113 
HR 1560 RDS
universities, colleges, national laboratories, and pri-
vate industry; 
‘‘(3) the heads of other relevant Federal depart-
ments and agencies that conduct research and devel-
opment relating to critical infrastructure protection; 
and 
‘‘(4) State, local, and tribal governments, as ap-
propriate.’’. 
(b) CLERICAL AMENDMENT.—The table of contents 
of the Homeland Security Act of 2002 is amended by in-
serting after the item relating to section 317 the following 
new item: 
‘‘Sec. 318. Research and development strategy for critical infrastructure protec-
tion.’’. 
SEC. 209. REPORT ON REDUCING CYBERSECURITY RISKS IN 
DHS DATA CENTERS. 
Not later than 1 year after the date of the enactment 
of this title, the Secretary of Homeland Security shall sub-
mit to the Committee on Homeland Security of the House 
of Representatives and the Committee on Homeland Secu-
rity and Governmental Affairs of the Senate a report on 
the feasibility of the Department of Homeland Security 
creating an environment for the reduction in cybersecurity 
risks in Department data centers, including by increasing 
compartmentalization between systems, and providing a 
mix of security controls between such compartments. 
VerDate Sep 11 2014 
23:33 Apr 30, 2015
Jkt 049200
PO 00000
Frm 00113
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RDS
H1560
emcdonald on DSK67QTVN1PROD with BILLS
114 
HR 1560 RDS
SEC. 210. ASSESSMENT. 
Not later than 2 years after the date of the enact-
ment of this title, the Comptroller General of the United 
States shall submit to the Committee on Homeland Secu-
rity of the House of Representatives and the Committee 
on Homeland Security and Governmental Affairs of the 
Senate a report that contains an assessment of the imple-
mentation by the Secretary of Homeland Security of this 
title and the amendments made by this title and, to the 
extent practicable, findings regarding increases in the 
sharing of cyber threat indicators, defensive measures, 
and information relating to cybersecurity risks and inci-
dents at the National Cybersecurity and Communications 
Integration Center and throughout the United States. 
SEC. 211. CONSULTATION. 
The Under Secretary for Cybersecurity and Infra-
structure Protection shall produce a report on the feasi-
bility of creating a risk-informed prioritization plan should 
multiple critical infrastructures experience cyber incidents 
simultaneously. 
SEC. 212. TECHNICAL ASSISTANCE. 
The Inspector General of the Department of Home-
land Security shall review the operations of the United 
States Computer Emergency Readiness Team (US– 
CERT) and the Industrial Control Systems Cyber Emer-
gency Response Team (ICS–CERT) to assess the capacity 
VerDate Sep 11 2014 
23:33 Apr 30, 2015
Jkt 049200
PO 00000
Frm 00114
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RDS
H1560
emcdonald on DSK67QTVN1PROD with BILLS
115 
HR 1560 RDS
to provide technical assistance to non-Federal entities and 
to adequately respond to potential increases in requests 
for technical assistance. 
SEC. 213. PROHIBITION ON NEW REGULATORY AUTHORITY. 
Nothing in this title or the amendments made by this 
title may be construed to grant the Secretary of Homeland 
Security any authority to promulgate regulations or set 
standards relating to the cybersecurity of non-Federal en-
tities, not including State, local, and tribal governments, 
that was not in effect on the day before the date of the 
enactment of this title. 
SEC. 214. SUNSET. 
Any requirements for reports required by this title 
or the amendments made by this title shall terminate on 
the date that is 7 years after the date of the entitlement 
of this title. 
SEC. 215. PROHIBITION ON NEW FUNDING. 
No funds are authorized to be appropriated to carry 
out this title and the amendments made by this title. This 
title and such amendments shall be carried out using 
amounts appropriated or otherwise made available for 
such purposes. 
VerDate Sep 11 2014 
23:33 Apr 30, 2015
Jkt 049200
PO 00000
Frm 00115
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RDS
H1560
emcdonald on DSK67QTVN1PROD with BILLS
116 
HR 1560 RDS
SEC. 216. PROTECTION OF FEDERAL INFORMATION SYS-
TEMS. 
(a) IN GENERAL.—Subtitle C of title II of the Home-
land Security Act of 2002 (6 U.S.C. 141 et seq.) is amend-
ed by adding at the end the following new section: 
‘‘SEC. 233. AVAILABLE PROTECTION OF FEDERAL INFORMA-
TION SYSTEMS. 
‘‘(a) IN GENERAL.—The Secretary shall deploy and 
operate, to make available for use by any Federal agency, 
with or without reimbursement, capabilities to protect 
Federal agency information and information systems, in-
cluding technologies to continuously diagnose, detect, pre-
vent, and mitigate against cybersecurity risks (as such 
term is defined in the second section 226) involving Fed-
eral agency information or information systems. 
‘‘(b) ACTIVITIES.—In carrying out this section, the 
Secretary may— 
‘‘(1) access, and Federal agency heads may dis-
close to the Secretary or a private entity providing 
assistance to the Secretary under paragraph (2), in-
formation traveling to or from or stored on a Fed-
eral agency information system, regardless of from 
where the Secretary or a private entity providing as-
sistance to the Secretary under paragraph (2) ac-
cesses such information, notwithstanding any other 
provision of law that would otherwise restrict or pre-
VerDate Sep 11 2014 
23:33 Apr 30, 2015
Jkt 049200
PO 00000
Frm 00116
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RDS
H1560
emcdonald on DSK67QTVN1PROD with BILLS
117 
HR 1560 RDS
vent Federal agency heads from disclosing such in-
formation to the Secretary or a private entity pro-
viding assistance to the Secretary under paragraph 
(2); 
‘‘(2) enter into contracts or other agreements, 
or otherwise request and obtain the assistance of, 
private entities to deploy and operate technologies in 
accordance with subsection (a); and 
‘‘(3) retain, use, and disclose information ob-
tained through the conduct of activities authorized 
under this section only to protect Federal agency in-
formation and information systems from cybersecu-
rity risks, or, with the approval of the Attorney Gen-
eral and if disclosure of such information is not oth-
erwise prohibited by law, to law enforcement only to 
investigate, prosecute, disrupt, or otherwise respond 
to— 
‘‘(A) a violation of section 1030 of title 18, 
United States Code; 
‘‘(B) an imminent threat of death or seri-
ous bodily harm; 
‘‘(C) a serious threat to a minor, including 
sexual exploitation or threats to physical safety; 
or 
VerDate Sep 11 2014 
23:33 Apr 30, 2015
Jkt 049200
PO 00000
Frm 00117
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RDS
H1560
emcdonald on DSK67QTVN1PROD with BILLS