prevents or mitigates a known or suspected cyberse-
curity threat or security vulnerability. 
(7) FEDERAL ENTITY.—The term ‘‘Federal en-
tity’’ means a department or agency of the United 
States or any component of such department or 
agency. 
(8) INFORMATION SYSTEM.—The term ‘‘infor-
mation system’’— 
(A) has the meaning given the term in sec-
tion 3502 of title 44, United States Code; and 
(B) includes industrial control systems, 
such as supervisory control and data acquisition 
systems, distributed control systems, and pro-
grammable logic controllers. 
(9) LOCAL
GOVERNMENT.—The term ‘‘local 
government’’ means any borough, city, county, par-
ish, town, township, village, or other political sub-
division of a State. 
(10) MALICIOUS
CYBER
COMMAND
AND
CON-
TROL.—The term ‘‘malicious cyber command and 
control’’ means a method for unauthorized remote 
identification of, access to, or use of, an information 
system or information that is stored on, processed 
by, or transiting an information system. 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00046
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
(11) MALICIOUS RECONNAISSANCE.—The term 
‘‘malicious reconnaissance’’ means a method for ac-
tively probing or passively monitoring an information 
system for the purpose of discerning security 
vulnerabilities of the information system, if such 
method is associated with a known or suspected cy-
bersecurity threat. 
(12) MONITOR.—The term ‘‘monitor’’ means to 
acquire, identify, scan, or otherwise possess informa-
tion that is stored on, processed by, or transiting an 
information system. 
(13) NON-FEDERAL ENTITY.— 
(A) IN
GENERAL.—Except as otherwise 
provided in this paragraph, the term ‘‘non-Fed-
eral entity’’ means any private entity, non-Fed-
eral government department or agency, or 
State, tribal, or local government (including a 
political subdivision, department, officer, em-
ployee, or agent thereof). 
(B) INCLUSIONS.—The term ‘‘non-Federal 
entity’’ includes a government department or 
agency (including an officer, employee, or agent 
thereof) of the District of Columbia, the Com-
monwealth of Puerto Rico, the Virgin Islands, 
Guam, American Samoa, the Northern Mariana 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00047
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
Islands, and any other territory or possession of 
the United States. 
(C) EXCLUSION.—The term ‘‘non-Federal 
entity’’ does not include a foreign power as de-
fined in section 101 of the Foreign Intelligence 
Surveillance Act of 1978 (50 U.S.C. 1801). 
(14) PRIVATE ENTITY.— 
(A) IN
GENERAL.—Except as otherwise 
provided in this paragraph, the term ‘‘private 
entity’’ means any person or private group, or-
ganization, proprietorship, partnership, trust, 
cooperative, corporation, or other commercial or 
nonprofit entity, including an officer, employee, 
or agent thereof. 
(B) INCLUSION.—The term ‘‘private enti-
ty’’ includes a component of a State, tribal, or 
local government performing electric utility 
services. 
(C) EXCLUSION.—The term ‘‘private enti-
ty’’ does not include a foreign power as defined 
in section 101 of the Foreign Intelligence Sur-
veillance Act of 1978 (50 U.S.C. 1801). 
(15) REAL TIME; REAL-TIME.—The terms ‘‘real 
time’’ and ‘‘real-time’’ mean a process by which an 
automated, machine-to-machine system processes 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00048
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
cyber threat indicators such that the time in which 
the occurrence of an event and the reporting or re-
cording of it are as simultaneous as technologically 
practicable. 
(16) SECURITY CONTROL.—The term ‘‘security 
control’’ means the management, operational, and 
technical controls used to protect against an unau-
thorized effort to adversely impact the security, con-
fidentiality, integrity, and availability of an informa-
tion system or its information. 
(17) SECURITY
VULNERABILITY.—The term 
‘‘security vulnerability’’ means any attribute of hard-
ware, software, process, or procedure that could en-
able or facilitate the defeat of a security control. 
(18) TRIBAL.—The term ‘‘tribal’’ has the 
meaning given the term ‘‘Indian tribe’’ in section 4 
of the Indian Self-Determination and Education As-
sistance Act (25 U.S.C. 450b). 
Æ 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00049
Fmt 6652
Sfmt 6301
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS