Sec. 2
Information sharing
Title II of the Homeland Security Act of 2002 is amended—
(1)
in section 210A (6 U.S.C. 124h)—
(i)
changed
in paragraph (6), (10), by inserting “cybersecurity before the semicolon at the end the following: “, including, in coordination with the national cybersecurity and communications integration center under section 227, accessing timely technical assistance, risk information,” after “terrorism information,”; andmanagement support, and incident response capabilities with respect to cyber threat indicators, defensive measures, cybersecurity risks, and incidents (as such terms are defined in such section), which may include attribution, mitigation, and remediation, and the provision of information and recommendations on security and resilience, including implications of cybersecurity risks to equipment and technology related to the electoral process”;
(ii)
changed
in paragraph (8), (11), by inserting “cybersecurity risk information,” striking “and” after “terrorism information,”; andthe semicolon;
(iii)
added
by redesignating paragraph (12) as paragraph (14); and
(iv)
added
by inserting after paragraph (11) the following new paragraphs:
added
“(12) review information relating to cybersecurity risks that is gathered by State, local, and regional fusion centers, and incorporate such information, as appropriate, into the Department’s own information relating to cybersecurity risks;
added
“(13) ensure the dissemination to State, local, and regional fusion centers of information relating to cybersecurity risks; and”
(B)
changed
in subsection (d)(1), by inserting “cybersecurity risk information,” after “terrorism information,”; and(c)(2)—
(i)
added
by redesignating subparagraphs (C) through (G) as subparagraphs (D) through (H), respectively; and
(ii)
added
by inserting after subparagraph (B) the following new subparagraph:
added
“(C) The national cybersecurity and communications integration center under section 227.”
(C)
added
in subsection (d)—
(i)
added
in paragraph (3), by striking “and” after the semicolon;
(ii)
added
by redesignating paragraph (4) as paragraph (5); and
(iii)
added
by inserting after paragraph (3) the following new paragraph:
added
“(4) assist, in coordination with the national cybersecurity and communications integration center under section 227, fusion centers in using information relating to cybersecurity risks to develop a comprehensive and accurate threat picture; and”
(D)
added
in subsection (j)—
(i)
added
by redesignating paragraphs (1) through (5) as paragraphs (2) through (6), respectively; and
(ii)
added
by inserting before paragraph (2), as so redesignated, the following new paragraph:
added
“(1) the term “cybersecurity risk” has the meaning given that term in section 227;”
(2)
in section 227 (6 U.S.C. 148)—
(i)
in paragraph (5)(B), by inserting “, including State and major urban area fusion centers, as appropriate” before the semicolon at the end;
(ii)
changed
in paragraph (7)(C), (7), in the matter preceding subparagraph (A), by striking “information and recommendations” each place it appears and inserting “and “information, recommendations, and best practices” after “defensive measures”; practices”; and
(iii)
in paragraph (9), by inserting “and best practices” after “defensive measures”; and
(B)
in subsection (d)(1)(B)(ii), by inserting “and State and major urban area fusion centers, as appropriate” before the semicolon at the end.