---
kind: "section"
citation: "6 U.S.C. § 1501"
title: "6"
title_heading: "Domestic Security"
number: "1501"
heading: "Definitions"
release: "119-102"
date: "2026-07-12"
url: "https://uscodex.org/usc/6/1501"
units:
  - "Chapter 6 — Cybersecurity"
  - "Subchapter I — Cybersecurity Information Sharing"
---

# §1501. Definitions


In this subchapter:

- (1) **Agency—** The term “agency” has the meaning given the term in [section 3502 of title 44](/usc/44/3502.md).
- (2) **Antitrust laws—** The term “antitrust laws”—
  - (A) has the meaning given the term in [section 12 of title 15](/usc/15/12.md);
  - (B) includes [section 45 of title 15](/usc/15/45.md) to the extent that [section 45 of title 15](/usc/15/45.md) applies to unfair methods of competition; and
  - (C) includes any [State](/usc/6/101.md?p=17) antitrust law, but only to the extent that such law is consistent with the law referred to in [subparagraph (A)](#2-A) or the law referred to in [subparagraph (B)](#2-B).
- (3) **Appropriate Federal entities—** The term “appropriate Federal entities” means the following:
  - (A) The [Department](/usc/6/101.md?p=5) of Commerce.
  - (B) The [Department](/usc/6/101.md?p=5) of Defense.
  - (C) The [Department](/usc/6/101.md?p=5) of Energy.
  - (D) The [Department](/usc/6/101.md?p=5) of [Homeland](/usc/6/101.md?p=1) Security.
  - (E) The [Department](/usc/6/101.md?p=5) of Justice.
  - (F) The [Department](/usc/6/101.md?p=5) of the Treasury.
  - (G) The Office of the [Director](/usc/6/677a.md?p=3) of National Intelligence.
- (4) **Cybersecurity purpose—** The term “cybersecurity purpose” has the meaning given the term in [section 650 of this title](/usc/6/650.md).
- (5) **Cybersecurity threat—** The term “cybersecurity threat” has the meaning given the term in [section 650 of this title](/usc/6/650.md).
- (6) **Cyber threat indicator—** The term “cyber threat indicator” has the meaning given the term in [section 650 of this title](/usc/6/650.md).
- (7) **Defensive measure—** The term “defensive measure” has the meaning given the term in [section 650 of this title](/usc/6/650.md).
- (8) **Federal entity—** The term “Federal entity” means a [department](/usc/6/101.md?p=5) or [agency](#1) of the [United States](/usc/6/101.md?p=19-A) or any component of such [department](/usc/6/101.md?p=5) or [agency](#1).
- (9) **Information system—** The term “information system” has the meaning given the term in [section 650 of this title](/usc/6/650.md).
- (10) **Local government—** The term “local government” means any borough, city, county, parish, town, township, village, or other political subdivision of a [State](/usc/6/101.md?p=17).
- (11) **Malicious cyber command and control—** The term “malicious cyber command and control” has the meaning given the term in [section 650 of this title](/usc/6/650.md).
- (12) **Malicious reconnaissance—** The term “malicious reconnaissance” has the meaning given the term in [section 650 of this title](/usc/6/650.md).
- (13) **Monitor—** The term “monitor” has the meaning given the term in [section 650 of this title](/usc/6/650.md).
- (14) **Non-Federal entity—**
  - (A) **In general—** Except as otherwise provided in this paragraph, the term “non-Federal entity” means any [private entity](#15-A), non-Federal government [agency](#1) or [department](/usc/6/101.md?p=5), or [State](/usc/6/101.md?p=17), [tribal](#18), or [local government](#10) (including a political subdivision, [department](/usc/6/101.md?p=5), or component thereof).
  - (B) **Inclusions—** The term “[non-Federal entity](#14-A)” includes a government [agency](#1) or [department](/usc/6/101.md?p=5) of the District of Columbia, the Commonwealth of Puerto Rico, the [United States](/usc/6/101.md?p=19-A) Virgin Islands, Guam, American Samoa, the Northern Mariana Islands, and any other territory or possession of the [United States](/usc/6/101.md?p=19-A).
  - (C) **Exclusion—** The term “[non-Federal entity](#14-A)” does not include a foreign power as defined in [section 1801 of title 50](/usc/50/1801.md).
- (15) **Private entity—**
  - (A) **In general—** Except as otherwise provided in this paragraph, the term “private entity” means any person or private group, organization, proprietorship, partnership, trust, cooperative, corporation, or other commercial or nonprofit [entity](/usc/6/301c.md?p=2), including an officer, employee, or agent thereof.
  - (B) **Inclusion—** The term “[private entity](#15-A)” includes a [State](/usc/6/101.md?p=17), [tribal](#18), or [local government](#10) performing utility services, such as electric, natural gas, or water services.
  - (C) **Exclusion—** The term “[private entity](#15-A)” does not include a foreign power as defined in [section 1801 of title 50](/usc/50/1801.md).
- (16) **Security control—** The term “security control” has the meaning given the term in [section 650 of this title](/usc/6/650.md).
- (17) **Security vulnerability—** The term “security vulnerability” has the meaning given the term in [section 650 of this title](/usc/6/650.md).
- (18) **Tribal—** The term “tribal” has the meaning given the term “Indian tribe” in [section 5304 of title 25](/usc/25/5304.md).

## Source credit

(Pub. L. 114–113, div. N, title I, § 102, Dec. 18, 2015, 129 Stat. 2936; Pub. L. 117–263, div. G, title LXXI, § 7143(b)(4), Dec. 23, 2022, 136 Stat. 3661.)

## Notes

### Editorial Notes

### Amendments

2022—Pars. (4) to (7). Pub. L. 117–263, § 7143(b)(4)(A), added pars. (4) to (7) and struck out former pars. (4) to (7) which defined cybersecurity purpose, cybersecurity threat, cyber threat indicator, and defensive measure, respectively.

Par. (9). Pub. L. 117–263, § 7143(b)(4)(B), added par. (9) and struck out former par. (9) which defined information system.

Pars. (11) to (13). Pub. L. 117–263, § 7143(b)(4)(C), added pars. (11) to (13) and struck out former pars. (11) to (13) which defined malicious cyber command and control, malicious reconnaissance, and monitor, respectively.

Pars. (16), (17). Pub. L. 117–263, § 7143(b)(4)(D), added pars. (16) and (17) and struck out former pars. (16) and (17) which defined security control and security vulnerability, respectively.

### Statutory Notes and Related Subsidiaries

### Short Title

Pub. L. 114–113, div. N, § 1(a), Dec. 18, 2015, 129 Stat. 2935, provided that: “This division [enacting this chapter and sections 149 and 151 of this title, amending sections 131, 148, 149, and 150 of this title, section 1029 of Title 18, Crimes and Criminal Procedure, and sections 3553 and 3554 of Title 44, Public Printing and Documents, enacting provisions set out as notes under this section and sections 101, 131, and 151 of this title and section 301 of Title 5, Government Organization and Employees] may be cited as the ‘Cybersecurity Act of 2015’.”

Pub. L. 114–113, div. N, title I, § 101, Dec. 18, 2015, 129 Stat. 2936, provided that: “This title [enacting this subchapter] may be cited as the ‘Cybersecurity Information Sharing Act of 2015’.”

Pub. L. 114–113, div. N, title II, § 221, Dec. 18, 2015, 129 Stat. 2963, provided that: “This subtitle [subtitle B (§§ 221–229) of title II of div. N of Pub. L. 114–113, enacting subchapter II of this chapter and sections 149 and 151 of this title, amending sections 148, 149, and 150 of this title and sections 3553 and 3554 of Title 44, Public Printing and Documents, and enacting provisions set out as a note under section 151 of this title] may be cited as the ‘Federal Cybersecurity Enhancement Act of 2015’.”