---
kind: "section"
citation: "6 U.S.C. § 1500"
title: "6"
title_heading: "Domestic Security"
number: "1500"
heading: "National Cyber Director"
release: "119-102"
date: "2026-07-12"
url: "https://uscodex.org/usc/6/1500"
units:
  - "Chapter 6 — Cybersecurity"
  - "Subchapter I — Cybersecurity Information Sharing"
---

# §1500. National Cyber Director

- (a) **Establishment—** There is established, within the Executive Office of the President, the Office of the National Cyber [Director](/usc/6/677a.md?p=3) (in this section referred to as the “Office”).
- (b) **National Cyber Director—**
  - (1) **In general—** The Office shall be headed by the National Cyber [Director](/usc/6/677a.md?p=3) (in this section referred to as the “[Director](/usc/6/677a.md?p=3)”) who shall be appointed by the President, by and with the advice and consent of the Senate.
  - (2) **Position—** The [Director](/usc/6/677a.md?p=3) shall hold office at the pleasure of the President.
  - (3) **Pay and allowances—** The [Director](/usc/6/677a.md?p=3) shall be entitled to receive the same pay and allowances as are provided for level II of the Executive Schedule under [section 5313 of title 5](/usc/5/5313.md).
- (c) **Duties of the National Cyber Director—**
  - (1) **In general—** Subject to the authority, direction, and control of the President, the [Director](/usc/6/677a.md?p=3) shall—
    - (A) serve as the principal advisor to the President on cybersecurity policy and strategy relating to the coordination of—
      - (i) information security and data protection;
      - (ii) programs and policies intended to improve the cybersecurity posture of the [United States](/usc/6/101.md?p=19-A);
      - (iii) efforts to understand and deter malicious cyber activity;
      - (iv) efforts to increase the security of information and communications technology and services and to promote national supply chain risk management and vendor security;
      - (v) diplomatic and other efforts to develop norms and international consensus around responsible [state](/usc/6/101.md?p=17) behavior in cyberspace;
      - (vi) awareness and adoption of emerging technology that may enhance, augment, or degrade the cybersecurity posture of the [United States](/usc/6/101.md?p=19-A); and
      - (vii) such other cybersecurity matters as the President considers appropriate;
    - (B) offer advice and consultation to the National Security [Council](/usc/6/681.md?p=2) and its staff, the [Homeland](/usc/6/101.md?p=1) Security [Council](/usc/6/681.md?p=2) and its staff, and relevant Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/1501.md?p=1), for their consideration, relating to the development and coordination of national cyber policy and strategy, including the National Cyber Strategy;
    - (C) lead the coordination of implementation of national cyber policy and strategy, including the National Cyber Strategy, by—
      - (i) in coordination with the heads of relevant Federal [departments](/usc/6/101.md?p=5) or [agencies](/usc/6/1501.md?p=1), monitoring and assessing the effectiveness, including cost-effectiveness, of the implementation of such national cyber policy and strategy by Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/1501.md?p=1);
      - (ii) making recommendations, relevant to changes in the organization, [personnel](/usc/6/101.md?p=15), and resource allocation and to policies of Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/1501.md?p=1), to the heads of relevant Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/1501.md?p=1) in order to implement such national cyber policy and strategy;
      - (iii) reviewing the annual budget proposals for relevant Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/1501.md?p=1) and advising the heads of such [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/1501.md?p=1) whether such proposals are consistent with such national cyber policy and strategy;
      - (iv) continuously assessing and making relevant recommendations to the President on the appropriate level of integration and interoperability across the Federal cyber [centers](/usc/6/681.md?p=1);
      - (v) coordinating with the Attorney General, the Federal Chief Information Officer, the [Director](/usc/6/677a.md?p=3) of the Office of Management and Budget, the [Director](/usc/6/677a.md?p=3) of National Intelligence, and the [Director](/usc/6/677a.md?p=3) of the Cybersecurity and Infrastructure Security [Agency](/usc/6/1501.md?p=1), on the streamlining of Federal policies and guidelines, including with respect to implementation of subchapter II of [chapter 35](/usc/44/chch35.md) of title 44, and, as appropriate or applicable, regulations relating to cybersecurity;
      - (vi) reporting annually to the President, the Assistant to the President for National Security Affairs, and Congress on the [state](/usc/6/101.md?p=17) of the cybersecurity posture of the [United States](/usc/6/101.md?p=19-A), the effectiveness of such national cyber policy and strategy, and the status of the implementation of such national cyber policy and strategy by Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/1501.md?p=1); and
      - (vii) such other activity as the President considers appropriate to further such national cyber policy and strategy;
    - (D) lead coordination of the development and ensuring implementation by the Federal Government of integrated [incident](/usc/6/677a.md?p=6) response to cyberattacks and cyber campaigns of significant consequence, including—
      - (i) ensuring and facilitating coordination among relevant Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/1501.md?p=1) in the development of integrated operational plans, processes, and playbooks, including for [incident](/usc/6/677a.md?p=6) response, that feature—
        - (I) clear lines of authority and lines of effort across the Federal Government;
        - (II) authorities that have been delegated to an appropriate level to facilitate effective operational responses across the Federal Government; and
        - (III) support for the integration of defensive cyber plans and capabilities with offensive cyber plans and capabilities in a manner consistent with improving the cybersecurity posture of the [United States](/usc/6/101.md?p=19-A);
      - (ii) ensuring the exercising of defensive operational plans, processes, and playbooks for [incident](/usc/6/677a.md?p=6) response;
      - (iii) ensuring the updating of defensive operational plans, processes, and playbooks for [incident](/usc/6/677a.md?p=6) response as needed to keep them updated; and
      - (iv) reviewing and ensuring that defensive operational plans, processes, and playbooks improve coordination with relevant private sector [entities](/usc/6/301c.md?p=2), as appropriate;
    - (E) preparing the response by the Federal Government to cyberattacks and cyber campaigns of significant consequence across Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/1501.md?p=1) with responsibilities pertaining to cybersecurity and with the relevant private sector [entities](/usc/6/301c.md?p=2), including—
      - (i) developing for the approval of the President, in coordination with the Assistant to the President for National Security Affairs and the heads of relevant Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/1501.md?p=1), operational priorities, requirements, and plans;
      - (ii) ensuring [incident](/usc/6/677a.md?p=6) response is executed consistent with the plans described in [clause (i)](#c-1-E-i); and
      - (iii) ensuring relevant Federal [department](/usc/6/101.md?p=5) and [agency](/usc/6/1501.md?p=1) consultation with relevant private sector [entities](/usc/6/301c.md?p=2) in [incident](/usc/6/677a.md?p=6) response;
    - (F) coordinate and consult with private sector leaders on cybersecurity and emerging technology issues in support of, and in coordination with, the [Director](/usc/6/677a.md?p=3) of the Cybersecurity and Infrastructure Security [Agency](/usc/6/1501.md?p=1), the [Director](/usc/6/677a.md?p=3) of National Intelligence, and the heads of other Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/1501.md?p=1), as appropriate;
    - (G) annually report to Congress on [cybersecurity threats](/usc/6/1501.md?p=5) and issues facing the [United States](/usc/6/101.md?p=19-A), including any new or emerging technologies that may affect national security, economic prosperity, or enforcing the rule of law; and
    - (H) be responsible for such other [functions](/usc/6/101.md?p=9) as the President may direct.
  - (2) **Delegation of authority—**
    - (A) The [Director](/usc/6/677a.md?p=3) may—
      - (i) serve as the senior representative to any organization that the President may establish for the purpose of providing the President advice on cybersecurity;
      - (ii) subject to [subparagraph (B)](#c-2-B), be included as a participant in preparations for and, when appropriate, the execution of domestic and international summits and other international meetings at which cybersecurity is a major topic;
      - (iii) delegate any of the [Director](/usc/6/677a.md?p=3)’s [functions](/usc/6/101.md?p=9), powers, and duties to such officers and employees of the Office as the [Director](/usc/6/677a.md?p=3) considers appropriate; and
      - (iv) authorize such successive re-delegations of such [functions](/usc/6/101.md?p=9), powers, and duties to such officers and employees of the Office as the [Director](/usc/6/677a.md?p=3) considers appropriate.
    - (B) In acting under [subparagraph (A)(ii)](#c-2-A-ii) in the case of a summit or a meeting with an international partner, the [Director](/usc/6/677a.md?p=3) shall act in coordination with the Secretary of State.
- (d) **Omitted—**
- (e) **Powers of the Director—**
  - (1) **In general—** The [Director](/usc/6/677a.md?p=3) may, for the purposes of carrying out the [functions](/usc/6/101.md?p=9) of the [Director](/usc/6/677a.md?p=3) under this section—
    - (A) subject to the civil service and classification laws, select, appoint, employ, and fix the compensation of such officers and employees as are necessary and prescribe their duties, except that not more than 75 individuals may be employed without regard to any provision of law regulating the employment or compensation at rates not to exceed the basic rate of basic pay payable for level IV of the Executive Schedule under [section 5315 of title 5](/usc/5/5315.md);
    - (B) employ experts and consultants in accordance with [section 3109 of title 5](/usc/5/3109.md), and compensate individuals so employed for each day (including travel time) at rates not in excess of the maximum rate of basic pay for grade GS–15 as provided in [section 5332](/usc/5/5332.md) of such title, and while such experts and consultants are so serving away from their homes or regular place of business, to pay such employees travel expenses and per diem in lieu of subsistence at rates authorized by [section 5703](/usc/5/5703.md) of such [title 5](/usc/5.md) for persons in Federal Government service employed intermittently;
    - (C) accept officers or employees of the [United States](/usc/6/101.md?p=19-A) or members of the Armed Forces on a detail from an element of the intelligence community (as such term is defined in [section 3003(4) of title 50](/usc/50/3003.md?p=4)) or from another element of the Federal Government on a nonreimbursable basis, as jointly agreed to by the heads of the receiving and detailing elements, for a period not to exceed three years;
    - (D) promulgate such rules and regulations as may be necessary to carry out the [functions](/usc/6/101.md?p=9), powers, and duties vested in the [Director](/usc/6/677a.md?p=3);
    - (E) utilize, with their consent, the services, [personnel](/usc/6/101.md?p=15), and facilities of other [Federal agencies](/usc/6/677a.md?p=4);
    - (F) enter into and perform such contracts, leases, cooperative agreements, or other transactions as may be necessary in the conduct of the work of the Office and on such terms as the [Director](/usc/6/677a.md?p=3) may determine appropriate, with any [Federal agency](/usc/6/677a.md?p=4), or with any public or private person or [entity](/usc/6/301c.md?p=2);
    - (G) accept [voluntary](/usc/6/671.md?p=6-A) and uncompensated services, notwithstanding the provisions of [section 1342 of title 31](/usc/31/1342.md);
    - (H) adopt an official seal, which shall be judicially noticed; and
    - (I) provide, where authorized by law, copies of documents to persons at cost, except that any [funds](/usc/6/677a.md?p=5) so received shall be credited to, and be available for use from, the account from which expenditures relating thereto were made.
  - (2) **Rules of construction regarding details—** Nothing in [paragraph (1)(C)](#e-1-C) may be construed as imposing any limitation on any other authority for reimbursable or nonreimbursable details. A nonreimbursable detail made pursuant to such paragraph shall not be considered an augmentation of the appropriations of the receiving element of the Office of the National Cyber [Director](/usc/6/677a.md?p=3).
- (f) **Rules of construction—** Nothing in this section may be construed as—
  - (1) modifying any authority or responsibility, including any operational authority or responsibility of any head of a Federal [department](/usc/6/101.md?p=5) or [agency](/usc/6/1501.md?p=1);
  - (2) authorizing the [Director](/usc/6/677a.md?p=3) or any person acting under the authority of the [Director](/usc/6/677a.md?p=3) to interfere with or to direct a criminal or national security investigation, arrest, search, seizure, or disruption operation;
  - (3) amending a legal restriction that was in effect on the day before January 1, 2021 that requires a law enforcement [agency](/usc/6/1501.md?p=1) to keep confidential information learned in the course of a criminal or national security investigation;
  - (4) authorizing the [Director](/usc/6/677a.md?p=3) or any person acting under the authority of the [Director](/usc/6/677a.md?p=3) to interfere with or to direct a military operation;
  - (5) authorizing the [Director](/usc/6/677a.md?p=3) or any person acting under the authority of the [Director](/usc/6/677a.md?p=3) to interfere with or to direct any diplomatic or consular activity;
  - (6) authorizing the [Director](/usc/6/677a.md?p=3) or any person acting under the authority of the [Director](/usc/6/677a.md?p=3) to interfere with or to direct an intelligence activity, resource, or operation; or
  - (7) authorizing the [Director](/usc/6/677a.md?p=3) or any person acting under the authority of the [Director](/usc/6/677a.md?p=3) to modify the classification of intelligence information.
- (g) **Definitions—** In this section:
  - (1) The term “cybersecurity posture” means the ability to identify, to protect against, to detect, to respond to, and to recover from an intrusion in an [information system](/usc/6/1501.md?p=9) the compromise of which could constitute a cyber attack or cyber campaign of significant consequence.
  - (2) The term “cyber attack and cyber campaign of significant consequence” means an [incident](/usc/6/677a.md?p=6) or series of [incidents](/usc/6/677a.md?p=6) that has the purpose or effect of—
    - (A) causing a significant disruption to the confidentiality, integrity, or availability of a Federal [information system](/usc/6/1501.md?p=9);
    - (B) harming, or otherwise significantly compromising the provision of service by, a computer or network of computers that support one or more [entities](/usc/6/301c.md?p=2) in a [critical infrastructure](/usc/6/101.md?p=4) sector;
    - (C) significantly compromising the provision of services by one or more [entities](/usc/6/301c.md?p=2) in a [critical infrastructure](/usc/6/101.md?p=4) sector;
    - (D) causing a significant misappropriation of [funds](/usc/6/677a.md?p=5) or economic resources, trade secrets, personal identifiers, or financial information for commercial or competitive advantage or private financial gain; or
    - (E) otherwise constituting a significant threat to the national security, foreign policy, or economic health or financial stability of the [United States](/usc/6/101.md?p=19-A).
  - (3) The term “[incident](/usc/6/677a.md?p=6)” has the meaning given such term in [section 3552 of title 44](/usc/44/3552.md).
  - (4) The term “[incident](/usc/6/677a.md?p=6) response” means a government or private sector activity that detects, mitigates, or recovers from a cyber attack or cyber campaign of significant consequence.
  - (5) The term “information security” has the meaning given such term in [section 3552 of title 44](/usc/44/3552.md).
  - (6) The term “intelligence” has the meaning given such term in [section 3003 of title 50](/usc/50/3003.md).

## Source credit

(Pub. L. 116–283, div. A, title XVII, § 1752, Jan. 1, 2021, 134 Stat. 4144; Pub. L. 117–81, div. A, title XV, § 1552, Dec. 27, 2021, 135 Stat. 2070.)

## Notes

### Editorial Notes

### Codification

Section was enacted as part of the William M. (Mac) Thornberry National Defense Authorization Act for Fiscal Year 2021, and not as part of the Cybersecurity Information Sharing Act of 2015 which comprises this subchapter and not as part of the Cybersecurity Act of 2015 which comprises this chapter.

Section is comprised of section 1752 of Pub. L. 116–283. Subsec. (d) of section 1752 of Pub. L. 116–283 amended section 3021 of Title 50, War and National Defense.

### Amendments

2021—Subsec. (e). Pub. L. 117–81, § 1552(1), (2), (4), designated existing provisions as par. (1) and inserted heading, redesignated former pars. (1) to (8) as subpars. (A) to (H), respectively, of par. (1) and realigned margins, and added par. (2).

Subsec. (e)(1)(C) to (I). Pub. L. 117–81, § 1552(3), added subpar. (C) and redesignated former subpars. (C) to (H) (as redesignated by section 1552(1) of Pub. L. 117–81, see above) as (D) to (I), respectively.

### Statutory Notes and Related Subsidiaries

### Short Title of 2022 Amendment

Pub. L. 117–260, § 1, Dec. 21, 2022, 136 Stat. 2389, provided that: “This Act [enacting section 1526 of this title and provisions set out as notes under section 1526 of this title] may be cited as the ‘Quantum Computing Cybersecurity Preparedness Act’.”