---
kind: "section"
citation: "6 U.S.C. § 677c"
title: "6"
title_heading: "Domestic Security"
number: "677c"
heading: "Cyber Response and Recovery Fund"
release: "119-102"
date: "2026-07-12"
url: "https://uscodex.org/usc/6/677c"
units:
  - "Chapter 1 — Homeland Security Organization"
  - "Subchapter XVIII — Cybersecurity and Infrastructure Security Agency"
  - "Part C — Declaration of a Significant Incident"
---

# §677c. Cyber Response and Recovery Fund

- (a) **In general—** There is established a Cyber Response and Recovery [Fund](/usc/6/677a.md?p=5), which shall be available for—
  - (1) the coordination of activities described in [section 677b(b) of this title](/usc/6/677b.md?p=b);
  - (2) response and recovery support for the specific [significant incident](/usc/6/677a.md?p=8) associated with a [declaration](/usc/6/677a.md?p=2) to Federal, [State](/usc/6/101.md?p=17), local, and Tribal, [entities](/usc/6/301c.md?p=2) and public and private [entities](/usc/6/301c.md?p=2) on a reimbursable or non-reimbursable basis, including through [asset response activities](/usc/6/677a.md?p=1) and technical assistance, such as—
    - (A) vulnerability assessments and mitigation;
    - (B) technical [incident](/usc/6/650.md?p=12) mitigation;
    - (C) malware analysis;
    - (D) analytic support;
    - (E) threat detection and hunting; and
    - (F) network protections;
  - (3) as the [Director](/usc/6/650.md?p=10) determines appropriate, grants for, or cooperative agreements with, Federal, [State](/usc/6/101.md?p=17), local, and Tribal public and private [entities](/usc/6/301c.md?p=2) to respond to, and recover from, the specific [significant incident](/usc/6/677a.md?p=8) associated with a [declaration](/usc/6/677a.md?p=2), such as—
    - (A) hardware or software to replace, update, improve, harden, or enhance the functionality of existing hardware, software, or systems; and
    - (B) technical contract [personnel](/usc/6/101.md?p=15) support; and
  - (4) advance actions taken by the [Secretary](/usc/6/641.md?p=3) under [section 677b(f)(1)(B) of this title](/usc/6/677b.md?p=f-1-B).
- (b) **Deposits and expenditures—**
  - (1) **In general—** Amounts shall be deposited into the [Fund](/usc/6/677a.md?p=5) from—
    - (A) appropriations to the [Fund](/usc/6/677a.md?p=5) for activities of the [Fund](/usc/6/677a.md?p=5); and
    - (B) reimbursement from [Federal agencies](/usc/6/677a.md?p=4) for the activities described in paragraphs [(1)](#a-1), [(2)](#a-2), and [(4)](#a-4) of subsection (a), which shall only be from amounts made available in advance in appropriations Acts for such reimbursement.
  - (2) **Expenditures—** Any expenditure from the [Fund](/usc/6/677a.md?p=5) for the purposes of this part shall be made from amounts available in the [Fund](/usc/6/677a.md?p=5) from a deposit described in [paragraph (1)](#b-1), and amounts available in the [Fund](/usc/6/677a.md?p=5) shall be in addition to any other appropriations available to the Cybersecurity and Infrastructure Security [Agency](/usc/6/650.md?p=1) for such purposes.
- (c) **Supplement not supplant—** Amounts in the [Fund](/usc/6/677a.md?p=5) shall be used to supplement, not supplant, other Federal, [State](/usc/6/101.md?p=17), local, or Tribal funding for activities in response to a [declaration](/usc/6/677a.md?p=2).
- (d) **Reporting—** The [Secretary](/usc/6/641.md?p=3) shall require an [entity](/usc/6/301c.md?p=2) that receives amounts from the [Fund](/usc/6/677a.md?p=5) to submit a report to the [Secretary](/usc/6/641.md?p=3) that details the specific use of the amounts.

## Source credit

(Pub. L. 107–296, title XXII, § 2234, as added Pub. L. 117–58, div. G, title VI, § 70602(a), Nov. 15, 2021, 135 Stat. 1270.)