HR 3359 RFS
reach and engagement with critical infrastructure 
Sector-Specific Agencies, as appropriate; and 
‘‘(11) carry out such other duties and powers 
prescribed by law or delegated by the Secretary. 
‘‘(d) DEPUTY DIRECTOR.—There shall be in the 
Agency a Deputy Director of Cybersecurity and Infra-
structure Security who shall— 
‘‘(1) assist the Director in the management of 
the Agency; and 
‘‘(2) report to the Director. 
‘‘(e) CYBERSECURITY AND INFRASTRUCTURE SECU-
RITY AUTHORITIES OF THE SECRETARY.— 
‘‘(1) IN GENERAL.—The responsibilities of the 
Secretary relating to cybersecurity and infrastruc-
ture security shall include the following: 
‘‘(A) To access, receive, and analyze law 
enforcement information, intelligence informa-
tion, and other information from Federal Gov-
ernment agencies, State, local, tribal, and terri-
torial government agencies (including law en-
forcement agencies), and private sector entities, 
and to integrate such information, in support of 
the mission responsibilities of the Department, 
in order to— 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
‘‘(i) identify and assess the nature 
and scope of terrorist threats to the home-
land; 
‘‘(ii) detect and identify threats of ter-
rorism against the United States; and 
‘‘(iii) understand such threats in light 
of actual and potential vulnerabilities of 
the homeland. 
‘‘(B) To carry out comprehensive assess-
ments of the vulnerabilities of the key resources 
and critical infrastructure of the United States, 
including the performance of risk assessments 
to determine the risks posed by particular types 
of terrorist attacks within the United States 
(including an assessment of the probability of 
success of such attacks and the feasibility and 
potential efficacy of various countermeasures to 
such attacks). At the discretion of the Sec-
retary, such assessments may be carried out in 
coordination with Sector-Specific Agencies. 
‘‘(C) To integrate relevant information, 
analysis, and vulnerability assessments (regard-
less of whether such information, analysis, or 
assessments are provided or produced by the 
Department) in order to make recommenda-
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
tions, including prioritization, for protective and 
support measures by the Department, other 
Federal Government agencies, State, local, trib-
al, and territorial government agencies and au-
thorities, the private sector, and other entities 
regarding terrorist and other threats to home-
land security. 
‘‘(D) To ensure, pursuant to section 202, 
the timely and efficient access by the Depart-
ment to all information necessary to discharge 
the responsibilities under this title, including 
obtaining such information from other Federal 
Government agencies. 
‘‘(E) To develop, in coordination with the 
Sector-Specific Agencies with available exper-
tise, a comprehensive national plan for securing 
the key resources and critical infrastructure of 
the United States, including power production, 
generation, and distribution systems, informa-
tion technology and telecommunications systems 
(including satellites), electronic financial and 
property record storage and transmission sys-
tems, emergency communications systems, and 
the physical and technological assets that sup-
port such systems. 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
‘‘(F) To recommend measures necessary to 
protect the key resources and critical infra-
structure of the United States in coordination 
with other Federal Government agencies, in-
cluding Sector-Specific Agencies, and in co-
operation with State, local, tribal, and terri-
torial government agencies and authorities, the 
private sector, and other entities. 
‘‘(G) To review, analyze, and make rec-
ommendations for improvements to the policies 
and procedures governing the sharing of infor-
mation relating to homeland security within the 
Federal Government and between Federal Gov-
ernment agencies and State, local, tribal, and 
territorial government agencies and authorities. 
‘‘(H) To disseminate, as appropriate, infor-
mation analyzed by the Department within the 
Department, to other Federal Government 
agencies with responsibilities relating to home-
land security, and to State, local, tribal, and 
territorial government agencies and private sec-
tor entities with such responsibilities in order to 
assist in the deterrence, prevention, preemption 
of, or response to, terrorist attacks against the 
United States. 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00011
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
‘‘(I) To consult with State, local, tribal, 
and territorial government agencies and private 
sector entities to ensure appropriate exchanges 
of information, including law enforcement-re-
lated information, relating to threats of ter-
rorism against the United States. 
‘‘(J) To ensure that any material received 
pursuant to this Act is protected from unau-
thorized disclosure and handled and used only 
for the performance of official duties. 
‘‘(K) To request additional information 
from other Federal Government agencies, State, 
local, tribal, and territorial government agen-
cies, and the private sector relating to threats 
of terrorism in the United States, or relating to 
other areas of responsibility assigned by the 
Secretary, including the entry into cooperative 
agreements through the Secretary to obtain 
such information. 
‘‘(L) To establish and utilize, in conjunc-
tion with the chief information officer of the 
Department, a secure communications and in-
formation technology infrastructure, including 
data-mining and other advanced analytical 
tools, in order to access, receive, and analyze 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00012
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
data and information in furtherance of the re-
sponsibilities under this section, and to dissemi-
nate information acquired and analyzed by the 
Department, as appropriate. 
‘‘(M) To coordinate training and other 
support to the elements and personnel of the 
Department, other Federal Government agen-
cies, and State, local, tribal, and territorial gov-
ernment agencies that provide information to 
the Department, or are consumers of informa-
tion provided by the Department, in order to 
facilitate the identification and sharing of infor-
mation revealed in their ordinary duties and the 
optimal utilization of information received from 
the Department. 
‘‘(N) To coordinate with Federal, State, 
local, tribal, and territorial law enforcement 
agencies, and the private sector, as appropriate. 
‘‘(O) To exercise the authorities and over-
sight of the functions, personnel, assets, and li-
abilities of those components transferred to the 
Department pursuant to section 201(g). 
‘‘(P) To carry out the functions of the na-
tional cybersecurity and communications inte-
gration center under section 2209. 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00013
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
‘‘(Q) To carry out requirements of the 
Chemical Facilities Anti-Terrorism Standards 
Program established under title XXI and the 
secure handling of ammonium nitrate estab-
lished under subtitle J of title VIII. 
‘‘(2) REALLOCATION.—The Secretary may re-
allocate within the Agency the functions specified in 
sections 2203(b) and 2204(b), consistent with the 
responsibilities provided in paragraph (1) of this 
subsection, upon certifying to and briefing the ap-
propriate congressional committees, and making 
available to the public, at least 60 days prior to any 
such reallocation that such reallocation is necessary 
for carrying out the activities of the Agency. 
‘‘(3) STAFF.— 
‘‘(A) IN
GENERAL.—The Secretary shall 
provide the Agency with a staff of analysts hav-
ing appropriate expertise and experience to as-
sist the Agency in discharging its responsibil-
ities under this section. 
‘‘(B) PRIVATE
SECTOR
ANALYSTS.—Ana-
lysts under this subsection may include analysts 
from the private sector. 
‘‘(C) SECURITY
CLEARANCES.—Analysts 
under this subsection shall possess security 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00014
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
clearances appropriate for their work under this 
section. 
‘‘(4) DETAIL OF PERSONNEL.— 
‘‘(A) IN GENERAL.—In order to assist the 
Agency in discharging its responsibilities under 
this section, personnel of the Federal agencies 
referred to in subparagraph (B) may be de-
tailed to the Agency for the performance of 
analytic functions and related duties. 
‘‘(B) AGENCIES SPECIFIED.—The Federal 
agencies referred to in subparagraph (A) are 
the following: 
‘‘(i) The Department of State. 
‘‘(ii) The Central Intelligence Agency. 
‘‘(iii) The Federal Bureau of Inves-
tigation. 
‘‘(iv) The National Security Agency. 
‘‘(v) The National Geospatial-Intel-
ligence Agency. 
‘‘(vi) The Defense Intelligence Agen-
cy. 
‘‘(vii) Sector-Specific Agencies. 
‘‘(viii) Any other agency of the Fed-
eral Government that the President con-
siders appropriate. 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00015
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
‘‘(C) INTERAGENCY
AGREEMENTS.—The 
Secretary and the head of an agency specified 
in subparagraph (B) may enter into agreements 
for the purpose of detailing personnel under 
this paragraph. 
‘‘(D) BASIS.—The detail of personnel 
under this paragraph may be on a reimbursable 
or non-reimbursable basis. 
‘‘(f) COMPOSITION.—The Agency shall be composed 
of the following divisions: 
‘‘(1) The Cybersecurity Division, headed by an 
Assistant Director. 
‘‘(2) The Infrastructure Security Division, 
headed by an Assistant Director. 
‘‘(3) The Emergency Communications Division 
under title XVIII, headed by an Assistant Director. 
‘‘(g) CO-LOCATION.—To the maximum extent prac-
ticable, the Director shall examine the establishment of 
central locations in geographical regions with a significant 
Agency presence. When establishing such locations, the 
Director shall coordinate with component heads and the 
Under Secretary for Management to co-locate or partner 
on any new real property leases, renewing any occupancy 
agreements for existing leases, or agreeing to extend or 
newly occupy any Federal space or new construction. 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00016
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
‘‘(h) PRIVACY.— 
‘‘(1) IN GENERAL.—There shall be a Privacy 
Officer of the Agency with primary responsibility for 
privacy policy and compliance for the Agency. 
‘‘(2) RESPONSIBILITIES.—The responsibilities 
of the Privacy Officer of the Agency shall include— 
‘‘(A) assuring that the use of technologies 
by the Agency sustain, and do not erode, pri-
vacy protections relating to the use, collection, 
and disclosure of personal information; 
‘‘(B) assuring that personal information 
contained in Privacy Act systems of records of 
the Agency is handled in full compliance with 
fair information practices as specified in the 
Privacy Act of 1974; 
‘‘(C) evaluating legislative and regulatory 
proposals involving collection, use, and disclo-
sure of personal information by the Agency; 
and 
‘‘(D) conducting a privacy impact assess-
ment of proposed rules of the Agency on the 
privacy of personal information, including the 
type of personal information collected and the 
number of people affected. 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00017
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
‘‘(i) SAVINGS.—Nothing in this title may be con-
strued as affecting in any manner the authority, existing 
on the day before the date of the enactment of this title, 
of any other component of the Department or any other 
Federal department or agency. 
‘‘SEC. 2203. CYBERSECURITY DIVISION. 
‘‘(a) ESTABLISHMENT.— 
‘‘(1) IN GENERAL.—There is established in the 
Agency a Cybersecurity Division. 
‘‘(2) ASSISTANT DIRECTOR.—The Cybersecurity 
Division shall be headed by an Assistant Director for 
Cybersecurity (in this subtitle referred to as the ‘As-
sistant Director’), who shall— 
‘‘(A) be at the level of Assistant Secretary 
within the Department; 
‘‘(B) be appointed by the President with-
out the advice and consent of the Senate; and 
‘‘(C) report to the Director. 
‘‘(3) REFERENCE.—Any reference to the Assist-
ant Secretary for Cybersecurity and Communica-
tions in any law, regulation, map, document, record, 
or other paper of the United States shall be deemed 
to be a reference to the Assistant Director for Cy-
bersecurity. 
‘‘(b) FUNCTIONS.—The Assistant Director shall— 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00018
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
‘‘(1) direct the cybersecurity efforts of the 
Agency; 
‘‘(2) carry out activities, at the direction of the 
Director, related to the security of Federal informa-
tion and Federal information systems consistent 
with law, including subchapter II of chapter 35 of 
title 44, United States Code, and the Cybersecurity 
Act of 2015 (contained in division N of the Consoli-
dated Appropriations Act, 2016 (Public Law 114– 
113)); 
‘‘(3) fully participate in the mechanisms re-
quired under subsection (c)(7) of section 2202; and 
‘‘(4) carry out such other duties and powers as 
prescribed by the Director. 
‘‘SEC. 2204. INFRASTRUCTURE SECURITY DIVISION. 
‘‘(a) ESTABLISHMENT.— 
‘‘(1) IN GENERAL.—There is established in the 
Agency an Infrastructure Security Division. 
‘‘(2) ASSISTANT
DIRECTOR.—The Infrastruc-
ture Security Division shall be headed by an Assist-
ant Director of Infrastructure Security (in this sec-
tion referred to as the ‘Assistant Director’), who 
shall— 
‘‘(A) be at the level of Assistant Secretary 
within the Department; 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00019
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
‘‘(B) be appointed by the President with-
out the advice and consent of the Senate; and 
‘‘(C) report to the Director. 
‘‘(3) REFERENCE.—Any reference to the Assist-
ant Secretary for Infrastructure Protection in any 
law, regulation, map, document, record, or other 
paper of the United States shall be deemed to be a 
reference to the Assistant Director for Infrastruc-
ture Security. 
‘‘(b) FUNCTIONS.—The Assistant Director shall— 
‘‘(1) direct the critical infrastructure security 
efforts of the Agency; 
‘‘(2) carry, at the direction of the Director, the 
Chemical Facilities Anti-Terrorism Standards Pro-
gram established under title XXI and the secure 
handling of ammonium nitrate established under 
subtitle J of title VIII or successor program; 
‘‘(3) fully participate in the mechanisms re-
quired under subsection (c)(7) of section 2202; and 
‘‘(4) carry out such other duties and powers as 
prescribed by the Director.’’. 
(b) TREATMENT OF CERTAIN POSITIONS.— 
(1) UNDER SECRETARY.—The individual serv-
ing as the Under Secretary appointed pursuant to 
section 103(a)(1)(H) of the Homeland Security Act 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00020
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
of 2002 (6 U.S.C. 113(a)(1)) of the Department of 
Homeland Security on the day before the date of the 
enactment of this Act may continue to serve as the 
Director of the Cybersecurity and Infrastructure Se-
curity Agency of the Department on and after such 
date. 
(2) DIRECTOR
FOR
EMERGENCY
COMMUNICA-
TIONS.—The individual serving as the Director for 
Emergency Communications of the Department of 
Homeland Security on the day before the date of the 
enactment of this Act may continue to serve as the 
Assistant Director for Emergency Communications 
of the Department on and after such date. 
(3) ASSISTANT
SECRETARY
FOR
CYBERSECU-
RITY AND COMMUNICATIONS.—The individual serv-
ing as the Assistant Secretary for Cybersecurity and 
Communications on the day before the date of the 
enactment of this Act may continue to serve as the 
Assistant Director for Cybersecurity on and after 
such date. 
(4) ASSISTANT SECRETARY FOR INFRASTRUC-
TURE SECURITY.—The individual serving as the As-
sistant Secretary for Infrastructure Protection on 
the day before the date of the enactment of this Act 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00021
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
may continue to serve as the Assistant Director for 
Infrastructure Security on and after such date. 
(c) REFERENCE.—Any reference to— 
(1) the Office of Emergency Communications in 
any law, regulation, map, document, record, or other 
paper of the United States shall be deemed to be a 
reference to the Emergency Communications Divi-
sion; and 
(2) the Director for Emergency Communica-
tions in any law, regulation, map, document, record, 
or other paper of the United States shall be deemed 
to be a reference to the Assistant Director for Emer-
gency Communications. 
(d) OVERSIGHT.—The Director of the Cybersecurity 
and Infrastructure Security Agency of the Department of 
Homeland Security shall provide to Congress, in accord-
ance with the deadlines specified in paragraphs (1) and 
(2), information on the following: 
(1) Not later than 60 days after the date of the 
enactment of this Act, a briefing on the activities of 
the Agency relating to the development and use of 
the mechanisms required pursuant to section 
2202(c)(6) of the Homeland Security Act of 2002 
(as added by subsection (a) of this section). 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00022
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
(2) Not later than 1 year after the date of the 
enactment of this Act, a briefing on the activities of 
the Agency relating to its use and improvement of 
the mechanisms required pursuant to section 
2202(c)(6) of the Homeland Security Act of 2002 
and how such activities have impacted coordination, 
situational awareness, and communications with Sec-
tor-Specific Agencies. 
(3) Not later than 90 days after the date of the 
enactment of this Act, information on the Agency’s 
mechanisms for regular and ongoing consultation 
and collaboration, as required pursuant to section 
2202(c)(7) of the Homeland Security Act of 2002 
(as added by subsection (a) of this section). 
(4) Not later than 1 year after the date of the 
enactment of this Act, the activities of the Agency’s 
consultation and collaboration mechanisms as re-
quired pursuant to section 2202(c)(7) of the Home-
land Security Act of 2002, and how such mecha-
nisms have impacted operational coordination, situa-
tional awareness, and integration across the Agency. 
(e) CYBER WORKFORCE.—Not later than 90 days 
after the date of the enactment of this subtitle, the Direc-
tor of the Cybersecurity and Infrastructure Security Agen-
cy of the Department of Homeland Security shall submit 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00023
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS
HR 3359 RFS
to Congress a report detailing how the Agency is meeting 
legislative requirements under the Cybersecurity Work-
force Assessment Act (Public Law 113–246) and the 
Homeland Security Cybersecurity Workforce Assessment 
Act (enacted as section 4 of the Border Patrol Agent Pay 
Reform Act of 2014; Public Law 113–277) to address 
cyber workforce needs. 
(f) FACILITY.—Not later than 180 days after the 
date of the enactment of this Act, the Director of the Cy-
bersecurity and Infrastructure Security Agency of the De-
partment of Homeland Security shall report to Congress 
on the most efficient and effective methods of consoli-
dating Agency facilities, personnel, and programs to most 
effectively carry out the Agency’s mission. 
(g) CONFORMING AMENDMENTS TO THE HOMELAND 
SECURITY ACT OF 2002.—The Homeland Security Act of 
2002 is amended— 
(1) in title I, by amending subparagraph (H) of 
section 103(a)(1) (6 U.S.C. 113(a)(1)) to read as 
follows: 
‘‘(H) A Director of the Cybersecurity and 
Infrastructure Security Agency.’’; 
(2) in title II (6 U.S.C. 121 et seq.)— 
(A) in the title heading, by striking ‘‘AND 
INFRASTRUCTURE PROTECTION’’; 
VerDate Sep 11 2014 
21:55 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00024
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RFS
H3359
daltland on DSKBBV9HB2PROD with BILLS