H. R. 3359—17 
‘‘Subtitle B—Information Security’’; 
(8) by striking the item relating to subtitle D and inserting 
the following: 
‘‘Subtitle C—Office of Science and Technology’’; 
(9) by striking the items relating to sections 317, 319, 
318, and 319 and inserting the following: 
‘‘Sec. 317. Promoting antiterrorism through international cooperation program. 
‘‘Sec. 318. Social media working group. 
‘‘Sec. 319. Transparency in research and development. 
‘‘Sec. 320. EMP and GMD mitigation research and development.’’; 
(10) by striking the item relating to section 1801 and 
inserting the following: 
‘‘Sec. 1801. Emergency Communications Division.’’; and 
(11) by adding at the end the following: 
‘‘TITLE XXII—CYBERSECURITY AND INFRASTRUCTURE SECURITY AGENCY 
‘‘Subtitle A—Cybersecurity and Infrastructure Security 
‘‘Sec. 2201. Definitions. 
‘‘Sec. 2202. Cybersecurity and Infrastructure Security Agency. 
‘‘Sec. 2203. Cybersecurity Division. 
‘‘Sec. 2204. Infrastructure Security Division. 
‘‘Sec. 2205. Enhancement of Federal and non-Federal cybersecurity. 
‘‘Sec. 2206. Net guard. 
‘‘Sec. 2207. Cyber Security Enhancement Act of 2002. 
‘‘Sec. 2208. Cybersecurity recruitment and retention. 
‘‘Sec. 2209. National cybersecurity and communications integration center. 
‘‘Sec. 2210. Cybersecurity plans. 
‘‘Sec. 2211. Cybersecurity strategy. 
‘‘Sec. 2212. Clearances. 
‘‘Sec. 2213. Federal intrusion detection and prevention system. 
‘‘Sec. 2214. National Asset Database. 
‘‘Subtitle B—Critical Infrastructure Information 
‘‘Sec. 2221. Short title. 
‘‘Sec. 2222. Definitions. 
‘‘Sec. 2223. Designation of critical infrastructure protection program. 
‘‘Sec. 2224. Protection of voluntarily shared critical infrastructure information. 
‘‘Sec. 2225. No private right of action.’’. 
SEC. 3. TRANSFER OF OTHER ENTITIES. 
(a) OFFICE OF BIOMETRIC IDENTITY MANAGEMENT.—The Office 
of Biometric Identity Management of the Department of Homeland 
Security located in the National Protection and Programs Direc-
torate of the Department of Homeland Security on the day before 
the date of enactment of this Act is hereby transferred to the 
Management Directorate of the Department. 
(b) FEDERAL PROTECTIVE SERVICE.— 
(1) IN GENERAL.—Not later than 90 days after the comple-
tion of the Government Accountability Office review of the 
organizational placement of the Federal Protective Service 
(authorized under section 1315 of title 40, United States Code), 
the Secretary of Homeland Security shall determine the appro-
priate placement of the Service within the Department of Home-
land Security and commence the transfer of the Service to 
such component, directorate, or other office of the Department 
that the Secretary so determines appropriate. 
(2) EXCEPTION.—If the Secretary of Homeland Security 
determines pursuant to paragraph (1) that no component, direc-
torate, or other office of the Department of Homeland Security
H. R. 3359—18 
is an appropriate placement for the Federal Protective Service, 
the Secretary shall— 
(A) provide to the Committee on Homeland Security 
and the Committee on Transportation and Infrastructure 
of the House of Representatives and the Committee on 
Homeland Security and Governmental Affairs of the Senate 
and the Office of Management and Budget a detailed expla-
nation, in writing, of the reason for such determination 
that includes— 
(i) information on how the Department considered 
the Government Accountability Office review described 
in such paragraph; 
(ii) a list of the components, directorates, or other 
offices of the Department that were considered for 
such placement; and 
(iii) information on why each such component, 
directorate, or other office of the Department was 
determined to not be an appropriate placement for 
the Service; 
(B) not later than 120 days after the completion of 
the Government Accountability Office review described in 
such paragraph, develop and submit to the committees 
specified in subparagraph (A) and the Office of Manage-
ment and Budget a plan to coordinate with other appro-
priate Federal agencies, including the General Services 
Administration, to determine a more appropriate placement 
for the Service; and 
(C) not later than 180 days after the completion of 
such Government Accountability Office review, submit to 
such committees and the Office of Management and Budget 
a recommendation regarding the appropriate placement 
of the Service within the executive branch of the Federal 
Government. 
SEC. 4. DHS REPORT ON CLOUD-BASED CYBERSECURITY. 
(a) DEFINITION.—In this section, the term ‘‘Department’’ means 
the Department of Homeland Security. 
(b) REPORT.—Not later than 120 days after the date of enact-
ment of this Act, the Secretary of Homeland Security, in coordina-
tion with the Director of the Office of Management and Budget 
and the Administrator of General Services, shall submit to the 
Committee on Homeland Security and Governmental Affairs of 
the Senate and the Committee on Oversight and Government 
Reform and the Committee on Homeland Security of the House 
of Representatives a report on the leadership role of the Department 
in cloud-based cybersecurity deployments for civilian Federal 
departments and agencies, which shall include— 
(1) information on the plan of the Department for ensuring 
access to a security operations center as a service capability 
in accordance with the December 19, 2017 Report to the Presi-
dent on Federal IT Modernization issued by the American 
Technology Council; 
(2) information on what service capabilities under para-
graph (1) the Department will prioritize, including— 
(A) criteria the Department will use to evaluate 
capabilities offered by the private sector; and
H. R. 3359—19 
(B) how Federal government- and private sector-pro-
vided capabilities will be integrated to enable visibility 
and consistency of such capabilities across all cloud and 
on premise environments, as called for in the report 
described in paragraph (1); and 
(3) information on how the Department will adapt the 
current capabilities of, and future enhancements to, the intru-
sion detection and prevention system of the Department and 
the Continuous Diagnostics and Mitigation Program of the 
Department to secure civilian Federal government networks 
in a cloud environment. 
SEC. 5. RULE OF CONSTRUCTION. 
Nothing in this Act or an amendment made by this Act may 
be construed as— 
(1) conferring new authorities to the Secretary of Homeland 
Security, including programmatic, regulatory, or enforcement 
authorities, outside of the authorities in existence on the day 
before the date of enactment of this Act; 
(2) reducing or limiting the programmatic, regulatory, or 
enforcement authority vested in any other Federal agency by 
statute; or 
(3) affecting in any manner the authority, existing on the 
day before the date of enactment of this Act, of any other 
Federal agency or component of the Department of Homeland 
Security. 
SEC. 6. PROHIBITION ON ADDITIONAL FUNDING. 
No additional funds are authorized to be appropriated to carry 
out this Act or the amendments made by this Act. This Act and 
the amendments made by this Act shall be carried out using 
amounts otherwise authorized. 
Speaker of the House of Representatives. 
Vice President of the United States and
President of the Senate.