§652. Cybersecurity and Infrastructure Security Agency — Inbound Citations
6 U.S.C. § 652
Cited by 7 provisions in release 119-102.
Citations to 6 U.S.C. § 652 as a whole
-
In carrying out the responsibilities under section 652 of this title, the Director of the Cybersecurity and Infrastructure Security Agency shall—
Citations to §652(c)(4)
-
(A) review the current framework for securing critical infrastructure, as described in section 652(c)(4) of this title and Presidential Policy Directive 21; and
Citations to §652(c)(7)
-
(16) fully participate in the mechanisms required under section 652(c)(7) of this title.
-
(3) fully participate in the mechanisms required under section 652(c)(7) of this title; and
-
(3) fully participate in the mechanisms required under section 652(c)(7) of this title; and
Citations to §652(e)
-
(13) receiving, aggregating, and analyzing reports related to covered cyber incidents (as defined in section 681 of this title) submitted by covered entities (as defined in section 681 of this title) and reports related to ransom payments (as defined in section 681 of this title) submitted by covered entities (as defined in section 681 of this title) in furtherance of the activities specified in sections 652(e), 653, and 681a of this title, this subsection, and any other authorized activity of the Director, to enhance the situational awareness of cybersecurity threats across critical infrastructure sectors.
Citations to §652(h)
-
(c) Not later than 180 days after December 27, 2021, the Privacy Officer of the Agency under section 652(h) of this title shall—(1) review the policies, guidelines, and activities of CyberSentry for compliance with all applicable privacy laws, including such laws governing the acquisition, interception, retention, use, and disclosure of communities; and(2) submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report certifying compliance with all applicable privacy laws as referred to in paragraph (1), or identifying any instances of noncompliance with such privacy laws.