SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘DHS Roles and Re-
sponsibilities in Cyber Space Act’’. 
SEC. 2. FINDINGS. 
Congress finds the following: 
(1) The Department of Homeland Security, 
through the Cybersecurity and Infrastructure Secu-
rity Agency, is the lead Federal coordinator for se-
curing critical infrastructure across all 16 sectors, in 
coordination with designated Sector Risk Manage-
ment Agencies. 
(2) Cyber incidents require technical resources 
and are only sometimes sector specific. 
(3) The Cybersecurity and Infrastructure Secu-
rity Agency is the central agency that can quickly 
analyze and coordinate mitigations when a malicious 
cyber campaign spans multiple sectors. 
(4) Section 2209 of the Homeland Security Act 
of 2002 authorizes the Cybersecurity and Infrastruc-
ture Security Agency as the Federal civilian inter-
face for multi-directional and cross-sector sharing of 
information related to cyber threat indicators with 
and between the government and the private sector. 
(5) Section 2209 of the Homeland Security Act 
of 2002 authorizes the Cybersecurity and Infrastruc-
ture Security Agency to facilitate cross-sector coordi-
nation to address cybersecurity risks and incidents, 
including cybersecurity risks and incidents that may 
be related or could have consequential impacts 
across multiple sectors. 
(6) Presidential Policy Directive-41 directs the 
Department of Homeland Security, via the national 
cybersecurity and communications integration cen-
ter, to be the lead Federal agency for asset response 
during a significant cyber incident. 
(7) The functions of the national cybersecurity 
and communications integration center are carried 
about by the Cybersecurity and Infrastructure Secu-
rity Agency’s Cybersecurity Division. 
(8) Presidential Policy Directive-21 directs the 
Department of Homeland Security to lead the co-
ordination 
of 
critical 
infrastructure 
protection 
among the Sector Risk Management Agencies. 
(9) Section 9002 of the William M. (Mac) 
Thornberry National Defense Authorization Act for 
Fiscal Year 2021 codified the duties of Sector Risk 
Management Agencies for critical infrastructure sec-
tors, laying out the roles and responsibilities they 
have in coordinating with the Cybersecurity and In-
frastructure Security Agency to secure the nation’s 
critical infrastructure.
(10) Enhancing the security and resilience of 
our critical infrastructure is a priority for Congress 
and for the Nation. 
(11) The Department of Homeland Security 
maintains and continues to build partnerships across 
all infrastructure sectors to enhance control systems 
cybersecurity. 
(12) Section 1731 of the William M. (Mac) 
Thornberry National Defense Authorization Act for 
Fiscal Year 2021 directed the Secretary of Home-
land Security to submit a report on the potential for 
better coordination of Federal cybersecurity efforts 
at an integrated cybersecurity center within the Cy-
bersecurity and Infrastructure Security Agency. 
SEC. 3. REPORT ON CYBERSECURITY ROLES AND RESPON-
SIBILITIES OF THE DEPARTMENT OF HOME-
LAND SECURITY. 
(a) IN GENERAL.—Not later than one year after the 
date of the enactment of this Act, the Secretary of Home-
land Security, in coordination with the Director of the Cy-
bersecurity and Infrastructure Security Agency of the De-
partment of Homeland Security, shall submit to the Com-
mittee on Homeland Security of the House of Representa-
tives and the Committee on Homeland Security and Gov-
ernmental Affairs of the Senate a report on the roles and
responsibilities of the Department and its components re-
lating to cyber incident response. 
(b) CONTENTS.—The report required under sub-
section (a) shall include the following: 
(1) A review of how the cyber incident response 
plans under section 2210(c) of the Homeland Secu-
rity Act of 2002 (6 U.S.C. 660(c)) are utilized in 
the Federal Government’s response to a cyber inci-
dent. 
(2) An explanation of the roles and responsibil-
ities of the Department of Homeland Security and 
its components with responsibility for, or in support 
of, the Federal Government’s response to a cyber in-
cident, including primary responsibility for working 
with impacted private sector entities. 
(3) An explanation of which and how authori-
ties of the Department and its components are uti-
lized in the Federal Government’s response to a 
cyber incident.
(4) Recommendations to provide further clarity 
for roles and responsibilities of the Department and 
its components relating to cyber incident response. 
Passed the House of Representatives May 16, 2022. 
Attest: 
Clerk.
117TH CONGRESS 
2D SESSION 
H. R. 5658 
AN ACT 
To require the Secretary of Homeland Security to 
submit a report on the cybersecurity roles and 
responsibilities of the Federal Government, and 
for other purposes.