(1)(A)(vi)— 
(I) by striking ‘‘section 230(c)(5)’’ 
and inserting ‘‘section 2213(c)(5)’’; 
and 
(II) by striking ‘‘, as added by 
section 223(a)(6) of this division’’; 
(G) in section 227 (6 U.S.C. 1525)— 
(i) in subsection (a)— 
(I) by striking ‘‘section 230’’ and 
inserting ‘‘section 2213’’; and 
(II) by striking ‘‘, as added by 
section 223(a)(6) of this division,’’; 
and 
(ii) in subsection (b)— 
(I) by striking ‘‘section 230(d)(2)’’ 
and inserting ‘‘section 2213(d)(2)’’; 
and
† HR 3359 EAS 
(II) by striking ‘‘, as added by 
section 223(a)(6) of this division,’’; 
and 
(H) in section 404 (6 U.S.C. 1532)— 
(i) by striking ‘‘Director for Emer-
gency Communications’’ each place that 
term appears and inserting ‘‘Assistant Di-
rector for Emergency Communications’’; 
and 
(ii) in subsection (a)— 
(I) by striking ‘‘section 227’’ and 
inserting ‘‘section 2209’’; and 
(II) by striking ‘‘, as redesignated 
by section 223(a)(3) of this division,’’. 
(2) SMALL BUSINESS ACT.—Section 21(a)(8)(B) 
of the Small Business Act (15 U.S.C. 648(a)(8)(B)) is 
amended by striking ‘‘section 227(a) of the Homeland 
Security Act of 2002 (6 U.S.C. 148(a))’’ and insert-
ing ‘‘section 2209(a) of the Homeland Security Act of 
2002’’. 
(3) TITLE 5.—Subchapter II of chapter 53 of 
title 5, United States Code, is amended— 
(A) in section 5314, by inserting after 
‘‘Under Secretaries, Department of Homeland 
Security.’’ the following:
† HR 3359 EAS 
‘‘Director, Cybersecurity and Infrastructure Se-
curity Agency.’’; and 
(B) in section 5315, by inserting after ‘‘As-
sistant Secretaries, Department of Homeland Se-
curity.’’ the following: 
‘‘Assistant Director for Cybersecurity, Cybersecu-
rity and Infrastructure Security Agency. 
‘‘Assistant Director for Infrastructure Security, 
Cybersecurity and Infrastructure Security Agency.’’. 
(i) TABLE OF CONTENTS AMENDMENTS.—The table of 
contents in section 1(b) of the Homeland Security Act of 
2002 (Public Law 107–296; 116 Stat. 2135) is amended— 
(1) by striking the item relating to title II and 
inserting the following: 
‘‘TITLE II—INFORMATION ANALYSIS’’; 
(2) by striking the item relating to subtitle A of 
title II and inserting the following: 
‘‘Subtitle A—Information and Analysis; Access to Information’’; 
(3) by striking the item relating to section 201 
and inserting the following: 
‘‘Sec. 201. Information and analysis.’’; 
(4) by striking the items relating to sections 
210E and 210F and inserting the following: 
‘‘Sec. 210E. Classified Information Advisory Officer.’’; 
(5) by striking the items relating to subtitle B of 
title II and sections 211 through 215;
† HR 3359 EAS 
(6) by striking the items relating to section 223 
through section 230; 
(7) by striking the item relating to subtitle C 
and inserting the following: 
‘‘Subtitle B—Information Security’’; 
(8) by striking the item relating to subtitle D 
and inserting the following: 
‘‘Subtitle C—Office of Science and Technology’’; 
(9) by striking the items relating to sections 317, 
319, 318, and 319 and inserting the following: 
‘‘Sec. 317. Promoting antiterrorism through international cooperation program. 
‘‘Sec. 318. Social media working group. 
‘‘Sec. 319. Transparency in research and development. 
‘‘Sec. 320. EMP and GMD mitigation research and development.’’; 
(10) by striking the item relating to section 1801 
and inserting the following: 
‘‘Sec. 1801. Emergency Communications Division.’’; and 
(11) by adding at the end the following: 
‘‘TITLE XXII—CYBERSECURITY AND INFRASTRUCTURE SECURITY 
AGENCY 
‘‘Subtitle A—Cybersecurity and Infrastructure Security 
‘‘Sec. 2201. Definitions. 
‘‘Sec. 2202. Cybersecurity and Infrastructure Security Agency. 
‘‘Sec. 2203. Cybersecurity Division. 
‘‘Sec. 2204. Infrastructure Security Division. 
‘‘Sec. 2205. Enhancement of Federal and non-Federal cybersecurity. 
‘‘Sec. 2206. Net guard. 
‘‘Sec. 2207. Cyber Security Enhancement Act of 2002. 
‘‘Sec. 2208. Cybersecurity recruitment and retention. 
‘‘Sec. 2209. National cybersecurity and communications integration center. 
‘‘Sec. 2210. Cybersecurity plans. 
‘‘Sec. 2211. Cybersecurity strategy. 
‘‘Sec. 2212. Clearances. 
‘‘Sec. 2213. Federal intrusion detection and prevention system. 
‘‘Sec. 2214. National Asset Database.
† HR 3359 EAS 
‘‘Subtitle B—Critical Infrastructure Information 
‘‘Sec. 2221. Short title. 
‘‘Sec. 2222. Definitions. 
‘‘Sec. 2223. Designation of critical infrastructure protection program. 
‘‘Sec. 2224. Protection of voluntarily shared critical infrastructure information. 
‘‘Sec. 2225. No private right of action.’’. 
SEC. 3. TRANSFER OF OTHER ENTITIES. 
(a) OFFICE OF BIOMETRIC IDENTITY MANAGEMENT.— 
The Office of Biometric Identity Management of the Depart-
ment of Homeland Security located in the National Protec-
tion and Programs Directorate of the Department of Home-
land Security on the day before the date of enactment of 
this Act is hereby transferred to the Management Direc-
torate of the Department. 
(b) FEDERAL PROTECTIVE SERVICE.— 
(1) IN GENERAL.—Not later than 90 days after 
the completion of the Government Accountability Of-
fice review of the organizational placement of the Fed-
eral Protective Service (authorized under section 1315 
of title 40, United States Code), the Secretary of 
Homeland Security shall determine the appropriate 
placement of the Service within the Department of 
Homeland Security and commence the transfer of the 
Service to such component, directorate, or other office 
of the Department that the Secretary so determines 
appropriate. 
(2) EXCEPTION.—If the Secretary of Homeland 
Security determines pursuant to paragraph (1) that
† HR 3359 EAS 
no component, directorate, or other office of the De-
partment of Homeland Security is an appropriate 
placement for the Federal Protective Service, the Sec-
retary shall— 
(A) provide to the Committee on Homeland 
Security and the Committee on Transportation 
and Infrastructure of the House of Representa-
tives and the Committee on Homeland Security 
and Governmental Affairs of the Senate and the 
Office of Management and Budget a detailed ex-
planation, in writing, of the reason for such de-
termination that includes— 
(i) information on how the Department 
considered the Government Accountability 
Office review described in such paragraph; 
(ii) a list of the components, direc-
torates, or other offices of the Department 
that were considered for such placement; 
and 
(iii) information on why each such 
component, directorate, or other office of the 
Department was determined to not be an 
appropriate placement for the Service; 
(B) not later than 120 days after the com-
pletion of the Government Accountability Office
† HR 3359 EAS 
tives a report on the leadership role of the Department in 
cloud-based cybersecurity deployments for civilian Federal 
departments and agencies, which shall include— 
(1) information on the plan of the Department 
for ensuring access to a security operations center as 
a service capability in accordance with the December 
19, 2017 Report to the President on Federal IT Mod-
ernization issued by the American Technology Coun-
cil; 
(2) information on what service capabilities 
under paragraph (1) the Department will prioritize, 
including— 
(A) criteria the Department will use to 
evaluate capabilities offered by the private sector; 
and 
(B) how Federal government- and private 
sector-provided capabilities will be integrated to 
enable visibility and consistency of such capa-
bilities across all cloud and on premise environ-
ments, as called for in the report described in 
paragraph (1); and 
(3) information on how the Department will 
adapt the current capabilities of, and future enhance-
ments to, the intrusion detection and prevention sys-
tem 
of 
the 
Department 
and 
the 
Continuous
† HR 3359 EAS 
Diagnostics and Mitigation Program of the Depart-
ment to secure civilian Federal government networks 
in a cloud environment. 
SEC. 5. RULE OF CONSTRUCTION. 
Nothing in this Act or an amendment made by this 
Act may be construed as— 
(1) conferring new authorities to the Secretary of 
Homeland Security, including programmatic, regu-
latory, or enforcement authorities, outside of the au-
thorities in existence on the day before the date of en-
actment of this Act; 
(2) reducing or limiting the programmatic, regu-
latory, or enforcement authority vested in any other 
Federal agency by statute; or 
(3) affecting in any manner the authority, exist-
ing on the day before the date of enactment of this 
Act, of any other Federal agency or component of the 
Department of Homeland Security. 
SEC. 6. PROHIBITION ON ADDITIONAL FUNDING. 
No additional funds are authorized to be appropriated 
to carry out this Act or the amendments made by this Act.
† HR 3359 EAS 
This Act and the amendments made by this Act shall be 
carried out using amounts otherwise authorized. 
Attest: 
Secretary.