---
kind: "section"
citation: "6 U.S.C. § 665b"
title: "6"
title_heading: "Domestic Security"
number: "665b"
heading: "Joint cyber planning office"
release: "119-102"
date: "2026-07-12"
url: "https://uscodex.org/usc/6/665b"
units:
  - "Chapter 1 — Homeland Security Organization"
  - "Subchapter XVIII — Cybersecurity and Infrastructure Security Agency"
  - "Part A — Cybersecurity and Infrastructure Security"
---

# §665b. Joint cyber planning office

- (a) **Establishment of Office—** There is established in the [Agency](/usc/6/650.md?p=1) an office for joint cyber planning (in this section referred to as the “Office”) to develop, for public and private sector [entities](/usc/6/301c.md?p=2), plans for cyber defense operations, including the development of a set of coordinated actions to protect, detect, respond to, and recover from [cybersecurity risks](/usc/6/650.md?p=7) or [incidents](/usc/6/650.md?p=12) or limit, mitigate, or defend against coordinated, malicious cyber operations that pose a potential risk to [critical infrastructure](/usc/6/101.md?p=4) or national interests. The Office shall be headed by a senior official of the [Agency](/usc/6/650.md?p=1) selected by the [Director](/usc/6/650.md?p=10).
- (b) **Planning and execution—** In leading the development of plans for cyber defense operations pursuant to [subsection (a)](#a), the head of the Office shall—
  - (1) coordinate with relevant Federal [departments](/usc/6/641.md?p=1) and [agencies](/usc/6/650.md?p=1) to establish processes and procedures necessary to develop and maintain ongoing coordinated plans for cyber defense operations;
  - (2) leverage cyber capabilities and authorities of participating Federal [departments](/usc/6/641.md?p=1) and [agencies](/usc/6/650.md?p=1), as appropriate, in furtherance of plans for cyber defense operations;
  - (3) ensure that plans for cyber defense operations are, to the greatest extent practicable, developed in collaboration with relevant private sector [entities](/usc/6/301c.md?p=2), particularly in areas in which such [entities](/usc/6/301c.md?p=2) have comparative advantages in limiting, mitigating, or defending against a [cybersecurity risk](/usc/6/650.md?p=7) or [incident](/usc/6/650.md?p=12) or coordinated, malicious cyber operation;
  - (4) ensure that plans for cyber defense operations, as appropriate, are responsive to potential adversary activity conducted in response to [United States](/usc/6/101.md?p=19-A) offensive cyber operations;
  - (5) facilitate the exercise of plans for cyber defense operations, including by developing and modeling scenarios based on an understanding of adversary threats to, vulnerability of, and potential consequences of disruption or compromise of [critical infrastructure](/usc/6/101.md?p=4);
  - (6) coordinate with and, as necessary, support relevant Federal [departments](/usc/6/641.md?p=1) and [agencies](/usc/6/650.md?p=1) in the establishment of procedures, development of additional plans, including for offensive and intelligence activities in support of cyber defense operations, and creation of agreements necessary for the rapid execution of plans for cyber defense operations when a [cybersecurity risk](/usc/6/650.md?p=7) or [incident](/usc/6/650.md?p=12) or malicious cyber operation has been identified; and
  - (7) support public and private sector [entities](/usc/6/301c.md?p=2), as appropriate, in the execution of plans developed pursuant to this section.
- (c) **Composition—** The Office shall be composed of—
  - (1) a central planning staff; and
  - (2) appropriate representatives of Federal [departments](/usc/6/641.md?p=1) and [agencies](/usc/6/650.md?p=1), including—
    - (A) the [Department](/usc/6/641.md?p=1);
    - (B) [United States](/usc/6/101.md?p=19-A) Cyber Command;
    - (C) the National Security [Agency](/usc/6/650.md?p=1);
    - (D) the Federal Bureau of Investigation;
    - (E) the [Department](/usc/6/641.md?p=1) of Justice; and
    - (F) the Office of the [Director](/usc/6/650.md?p=10) of National Intelligence.
- (d) **Consultation—** In carrying out its responsibilities described in [subsection (b)](#b), the Office shall regularly consult with appropriate representatives of non-[Federal entities](/usc/6/681.md?p=7), such as—
  - (1) [State](/usc/6/101.md?p=17), local, federally-recognized Tribal, and territorial governments;
  - (2) [Information Sharing and Analysis Organizations](/usc/6/650.md?p=13), including information [sharing](/usc/6/650.md?p=26) and analysis [centers](/usc/6/681.md?p=1);
  - (3) owners and operators of critical [information systems](/usc/6/650.md?p=14);
  - (4) private [entities](/usc/6/301c.md?p=2); and
  - (5) other appropriate representatives or [entities](/usc/6/301c.md?p=2), as determined by the [Secretary](/usc/6/641.md?p=3).
- (e) **Interagency agreements—** The [Secretary](/usc/6/641.md?p=3) and the head of a Federal [department](/usc/6/641.md?p=1) or [agency](/usc/6/650.md?p=1) referred to in [subsection (c)](#c) may enter into agreements for the purpose of detailing [personnel](/usc/6/101.md?p=15) on a reimbursable or non-reimbursable basis.
- (f) **Definitions—** In this section, the term “cyber defense operation” means the defensive activities performed for a [cybersecurity purpose](/usc/6/650.md?p=6).

## Source credit

(Pub. L. 107–296, title XXII, § 2216, formerly § 2215, as added Pub. L. 116–283, div. A, title XVII, § 1715(a), Jan. 1, 2021, 134 Stat. 4092; renumbered § 2216 and amended Pub. L. 117–81, div. A, title XV, § 1547(b)(1)(A)(iii), Dec. 27, 2021, 135 Stat. 2061; Pub. L. 117–263, div. G, title LXXI, § 7143(b)(2)(I), Dec. 23, 2022, 136 Stat. 3660.)

## Notes

### Editorial Notes

### Prior Provisions

A prior section 2216 of Pub. L. 107–296 was renumbered section 2219 and is classified to section 665e of this title.

### Amendments

2022—Subsec. (d)(2). Pub. L. 117–263, § 7143(b)(2)(I)(i), substituted “Information Sharing and Analysis Organizations” for “information sharing and analysis organizations”.

Subsec. (f). Pub. L. 117–263, § 7143(b)(2)(I)(ii), substituted “section, the term ‘cyber defense operation’ means the defensive activities performed for a cybersecurity purpose.” for “section:” and struck out pars. (1) to (4) which defined cyber defense operation, cybersecurity purpose, cybersecurity risk, incident, and information sharing and analysis organization.

2021—Pub. L. 117–81 reenacted section catchline.