‘‘(4) consult with the National Institute of 
Standards and Technology, agencies or offices oper-
ating or exercising control of national security sys-
tems (including the National Security Agency), and 
such other agencies or offices in accordance with law 
and as directed by the President regarding informa-
tion security incidents and related matters. 
‘‘(b) NATIONAL SECURITY SYSTEMS.—Each agency 
operating or exercising control of a national security sys-
tem shall share information about information security in-
cidents, threats, and vulnerabilities with the Federal infor-
mation security incident center to the extent consistent 
with standards and guidelines for national security sys-
tems, issued in accordance with law and as directed by 
the President. 
‘‘(c) REVIEW AND APPROVAL.—The Director shall 
review and approve the policies, procedures, and guidance 
established in this subchapter to ensure that the incident 
center has the capability to effectively and efficiently de-
tect, correlate, respond to, contain, mitigate, and reme-
diate incidents that impair the adequate security of the 
information systems and information infrastructure of 
more than one agency. To the extent practicable, the capa-
bility shall be continuous and technically automated. 
VerDate Mar 15 2010 
02:57 Mar 27, 2012
Jkt 099200
PO 00000
Frm 00025
Fmt 6652
Sfmt 6201
E:\BILLS\H4257.IH
H4257
jbell on DSK7SPTVN1PROD with BILLS
‘‘§ 3556. National security systems 
‘‘The head of each agency operating or exercising 
control of a national security system shall be responsible 
for ensuring that the agency— 
‘‘(1) provides information security protections 
commensurate with the risk and magnitude of the 
harm resulting from the unauthorized access, use, 
disclosure, disruption, modification, or destruction of 
the information contained in such system; 
‘‘(2) implements information security policies 
and practices as required by standards and guide-
lines for national security systems, issued in accord-
ance with law and as directed by the President; and 
‘‘(3) complies with the requirements of this sub-
chapter.’’. 
SEC. 3. TECHNICAL AND CONFORMING AMENDMENTS. 
(a) TABLE OF SECTIONS IN TITLE 44.—The table 
of sections for chapter 35 of title 44, United States Code, 
is amended by striking the matter relating to subchapters 
II and III and inserting the following: 
‘‘SUBCHAPTER II—INFORMATION SECURITY 
‘‘3551. Purposes. 
‘‘3552. Definitions. 
‘‘3553. Authority and functions of the Director. 
‘‘3554. Agency responsibilities. 
‘‘3555. Federal information security incident center. 
‘‘3556. National security systems.’’. 
(b) OTHER REFERENCES.— 
VerDate Mar 15 2010 
02:57 Mar 27, 2012
Jkt 099200
PO 00000
Frm 00026
Fmt 6652
Sfmt 6201
E:\BILLS\H4257.IH
H4257
jbell on DSK7SPTVN1PROD with BILLS
(1) Section 1001(c)(1)(A) of the Homeland Se-
curity Act of 2002 (6 U.S.C. 511(c)(1)(A)) is 
amended by striking ‘‘section 3532(3)’’ and insert-
ing ‘‘section 3552(b)’’. 
(2) Section 2222(j)(6) of title 10, United States 
Code, is amended by striking ‘‘section 3542(b)(2))’’ 
and inserting ‘‘section 3552(b)’’. 
(3) Section 2223(c)(3) of title 10, United 
States Code, is amended, by striking ‘‘section 
3542(b)(2))’’ and inserting ‘‘section 3552(b)’’. 
(4) Section 2315 of title 10, United States 
Code, is amended by striking ‘‘section 3542(b)(2)’’ 
and inserting ‘‘section 3552(b)’’. 
(5) Section 20 of the National Institute of 
Standards and Technology Act (15 U.S.C. 278g–3) 
is amended— 
(A) in subsections (a)(2) and (e)(5), by 
striking ‘‘section 3532(b)(2)’’ and inserting 
‘‘section 3552(b)’’; and 
(B) in subsection (e)(2), by striking ‘‘sec-
tion 3532(1)’’ and inserting ‘‘section 3552(b)’’. 
(6) Section 8(d)(1) of the Cyber Security Re-
search and Development Act (15 U.S.C. 7406(d)(1)) 
is amended by striking ‘‘section 3534(b)’’ and in-
serting ‘‘section 3554(b)’’. 
VerDate Mar 15 2010 
02:57 Mar 27, 2012
Jkt 099200
PO 00000
Frm 00027
Fmt 6652
Sfmt 6201
E:\BILLS\H4257.IH
H4257
jbell on DSK7SPTVN1PROD with BILLS
SEC. 4. EFFECTIVE DATE. 
This Act (including the amendments made by this 
Act) shall take effect 30 days after the date of the enact-
ment of this Act. 
Æ 
VerDate Mar 15 2010 
02:57 Mar 27, 2012
Jkt 099200
PO 00000
Frm 00028
Fmt 6652
Sfmt 6301
E:\BILLS\H4257.IH
H4257
jbell on DSK7SPTVN1PROD with BILLS