identifying improvements that could be made to en-
hance the transparency and usability of the risk 
analysis process developed under subsection (a). 
‘‘(2) UPDATES
TO
REPORT.—The Secretary 
shall submit to Congress updates to the findings and 
report in paragraph (1), when appropriate, but by 
not later than two years after the date on which the 
initial report is submitted. Such updates shall reflect 
improvements in the risk analysis process developed 
under subsection (a).’’. 
(b) CLERICAL AMENDMENT.—The table of contents 
in section 1(b) of such Act is amended by inserting after 
the items relating to title III the following: 
‘‘Sec. 316. Risk analysis process and integrated CBRN risk assessment.’’. 
TITLE 
VII—HOMELAND 
SECU-
RITY 
CYBERSECURITY 
IM-
PROVEMENTS 
SEC. 701. CYBERSECURITY AND TELECOMMUNICATIONS. 
(a) IN GENERAL.—Subtitle C of title II of the Home-
land Security Act of 2002 (6 U.S.C. 141 et seq.) is amend-
ed by adding at the end the following new section: 
‘‘SEC. 
226. 
OFFICE 
OF 
CYBERSECURITY 
AND 
TELE-
COMMUNICATIONS. 
‘‘(a) IN GENERAL.—There shall be within the De-
partment of Homeland Security an Office of Cybersecurity 
and Telecommunications, which shall be headed by the As-
VerDate Aug 31 2005 
02:51 Mar 27, 2007
Jkt 059200
PO 00000
Frm 00080
Fmt 6652
Sfmt 6201
E:\BILLS\H1684.IH
H1684
hmoore on PROD1PC68 with HMBILLS
sistant Secretary for Cybersecurity and Telecommuni-
cations. 
‘‘(b) DUTY OF THE ASSISTANT SECRETARY.—The 
Assistant Secretary shall assist the Secretary in carrying 
out the responsibilities of the Department regarding 
cybersecurity and telecommunications. 
‘‘(c) RESPONSIBILITIES.—The Assistant Secretary 
shall be responsible for overseeing preparation, situational 
awareness, response, reconstitution, and mitigation nec-
essary for cyber security and to protect telecommuni-
cations from acts of terrorism and other large scale dis-
ruptions, and shall conduct the following activities to exe-
cute those responsibilities: 
‘‘(1) PREPARATION AND SITUATIONAL AWARE-
NESS.— 
‘‘(A) Establish and maintain a capability 
within the Department to monitor critical infor-
mation infrastructure to aid in detection of 
vulnerabilities and warning of potential acts of 
terrorism and other attacks. 
‘‘(B) Conduct risk assessments on critical 
information infrastructure with respect to acts 
of terrorism and other large-scale disruptions, 
identify and prioritize vulnerabilities in critical 
VerDate Aug 31 2005 
02:51 Mar 27, 2007
Jkt 059200
PO 00000
Frm 00081
Fmt 6652
Sfmt 6201
E:\BILLS\H1684.IH
H1684
hmoore on PROD1PC68 with HMBILLS
information infrastructure, and coordinate the 
mitigation of such vulnerabilities. 
‘‘(C) Develop a plan for the continuation 
of critical information operations in the event of 
a cyber attack or other large-scale disruption of 
the information infrastructure of the United 
States. 
‘‘(D) Oversee an emergency communica-
tions system in the event of an act of terrorism 
or other large-scale disruption of the informa-
tion infrastructure of the United States. 
‘‘(2) RESPONSE AND RECONSTITUTION.— 
‘‘(A) Define what qualifies as a cyber inci-
dent of national significance for purposes of the 
National Response Plan. 
‘‘(B) Ensure that the Department’s prior-
ities, procedures, and resources are in place to 
reconstitute critical information infrastructures 
in the event of an act of terrorism or other 
large-scale disruption. 
‘‘(3) MITIGATION.— 
‘‘(A) Develop a national cybersecurity 
awareness, training, and education program 
that promotes cybersecurity awareness within 
VerDate Aug 31 2005 
02:51 Mar 27, 2007
Jkt 059200
PO 00000
Frm 00082
Fmt 6652
Sfmt 6201
E:\BILLS\H1684.IH
H1684
hmoore on PROD1PC68 with HMBILLS