sector specific agencies and other Federal depart-
ments and agencies; 
‘‘(6) to the extent required by law, exercise du-
ties in coordination with sector-specific agencies; 
‘‘(7) maintain and utilize mechanisms for the 
regular and ongoing consultation and collaboration 
among the Agency’s Divisions to further operational 
coordination, integrated situational awareness, and 
improved integration across the Agency in accord-
ance with this Act; 
‘‘(8) develop, coordinate, and implement— 
‘‘(A) comprehensive strategic plans for the 
activities of the Agency; and 
‘‘(B) risk assessments; 
‘‘(9) carry out emergency communications re-
sponsibilities, in accordance with title XVIII; 
‘‘(10) carry out cybersecurity, infrastructure se-
curity, and emergency communications stakeholder 
outreach and engagement; and 
‘‘(11) carry out such other duties and powers 
prescribed by law or delegated by the Secretary. 
‘‘(d) DEPUTY DIRECTOR.—There shall be in the 
Agency a Deputy Director of Cybersecurity and Infra-
structure Security who shall— 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
‘‘(1) assist the Director in the management of 
the Agency; and 
‘‘(2) report to the Director. 
‘‘(e) CYBERSECURITY AND INFRASTRUCTURE SECU-
RITY AUTHORITIES OF THE SECRETARY.— 
‘‘(1) IN GENERAL.—The responsibilities of the 
Secretary relating to cybersecurity and infrastruc-
ture security shall include the following: 
‘‘(A) To access, receive, and analyze law 
enforcement information, intelligence informa-
tion, and other information from Federal Gov-
ernment agencies, State, local, tribal, and terri-
torial government agencies (including law en-
forcement agencies), and private sector entities, 
and to integrate such information, in support of 
the mission responsibilities of the Department, 
in order to— 
‘‘(i) identify and assess the nature 
and scope of terrorist threats to the home-
land; 
‘‘(ii) detect and identify threats of ter-
rorism against the United States; and 
‘‘(iii) understand such threats in light 
of actual and potential vulnerabilities of 
the homeland. 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
‘‘(B) To carry out comprehensive assess-
ments of the vulnerabilities of the key resources 
and critical infrastructure of the United States, 
including the performance of risk assessments 
to determine the risks posed by particular types 
of terrorist attacks within the United States 
(including an assessment of the probability of 
success of such attacks and the feasibility and 
potential efficacy of various countermeasures to 
such attacks). 
‘‘(C) To integrate relevant information, 
analysis, and vulnerability assessments (regard-
less of whether such information, analysis, or 
assessments are provided or produced by the 
Department) in order to identify priorities for 
protective and support measures by the Depart-
ment, other Federal Government agencies, 
State, local, tribal, and territorial government 
agencies and authorities, the private sector, and 
other entities regarding terrorist and other 
threats to homeland security. 
‘‘(D) To ensure, pursuant to section 202, 
the timely and efficient access by the Depart-
ment to all information necessary to discharge 
the responsibilities under this title, including 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
obtaining such information from other Federal 
Government agencies. 
‘‘(E) To develop a comprehensive national 
plan for securing the key resources and critical 
infrastructure of the United States, including 
power production, generation, and distribution 
systems, information technology and tele-
communications systems (including satellites), 
electronic financial and property record storage 
and transmission systems, emergency prepared-
ness communications systems, and the physical 
and technological assets that support such sys-
tems. 
‘‘(F) To recommend measures necessary to 
protect the key resources and critical infra-
structure of the United States in coordination 
with other Federal Government agencies and in 
cooperation with State, local, tribal, and terri-
torial government agencies and authorities, the 
private sector, and other entities. 
‘‘(G) To review, analyze, and make rec-
ommendations for improvements to the policies 
and procedures governing the sharing of law en-
forcement information, and other information 
relating to homeland security within the Fed-
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00011
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
eral Government and between Federal Govern-
ment agencies and State, local, tribal, and terri-
torial government agencies and authorities. 
‘‘(H) To disseminate, as appropriate, infor-
mation analyzed by the Department within the 
Department, to other Federal Government 
agencies with responsibilities relating to home-
land security, and to State, local, tribal, and 
territorial government agencies and private sec-
tor entities with such responsibilities in order to 
assist in the deterrence, prevention, preemption 
of, or response to, terrorist attacks against the 
United States. 
‘‘(I) To consult with State, local, tribal, 
and territorial government agencies and private 
sector entities to ensure appropriate exchanges 
of information, including law enforcement-re-
lated information, relating to threats of ter-
rorism against the United States. 
‘‘(J) To ensure that any material received 
pursuant to this Act is protected from unau-
thorized disclosure and handled and used only 
for the performance of official duties. 
‘‘(K) To request additional information 
from other Federal Government agencies, State, 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00012
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
local, tribal, and territorial government agen-
cies, and the private sector relating to threats 
of terrorism in the United States, or relating to 
other areas of responsibility assigned by the 
Secretary, including the entry into cooperative 
agreements through the Secretary to obtain 
such information. 
‘‘(L) To establish and utilize, in conjunc-
tion with the chief information officer of the 
Department, a secure communications and in-
formation technology infrastructure, including 
data-mining and other advanced analytical 
tools, in order to access, receive, and analyze 
data and information in furtherance of the re-
sponsibilities under this section, and to dissemi-
nate information acquired and analyzed by the 
Department, as appropriate. 
‘‘(M) To ensure, in conjunction with the 
chief information officer of the Department, 
that any information databases and analytical 
tools developed or utilized by the Department— 
‘‘(i) are compatible with one another 
and with relevant information databases of 
other Federal Government agencies; and 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00013
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
‘‘(R) To carry out requirements of the 
Chemical Facilities Anti-Terrorism Standards 
Program established under title XXI and the 
secure handling of ammonium nitrate estab-
lished under subtitle J of title VIII. 
‘‘(2) MODIFICATION.—The Secretary may mod-
ify the functions specified in sections 2203(b) and 
2204(b) upon certifying to the Committee on Home-
land Security of the House of Representatives and 
the Committee on Homeland Security and Govern-
mental Affairs of the Senate 60 days prior to any 
such modification that such modification is nec-
essary for carrying out the activities of the Agency. 
‘‘(3) STAFF.— 
‘‘(A) IN
GENERAL.—The Secretary shall 
provide the Agency with a staff of analysts hav-
ing appropriate expertise and experience to as-
sist the Agency in discharging its responsibil-
ities under this section. 
‘‘(B) PRIVATE
SECTOR
ANALYSTS.—Ana-
lysts under this subsection may include analysts 
from the private sector. 
‘‘(C) SECURITY
CLEARANCES.—Analysts 
under this subsection shall possess security 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00015
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
clearances appropriate for their work under this 
section. 
‘‘(4) DETAIL OF PERSONNEL.— 
‘‘(A) IN GENERAL.—In order to assist the 
Agency in discharging its responsibilities under 
this section, personnel of the Federal agencies 
referred to in subparagraph (B) may be de-
tailed to the Agency for the performance of 
analytic functions and related duties. 
‘‘(B) AGENCIES SPECIFIED.—The Federal 
agencies referred to in subparagraph (A) are 
the following: 
‘‘(i) The Department of State. 
‘‘(ii) The Central Intelligence Agency. 
‘‘(iii) The Federal Bureau of Inves-
tigation. 
‘‘(iv) The National Security Agency. 
‘‘(v) The National Geospatial-Intel-
ligence Agency. 
‘‘(vi) The Defense Intelligence Agen-
cy. 
‘‘(vii) Any other agency of the Federal 
Government that the President considers 
appropriate. 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00016
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
‘‘(C) INTERAGENCY
AGREEMENTS.—The 
Secretary and the head of an agency specified 
in subparagraph (B) may enter into agreements 
for the purpose of detailing personnel under 
this paragraph. 
‘‘(D) BASIS.—The detail of personnel 
under this paragraph may be on a reimbursable 
or non-reimbursable basis. 
‘‘(f) COMPOSITION.—The Agency shall be composed 
of the following divisions: 
‘‘(1) The Cybersecurity Division, headed by an 
Assistant Director. 
‘‘(2) The Infrastructure Security Division, 
headed by an Assistant Director. 
‘‘(3) The Emergency Communications Division 
under title XVIII, headed by an Assistant Director. 
‘‘(g) CO-LOCATION.—To the maximum extent prac-
ticable, the Director shall examine the establishment of 
central locations in geographical regions with a significant 
Agency presence. When establishing such locations, the 
Director shall coordinate with component heads and the 
Under Secretary for Management to co-locate or partner 
on any new real property leases, renewing any existing 
leases, or agreeing to extend or newly occupy any Federal 
space or new construction. 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00017
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
‘‘(h) PRIVACY.— 
‘‘(1) IN GENERAL.—There shall be a Privacy 
Officer of the Agency with primary responsibility for 
privacy policy and compliance for the Agency. 
‘‘(2) RESPONSIBILITIES.—The responsibilities 
of the Privacy Officer of the Agency shall include— 
‘‘(A) assuring that the use of technologies 
by the Agency sustain, and do not erode, pri-
vacy protections relating to the use, collection, 
and disclosure of personal information; 
‘‘(B) assuring that personal information 
contained in Privacy Act systems of records of 
the Agency is handled in full compliance with 
fair information practices as specified in the 
Privacy Act of 1974; 
‘‘(C) evaluating legislative and regulatory 
proposals involving collection, use, and disclo-
sure of personal information by the Agency; 
and 
‘‘(D) conducting a privacy impact assess-
ment of proposed rules of the Agency on the 
privacy of personal information, including the 
type of personal information collected and the 
number of people affected. 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00018
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
‘‘(i) SAVINGS.—Nothing in this title may be con-
strued as affecting in any manner the authority, existing 
on the day before the date of the enactment of this title, 
of any other component of the Department or any other 
Federal department or agency. 
‘‘SEC. 2203. CYBERSECURITY DIVISION. 
‘‘(a) ESTABLISHMENT.— 
‘‘(1) IN GENERAL.—There is established in the 
Agency a Cybersecurity Division. 
‘‘(2) ASSISTANT DIRECTOR.—The Cybersecurity 
Division shall be headed by an Assistant Director for 
Cybersecurity (in this subtitle referred to as the ‘As-
sistant Director’), who shall— 
‘‘(A) be at the level of Assistant Secretary 
within the Department; and 
‘‘(B) report to the Director. 
‘‘(3) REFERENCE.—Any reference to the Assist-
ant Secretary for Cybersecurity and Communica-
tions in any law, regulation, map, document, record, 
or other paper of the United States shall be deemed 
to be a reference to the Assistant Director for Cy-
bersecurity. 
‘‘(b) FUNCTIONS.—The Assistant Director shall— 
‘‘(1) direct the cybersecurity efforts of the 
Agency; 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00019
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
‘‘(2) carry out activities, at the direction of the 
Director, related to the security of information and 
information systems for Federal entities consistent 
with law, including subchapter II of chapter 35 of 
title 44, United States Code, and the Cybersecurity 
Act of 2015 (contained in division N of the Consoli-
dated Appropriations Act, 2016 (Public Law 114– 
113)); 
‘‘(3) fully participate in the mechanisms re-
quired under subsection (c)(7) of section 2202; and 
‘‘(4) carry out such other duties and powers as 
prescribed by the Director. 
‘‘SEC. 2204. INFRASTRUCTURE SECURITY DIVISION. 
‘‘(a) ESTABLISHMENT.— 
‘‘(1) IN GENERAL.—There is established in the 
Agency an Infrastructure Security Division. 
‘‘(2) ASSISTANT
DIRECTOR.—The Infrastruc-
ture Security Division shall be headed by an Assist-
ant Director of Infrastructure Security (in this sec-
tion referred to as the ‘Assistant Director’), who 
shall— 
‘‘(A) be at the level of Assistant Secretary 
within the Department; and 
‘‘(B) report to the Director. 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00020
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
‘‘(3) REFERENCE.—Any reference to the Assist-
ant Secretary for Infrastructure Protection in any 
law, regulation, map, document, record, or other 
paper of the United States shall be deemed to be a 
reference to the Assistant Director for Infrastruc-
ture Security. 
‘‘(b) FUNCTIONS.—The Assistant Director shall— 
‘‘(1) direct the critical infrastructure security 
efforts of the Agency; 
‘‘(2) carry out efforts, at the direction of the 
Director, to secure the United States high-risk 
chemicals and chemical facilities consistent with law, 
including the Chemical Facilities Anti-Terrorism 
Standards Program established under title XXI and 
the secure handling of ammonium nitrate established 
under subtitle J of title VIII; 
‘‘(3) fully participate in the mechanisms re-
quired under subsection (c)(7) of section 2202; and 
‘‘(4) carry out such other duties and powers as 
prescribed by the Director.’’. 
(b) TREATMENT OF CERTAIN POSITIONS.— 
(1) UNDER SECRETARY.—The individual serv-
ing as the Under Secretary appointed pursuant to 
section 103(a)(1)(H) of the Homeland Security Act 
of 2002 (6 U.S.C. 113(a)(1)) of the Department of 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00021
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
Homeland Security on the day before the date of the 
enactment of this Act may continue to serve as the 
Director of the Cybersecurity and Infrastructure Se-
curity Agency of the Department on and after such 
date. 
(2) DIRECTOR
FOR
EMERGENCY
COMMUNICA-
TIONS.—The individual serving as the Director for 
Emergency Communications of the Department of 
Homeland Security on the day before the date of the 
enactment of this Act may continue to serve as the 
Assistant Director for Emergency Communications 
of the Department on and after such date. 
(3) ASSISTANT
SECRETARY
FOR
CYBERSECU-
RITY AND COMMUNICATIONS.—The individual serv-
ing as the Assistant Secretary for Cybersecurity and 
Communications on the day before the date of the 
enactment of this Act may continue to serve as the 
Assistant Director for Cybersecurity on and after 
such date. 
(4) ASSISTANT SECRETARY FOR INFRASTRUC-
TURE SECURITY.—The individual serving as the As-
sistant Secretary for Infrastructure Protection on 
the day before the date of the enactment of this Act 
may continue to serve as the Assistant Director for 
Infrastructure Security on and after such date. 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00022
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
(c) REFERENCE.—Any reference to— 
(1) the Office of Emergency Communications in 
any law, regulation, map, document, record, or other 
paper of the United States shall be deemed to be a 
reference to the Emergency Communications Divi-
sion; and 
(2) the Director for Emergency Communica-
tions in any law, regulation, map, document, record, 
or other paper of the United States shall be deemed 
to be a reference to the Assistant Director for Emer-
gency Communications. 
(d) OVERSIGHT.—The Director of the Cybersecurity 
and Infrastructure Security Agency of the Department of 
Homeland Security shall provide to Congress, in accord-
ance with the deadlines specified in paragraphs (1) and 
(2), information on the following: 
(1) Not later than 90 days after the date of the 
enactment of this Act, information on the Agency’s 
mechanisms for regular and ongoing consultation 
and collaboration, as required pursuant to section 
2202(c)(7) of the Homeland Security Act of 2002 
(as added by this Act). 
(2) Not later than one year after the date of 
the enactment of this Act, the activities of the Agen-
cy’s consultation and collaboration mechanisms and 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00023
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
how such mechanisms have impacted operational co-
ordination, situational awareness, and integration 
across the Agency. 
(e) CYBER WORKFORCE.—Not later than 90 days 
after the date of the enactment of this subtitle, the Direc-
tor of the Cybersecurity and Infrastructure Security Agen-
cy of the Department of Homeland Security shall submit 
to Congress a report detailing how the Agency is meeting 
legislative requirements under the Cybersecurity Work-
force Assessment Act (Public Law 113–246) and the 
Homeland Security Cybersecurity Workforce Assessment 
Act (enacted as section 4 of the Border Patrol Agent Pay 
Reform Act of 2014; Public Law 113–277) to address 
cyber workforce needs. 
(f) FACILITY.—Not later than 180 days after the 
date of the enactment of this Act, the Director of the Cy-
bersecurity and Infrastructure Security Agency of the De-
partment of Homeland Security shall report to Congress 
on the most efficient and effective methods of consoli-
dating Agency facilities, personnel, and programs to most 
effectively carry out the Agency’s mission. 
(g) CONFORMING AMENDMENTS TO THE HOMELAND 
SECURITY ACT OF 2002.—The Homeland Security Act of 
2002 is amended— 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00024
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
(1) in title I, by amending subparagraph (H) of 
section 103(a)(1) (6 U.S.C. 113(a)(1)) to read as 
follows: 
‘‘(H) A Director of the Cybersecurity and 
Infrastructure Security Agency.’’; 
(2) in title II (6 U.S.C. 121 et seq.)— 
(A) in the title heading, by striking ‘‘AND 
INFRASTRUCTURE PROTECTION’’; 
(B) in the subtitle A heading, by striking 
‘‘and Infrastructure Protection’’; 
(C) in section 201 (6 U.S.C. 121)— 
(i) in the section heading, by striking 
‘‘AND
INFRASTRUCTURE
PROTEC-
TION’’; 
(ii) in subsection (a)— 
(I) in the heading, by striking 
‘‘AND
INFRASTRUCTURE
PROTEC-
TION’’; and 
(II) by striking ‘‘and an Office of 
Infrastructure Protection’’; 
(iii) in subsection (b)— 
(I) in the heading, by striking 
‘‘AND ASSISTANT SECRETARY FOR IN-
FRASTRUCTURE PROTECTION’’; and 
(II) by striking paragraph (3); 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00025
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
(iv) in subsection (c)— 
(I) by striking ‘‘and infrastruc-
ture protection’’; and 
(II) by striking ‘‘or the Assistant 
Secretary for Infrastructure Protec-
tion, as appropriate’’; 
(v) in subsection (d)— 
(I) in the heading, by striking 
‘‘AND
INFRASTRUCTURE
PROTEC-
TION’’; 
(II) in the matter preceding 
paragraph (1), by striking ‘‘and infra-
structure protection’’; 
(III) by striking paragraphs (5) 
and (6) and redesignating paragraphs 
(7) through (26) as paragraphs (5) 
through (24), respectively; 
(IV) by striking paragraph (23), 
as so redesignated; and 
(V) by redesignating paragraph 
(24), as so redesignated, as paragraph 
(23); 
(vi) in subsection (e)(1), by striking 
‘‘and the Office of Infrastructure Protec-
tion’’; and 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00026
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
(vii) in subsection (f)(1), by striking 
‘‘and the Office of Infrastructure Protec-
tion’’; 
(D) in section 204 (6 U.S.C. 124a)— 
(i) in subsection (c)(1), in the matter 
preceding subparagraph (A), by striking 
‘‘Assistant Secretary for Infrastructure 
Protection’’ and inserting ‘‘Director of the 
Cybersecurity and Infrastructure Security 
Agency’’; and 
(ii) in subsection (d)(1), in the matter 
preceding subparagraph (A), by striking 
‘‘Assistant Secretary for Infrastructure 
Protection’’ and inserting ‘‘Director of the 
Cybersecurity and Infrastructure Security 
Agency’’; 
(E) in subparagraph (B) of section 
210A(c)(2) (6 U.S.C. 124h(c)(2)), by striking 
‘‘Office of Infrastructure Protection’’ and in-
serting ‘‘Cybersecurity and Infrastructure Secu-
rity Agency’’; 
(F) by transferring section 210E (6 U.S.C. 
124) to appear after section 2212 (as redesig-
nated by subparagraph (G) of this paragraph) 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00027
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
and redesignating such section 210E as section 
2214; 
(G) in subtitle B, by redesignating sections 
211 through 215 (6 U.S.C. 101 note through 
134) as sections 2221 through 2225, respec-
tively, and inserting such redesignated sections, 
including the enumerator and heading of sub-
title B (containing such redesignated sections), 
after section 2213, as redesignated by subpara-
graph (E) of this paragraph; and 
(H) by redesignating sections 223 through 
230 (6 U.S.C. 143 through 151) as sections 
2205 through 2213, respectively, and inserting 
such redesignated sections after section 2204, 
as added by this Act; 
(3) in title III, in paragraph (3) of section 302 
(6 U.S.C. 182), by striking ‘‘Assistant Secretary for 
Infrastructure Protection’’ and inserting ‘‘Director 
of the Cybersecurity and Infrastructure Security 
Agency’’; 
(4) in title V— 
(A) in section 514 (6 U.S.C. 321(c)), by— 
(i) striking subsection (b); and 
(ii) redesignating subsection (c) as 
subsection (b); 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00028
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
(B) in section 523 (6 U.S.C. 321I)— 
(i) in subsection (a), in the matter 
preceding paragraph (1), by striking ‘‘As-
sistant Secretary for Infrastructure Protec-
tion’’ and inserting ‘‘Director of the Cyber-
security and Infrastructure Security Agen-
cy’’; and 
(ii) in subsection (c), by striking ‘‘As-
sistant Secretary for Infrastructure Protec-
tion’’ and inserting ‘‘Director of the Cyber-
security and Infrastructure Security Agen-
cy’’; and 
(C) in section 524(a)(2)(B) (6 U.S.C. 
321m(a)(2)(B)), in the matter preceding clause 
(i)— 
(i) by striking ‘‘Assistant Secretary 
for Infrastructure Protection’’ and insert-
ing ‘‘Director of the Cybersecurity and In-
frastructure Security Agency’’; and 
(ii) by striking ‘‘of the Assistant Sec-
retary’’ and inserting ‘‘of the Director’’; 
(5) in title VIII, in section 899B(a) (6 U.S.C. 
488a(a)), by inserting at the end the following new 
sentence: ‘‘Such regulations shall be carried out by 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00029
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
the Cybersecurity and Infrastructure Security Agen-
cy.’’; 
(6) in title XVIII (6 U.S.C. 571 et seq.)— 
(A) in section 1801 (6 U.S.C. 571)— 
(i) in the section heading, by striking 
‘‘OFFICE
OF
EMERGENCY
COMMU-
NICATIONS’’ and inserting ‘‘EMERGENCY 
COMMUNICATIONS DIVISION’’; 
(ii) in subsection (a)— 
(I) by striking ‘‘Office of Emer-
gency Communications’’ and inserting 
‘‘Emergency Communications Divi-
sion’’; and 
(II) by adding at the end the fol-
lowing new sentence: ‘‘The Division 
shall be located in the Cybersecurity 
and Infrastructure Security Agency.’’; 
(iii) in subsection (b)— 
(I) in the first sentence, by in-
serting ‘‘Assistant’’ before ‘‘Director’’; 
and 
(II) in the second sentence, by 
striking ‘‘Assistant Secretary for Cy-
bersecurity and Communications’’ and 
inserting ‘‘Director of the Cybersecu-
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00030
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
rity and Infrastructure Security Agen-
cy’’; 
(iv) in subsection (c)— 
(I) in the matter preceding para-
graph (1), by inserting ‘‘Assistant’’ 
before ‘‘Director’’; 
(II) in paragraph (14), by strik-
ing ‘‘and’’ at the end; 
(III) by redesignating paragraph 
(15) as paragraph (16); and 
(IV) by inserting after paragraph 
(14) the following new paragraph: 
‘‘(15) fully participate in the mechanisms re-
quired under subsection (c)(7) of section 2202; 
and’’; 
(v) in subsection (d), by inserting 
‘‘Assistant’’ before ‘‘Director’’; and 
(vi) in subsection (e), in the matter 
preceding paragraph (1), by inserting ‘‘As-
sistant’’ before ‘‘Director’’; 
(B) in sections 1802 through 1805 (6 
U.S.C. 575), by striking ‘‘Director for Emer-
gency Communications’’ each place it appears 
and inserting ‘‘Assistant Director for Emer-
gency Communications’’; 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00031
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
(C) in section 1809 (6 U.S.C. 579)— 
(i) by striking ‘‘Director for Emer-
gency Communications’’ and inserting ‘‘As-
sistant Director for Emergency Commu-
nications’’; and 
(ii) by striking ‘‘Office of Emergency 
Communications’’ each place it appears 
and inserting ‘‘Emergency Communica-
tions Division’’; and 
(D) in section 1810 (6 U.S.C. 580)— 
(i) in subsection (a)(1), by striking 
‘‘Director of the Office of Emergency Com-
munications (referred to in this section as 
the ‘Director’)’’ and inserting ‘‘Assistant 
Director for the Emergency Communica-
tions Division (referred to in this section 
as the ‘Assistant Director’)’’; 
(ii) in subsection (c), by striking ‘‘Of-
fice of Emergency Communications’’ and 
inserting ‘‘Emergency Communications Di-
vision’’; and 
(iii) by striking ‘‘Director’’ each place 
it appears and inserting ‘‘Assistant Direc-
tor’’; 
(7) in title XXI (6 U.S.C. 621 et seq.)— 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00032
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
(A) in section 2101 (6 U.S.C. 621)— 
(i) by redesignating paragraphs (4) 
through (14) as paragraphs (5) through 
(15), respectively; and 
(ii) by inserting after paragraph (3) 
the following new paragraph: 
‘‘(4) the term ‘Director’ means the Director of 
the Cybersecurity and Infrastructure Security Agen-
cy;’’; 
(B) in paragraph (1) of section 2102(a) (6 
U.S.C. 622(a)), by inserting at the end the fol-
lowing new sentence: ‘‘Such Program shall be 
located in the Cybersecurity and Infrastructure 
Security Agency.’’; and 
(C) in paragraph (2) of section 2104(c) (6 
U.S.C. 624(c)), by striking ‘‘Under Secretary 
responsible for overseeing critical infrastructure 
protection, cybersecurity, and other related pro-
grams of the Department appointed under sec-
tion 103(a)(1)(H)’’ and inserting ‘‘Director of 
the Cybersecurity and Infrastructure Security 
Agency’’; and 
(8) in title XXII, as added by this Act— 
(A) in section 2205, as so redesignated, in 
the matter preceding paragraph (1), by striking 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00033
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
‘‘Under Secretary appointed under section 
103(a)(1)(H)’’ and inserting ‘‘Director of the 
Cybersecurity 
and 
Infrastructure 
Security 
Agency’’; 
(B) in section 2206, as so redesignated, by 
striking ‘‘Assistant Secretary for Infrastructure 
Protection’’ and inserting ‘‘Director of the Cy-
bersecurity and Infrastructure Security Agen-
cy’’; 
(C) in section 2209, as so redesignated— 
(i) by striking ‘‘Under Secretary ap-
pointed under section 103(a)(1)(H)’’ each 
place it appears and inserting ‘‘Director of 
the Cybersecurity and Infrastructure Secu-
rity Agency’’; 
(ii) in subsection (b), by adding at the 
end the following new sentences: ‘‘The 
Center shall be located in the Cybersecu-
rity and Infrastructure Security Agency. 
The head of the Center shall report to the 
Assistant Director for Cybersecurity.’’; and 
(iii) in subsection (c)(11), by striking 
‘‘Office of Emergency Communications’’ 
and inserting ‘‘Emergency Communica-
tions Division’’; 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00034
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
(D) in section 2210, as so redesignated— 
(i) by striking ‘‘section 227’’ each 
place it appears and inserting ‘‘section 
2209’’; and 
(ii) in subsection (c), by striking 
‘‘Under Secretary appointed under section 
103(a)(1)(H)’’ and inserting ‘‘Director of 
the Cybersecurity and Infrastructure Secu-
rity Agency’’; 
(E) in section 2211, as so redesignated, by 
striking ‘‘section 212(5)’’ and inserting ‘‘section 
2215(5)’’; and 
(F) in section 2212, as so redesignated, in 
subsection (a)— 
(i) in paragraph (3), by striking ‘‘sec-
tion 228’’ and inserting ‘‘section 2210’’; 
and 
(ii) in paragraph (4), by striking ‘‘sec-
tion 227’’ and inserting ‘‘section 2209’’. 
(h) CONFORMING AMENDMENT TO TITLE 5, UNITED 
STATES CODE.—Section 5314 of title 5, United States 
Code, is amended by inserting after ‘‘Under Secretaries, 
Department of Homeland Security.’’ the following new 
item: 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00035
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
‘‘Director, Cybersecurity and Infrastructure Se-
curity Agency.’’. 
(i) CLERICAL AMENDMENTS.—The table of contents 
in section 1(b) of the Homeland Security Act of 2002 is 
amended— 
(1) in title II— 
(A) in the item relating to the title head-
ing, by striking ‘‘AND INFRASTRUC-
TURE PROTECTION’’; 
(B) in the item relating to the heading of 
subtitle A, by striking ‘‘and Infrastructure 
Protection’’; 
(C) in the item relating to section 201, by 
striking ‘‘AND
INFRASTRUCTURE
PROTEC-
TION’’; 
(D) by striking the item relating to section 
210E; 
(E) by striking the items relating to sub-
title B of title II; and 
(F) by striking the items relating to sec-
tion 223 through section 230; and 
(2) by adding at the end the following new 
items: 
‘‘TITLE XXII—CYBERSECURITY AND INFRASTRUCTURE SECURITY 
AGENCY 
‘‘Subtitle A—Cybersecurity and Infrastructure Security 
‘‘Sec. 2201. Definitions. 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00036
Fmt 6652
Sfmt 6211
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
‘‘Sec. 2202. Cybersecurity and Infrastructure Security Agency. 
‘‘Sec. 2203. Cybersecurity Division. 
‘‘Sec. 2204. Infrastructure Security Division. 
‘‘Sec. 2205. Enhancement of Federal and non-Federal cybersecurity. 
‘‘Sec. 2206. Net guard. 
‘‘Sec. 2207. Cybersecurity Enhancement Act of 2002. 
‘‘Sec. 2208. Cybersecurity recruitment and retention. 
‘‘Sec. 2209. National cybersecurity and communications integration center. 
‘‘Sec. 2210. Cybersecurity plans. 
‘‘Sec. 2211. Cybersecurity strategy. 
‘‘Sec. 2212. Clearances. 
‘‘Sec. 2213. Federal intrusion detection and prevention system. 
‘‘Sec. 2214. National Asset Database. 
‘‘Subtitle B—Critical Infrastructure Information 
‘‘Sec. 2221. Short title. 
‘‘Sec. 2222. Definitions. 
‘‘Sec. 2223. Designation of critical infrastructure protection program. 
‘‘Sec. 2224. Protection of voluntarily shared critical infrastructure information. 
‘‘Sec. 2225. No private right of action.’’. 
SEC. 3. TRANSFER OF OTHER ENTITIES. 
(a) OFFICE
OF BIOMETRIC IDENTITY MANAGE-
MENT.—The Office of Biometric Identity Management of 
the Department of Homeland Security located in the Na-
tional Protection and Programs Directorate of the Depart-
ment of Homeland Security on the day before the date 
of the enactment of this Act is hereby transferred to the 
Management Directorate of the Department. 
(b) FEDERAL PROTECTIVE SERVICE.—The Secretary 
of Homeland Security is authorized to transfer the Fed-
eral Protective Service, as authorized under section 1315 
of title 40, United States Code, to any component, direc-
torate, or other office of the Department of Homeland Se-
curity that the Secretary determines appropriate. 
SEC. 4. RULE OF CONSTRUCTION. 
Nothing in this Act may be construed as— 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00037
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
(1) conferring new authorities to the Secretary 
of Homeland Security, including programmatic, reg-
ulatory, or enforcement authorities, outside of the 
authorities in existence on the day before the date 
of the enactment of this Act; 
(2) reducing or limiting the programmatic, reg-
ulatory, or enforcement authority vested in any 
other Federal agency by statute; or 
(3) affecting in any manner the authority, exist-
ing on the day before the date of the enactment of 
this Act, of any other Federal agency or component 
of the Department of Homeland Security. 
SEC. 5. PROHIBITION ON ADDITIONAL FUNDING. 
No additional funds are authorized to be appro-
priated to carry out this Act or the amendments made 
by this Act. This Act and such amendments shall be car-
ried out using amounts otherwise authorized. 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00038
Fmt 6652
Sfmt 6201
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS
Union Calendar No. 336 
115TH CONGRESS 
1ST SESSION 
H. R. 3359 
[Report No. 115–454, Part I] 
A BILL 
To amend the Homeland Security Act of 2002 to 
authorize the Cybersecurity and Infrastructure 
Security Agency of the Department of Homeland 
Security, and for other purposes. 
DECEMBER 11, 2017 
Reported from the Committee on Homeland Security 
DECEMBER 11, 2017 
The Committees on Energy and Commerce, Oversight 
and Government Reform, and Transportation and In-
frastructure discharged; committed to the Committee 
of the Whole House on the State of the Union and or-
dered to be printed 
VerDate Sep 11 2014 
00:07 Dec 12, 2017
Jkt 079200
PO 00000
Frm 00040
Fmt 6651
Sfmt 6651
E:\BILLS\H3359.RH
H3359
lotter on DSKBCFDHB2PROD with BILLS