---
kind: "section"
citation: "6 U.S.C. § 664"
title: "6"
title_heading: "Domestic Security"
number: "664"
heading: "National asset database"
release: "119-102"
date: "2026-07-12"
url: "https://uscodex.org/usc/6/664"
units:
  - "Chapter 1 — Homeland Security Organization"
  - "Subchapter XVIII — Cybersecurity and Infrastructure Security Agency"
  - "Part A — Cybersecurity and Infrastructure Security"
---

# §664. National asset database

- (a) **Establishment—**
  - (1) **National asset database—** The [Secretary](/usc/6/641.md?p=3) shall establish and maintain a national database of each system or asset that—
    - (A) the [Secretary](/usc/6/641.md?p=3), in consultation with appropriate [homeland](/usc/6/101.md?p=1) security officials of the [States](/usc/6/101.md?p=17), determines to be vital and the [loss](/usc/6/444.md?p=5), interruption, incapacity, or destruction of which would have a negative or debilitating effect on the economic security, public health, or safety of the [United States](/usc/6/101.md?p=19-A), any [State](/usc/6/101.md?p=17), or any [local government](/usc/6/101.md?p=13); or
    - (B) the [Secretary](/usc/6/641.md?p=3) determines is appropriate for inclusion in the database.
  - (2) **Prioritized critical infrastructure list—** In accordance with [Homeland](/usc/6/101.md?p=1) Security Presidential Directive–7, as in effect on January 1, 2007, the [Secretary](/usc/6/641.md?p=3) shall establish and maintain a single classified prioritized list of systems and [assets](/usc/6/101.md?p=3) included in the database under [paragraph (1)](#a-1) that the [Secretary](/usc/6/641.md?p=3) determines would, if destroyed or disrupted, cause national or regional catastrophic effects.
- (b) **Use of database—** The [Secretary](/usc/6/641.md?p=3) shall use the database established under [subsection (a)(1)](#a-1) in the development and implementation of [Department](/usc/6/641.md?p=1) plans and programs as appropriate.
- (c) **Maintenance of database—**
  - (1) **In general—** The [Secretary](/usc/6/641.md?p=3) shall maintain and annually update the database established under [subsection (a)(1)](#a-1) and the list established under [subsection (a)(2)](#a-2), including—
    - (A) establishing data collection guidelines and providing such guidelines to the appropriate [homeland](/usc/6/101.md?p=1) security official of each [State](/usc/6/101.md?p=17);
    - (B) regularly reviewing the guidelines established under [subparagraph (A)](#c-1-A), including by consulting with the appropriate [homeland](/usc/6/101.md?p=1) security officials of [States](/usc/6/101.md?p=17), to solicit feedback about the guidelines, as appropriate;
    - (C) after providing the [homeland](/usc/6/101.md?p=1) security official of a [State](/usc/6/101.md?p=17) with the guidelines under [subparagraph (A)](#c-1-A), allowing the official a reasonable amount of time to submit to the [Secretary](/usc/6/641.md?p=3) any data submissions recommended by the official for inclusion in the database established under [subsection (a)(1)](#a-1);
    - (D) examining the contents and identifying any submissions made by such an official that are described incorrectly or that do not meet the guidelines established under [subparagraph (A)](#c-1-A); and
    - (E) providing to the appropriate [homeland](/usc/6/101.md?p=1) security official of each relevant [State](/usc/6/101.md?p=17) a list of submissions identified under [subparagraph (D)](#c-1-D) for review and possible correction before the [Secretary](/usc/6/641.md?p=3) finalizes the decision of which submissions will be included in the database established under [subsection (a)(1)](#a-1).
  - (2) **Organization of information in database—** The [Secretary](/usc/6/641.md?p=3) shall organize the contents of the database established under [subsection (a)(1)](#a-1) and the list established under [subsection (a)(2)](#a-2) as the [Secretary](/usc/6/641.md?p=3) determines is appropriate. Any organizational structure of such contents shall include the categorization of the contents—
    - (A) according to the sectors listed in National Infrastructure Protection Plan developed pursuant to [Homeland](/usc/6/101.md?p=1) Security Presidential Directive–7; and
    - (B) by the [State](/usc/6/101.md?p=17) and county of their location.
  - (3) **Private sector integration—** The [Secretary](/usc/6/641.md?p=3) shall identify and evaluate methods, including the [Department](/usc/6/641.md?p=1)’s Protected [Critical Infrastructure Information](/usc/6/650.md?p=4) Program, to acquire relevant private sector information for the purpose of using that information to generate any database or list, including the database established under [subsection (a)(1)](#a-1) and the list established under [subsection (a)(2)](#a-2).
  - (4) **Retention of classification—** The classification of information required to be provided to Congress, the [Department](/usc/6/641.md?p=1), or any other [department](/usc/6/641.md?p=1) or [agency](/usc/6/650.md?p=1) under this section by a [Sector Risk Management Agency](/usc/6/650.md?p=23), including the assignment of a level of classification of such information, shall be binding on Congress, the [Department](/usc/6/641.md?p=1), and that other [Federal agency](/usc/6/677a.md?p=4).
- (d) **Reports—**
  - (1) **Report required—** Not later than 180 days after August 3, 2007, and annually thereafter, the [Secretary](/usc/6/641.md?p=3) shall submit to the Committee on [Homeland](/usc/6/101.md?p=1) Security and Governmental Affairs of the Senate and the Committee on [Homeland](/usc/6/101.md?p=1) Security of the House of Representatives a report on the database established under [subsection (a)(1)](#a-1) and the list established under [subsection (a)(2)](#a-2).
  - (2) **Contents of report—** Each such report shall include the following:
    - (A) The name, location, and sector classification of each of the systems and [assets](/usc/6/101.md?p=3) on the list established under [subsection (a)(2)](#a-2).
    - (B) The name, location, and sector classification of each of the systems and [assets](/usc/6/101.md?p=3) on such list that are determined by the [Secretary](/usc/6/641.md?p=3) to be most at risk to [terrorism](/usc/6/101.md?p=18).
    - (C) Any significant challenges in compiling the list of the systems and [assets](/usc/6/101.md?p=3) included on such list or in the database established under [subsection (a)(1)](#a-1).
    - (D) Any significant changes from the preceding report in the systems and [assets](/usc/6/101.md?p=3) included on such list or in such database.
    - (E) If appropriate, the extent to which such database and such list have been used, individually or jointly, for allocating [funds](/usc/6/677a.md?p=5) by the Federal Government to prevent, reduce, mitigate, or respond to acts of [terrorism](/usc/6/101.md?p=18).
    - (F) The amount of coordination between the [Department](/usc/6/641.md?p=1) and the private sector, through any [entity](/usc/6/301c.md?p=2) of the [Department](/usc/6/641.md?p=1) that meets with representatives of private sector industries for purposes of such coordination, for the purpose of ensuring the accuracy of such database and such list.
    - (G) Any other information the [Secretary](/usc/6/641.md?p=3) deems relevant.
  - (3) **Classified information—** The report shall be submitted in unclassified form but may contain a classified annex.
- (e) **National Infrastructure Protection Consortium—** The [Secretary](/usc/6/641.md?p=3) may establish a consortium to be known as the “National Infrastructure Protection Consortium”. The Consortium may advise the [Secretary](/usc/6/641.md?p=3) on the best way to identify, generate, organize, and maintain any database or list of systems and [assets](/usc/6/101.md?p=3) established by the [Secretary](/usc/6/641.md?p=3), including the database established under [subsection (a)(1)](#a-1) and the list established under [subsection (a)(2)](#a-2). If the [Secretary](/usc/6/641.md?p=3) establishes the National Infrastructure Protection Consortium, the Consortium may—
  - (1) be composed of national laboratories, [Federal agencies](/usc/6/677a.md?p=4), [State](/usc/6/101.md?p=17) and local [homeland](/usc/6/101.md?p=1) security organizations, academic institutions, or national [Centers](/usc/6/681.md?p=1) of Excellence that have demonstrated experience working with and identifying [critical infrastructure](/usc/6/101.md?p=4) and [key resources](/usc/6/101.md?p=12); and
  - (2) provide input to the [Secretary](/usc/6/641.md?p=3) on any request pertaining to the contents of such database or such list.

## Source credit

(Pub. L. 107–296, title XXII, § 2214, formerly title II, § 210E, as added Pub. L. 110–53, title X, § 1001(a), Aug. 3, 2007, 121 Stat. 372; renumbered title XXII, § 2214, and amended Pub. L. 115–278, § 2(g)(2)(G), (9)(A)(viii), Nov. 16, 2018, 132 Stat. 4178, 4181; Pub. L. 116–283, div. H, title XC, § 9002(c)(2)(E), Jan. 1, 2021, 134 Stat. 4773.)

## Notes

### Editorial Notes

### Codification

Section was formerly classified to section 124l of this title prior to renumbering by Pub. L. 115–278.

### Amendments

2021—Subsec. (c)(4). Pub. L. 116–283 substituted “Sector Risk Management Agency” for “sector-specific agency”.

2018—Subsecs. (e), (f). Pub. L. 115–278, § 2(g)(9)(A)(viii), redesignated subsec. (f) as (e) and struck out former subsec. (e). Prior to amendment, text of subsec. (e) read as follows: “By not later than two years after August 3, 2007, the Inspector General of the Department shall conduct a study of the implementation of this section.”