WHAT THE LAW DOINCongress, in plain words

The law › Title 6, Domestic Security › Chapter 1

6 U.S.C. 659: National cybersecurity and communications integration center

Created in 2014 by the Homeland Security Act of 2002 (Public Law 107-296). Changed by 9 later laws. No bill we track in this Congress changes it.

7 other sections of the Code cite this one, including 6 U.S.C. 417, 6 U.S.C. 652, 6 U.S.C. 661, 6 U.S.C. 665d, 6 U.S.C. 681.

This Congress

No bill we track in the 119th Congress changes this section.

    How it got here

    2022

    • Pub. L. 117–263, §7143(b)(2)(D)(i), added subsec. (a) and struck out former subsec. (a) which defined cybersecurity purpose, cybersecurity risk, cyber threat indicator, defensive measure, cybersecurity vulnerability, incident, information sharing and analysis organization, information … (James M. Inhofe National Defense Authorization Act for Fiscal Year 2023) Law text · (a)
    • Pub. L. 117–263, §7143(b)(2)(D)(ii), inserted "Executive" before "Assistant Director for Cybersecurity". (James M. Inhofe National Defense Authorization Act for Fiscal Year 2023) Law text · (b)
    • Pub. L. 117–150, §2(2)(A), inserted "operational and" before "timely". Law text · (c)
    • Pub. L. 117–103 added par. (13). (Consolidated Appropriations Act, 2022) Law text · (c)
    • Pub. L. 117–263, §7143(b)(2)(D)(iii)(I), struck out ", as that term is defined under section 3003(4) of title 50" after "intelligence community". (James M. Inhofe National Defense Authorization Act for Fiscal Year 2023) Law text · (d)
    • Pub. L. 117–263, §7143(b)(2)(D)(iii)(II), substituted "Information Sharing and Analysis Organizations" for "information sharing and analysis organizations". (James M. Inhofe National Defense Authorization Act for Fiscal Year 2023) Law text · (d)
    • Pub. L. 117–150, §2(2)(B), inserted ", including an entity that collaborates with election officials," after "governments". Law text · (d)
    • Pub. L. 117–263, §7143(b)(2)(D)(iv), substituted "Information Sharing and Analysis Organizations" for "information sharing and analysis organizations". (James M. Inhofe National Defense Authorization Act for Fiscal Year 2023) Law text · (e)
    • Pub. L. 117–263, §7143(b)(2)(D)(v), redesignated subsec. (p) relating to coordination on cybersecurity for SLTT entities as (r). (James M. Inhofe National Defense Authorization Act for Fiscal Year 2023) Law text · (p)
    • Pub. L. 117–150, §2(2)(C), added subsec. (p) relating to coordination on cybersecurity for SLTT entities. Law text · (p)
    • Pub. L. 117–263, §7143(b)(2)(D)(vi), redesignated subsec. (q) relating to report as (s). (James M. Inhofe National Defense Authorization Act for Fiscal Year 2023) Law text · (q)
    • Pub. L. 117–150, §2(2)(C), added subsec. (q) relating to report. Law text · (q)
    • Pub. L. 117–263, §7143(b)(2)(D)(v), redesignated subsec. (p) relating to coordination on cybersecurity for SLTT entities as (r). (James M. Inhofe National Defense Authorization Act for Fiscal Year 2023) Law text · (r)
    • Pub. L. 117–263, §7143(b)(2)(D)(vi), redesignated subsec. (q) relating to report as (s). (James M. Inhofe National Defense Authorization Act for Fiscal Year 2023) Law text · (s)

    2021

    • Pub. L. 117–81, §1542(1), added par. (4) and redesignated former pars. (4) to (8) (as previously added or redesignated by Pub. L. 116–283) as (5) to (9), respectively. (National Defense Authorization Act for Fiscal Year 2022) Law text · (a)
    • Pub. L. 116–283, §1716(a)(1), added pars. (1) and (7) and redesignated former pars. (1) to (5) as (2) to (6), respectively, and former par. (6) as (8). (William M. (Mac) Thornberry National Defense Authorization Act for Fiscal Year 2021) Law text · (a)
    • Pub. L. 117–81, §1542(2)(A), added subpar. (B), redesignated former subpar. (B) as (C), and inserted in subpar. (C) as redesignated "and mitigation protocols to counter cybersecurity vulnerabilities in accordance with subparagraph (B), as appropriate," before "with Federal". (National Defense Authorization Act for Fiscal Year 2022) Law text · (c), (C)
    • Pub. L. 117–81, §1548(c), inserted ", which may take the form of continuous monitoring and detection of cybersecurity risks to critical infrastructure entities that own or operate industrial control systems that support national critical functions" after "mitigation, and remediation… (National Defense Authorization Act for Fiscal Year 2022) Law text · (c)
    • Pub. L. 117–81, §1542(2)(B), substituted "share" for "sharing". (National Defense Authorization Act for Fiscal Year 2022) Law text · (c)
    • Pub. L. 117–81, §1542(2)(C), inserted "mitigation protocols to counter cybersecurity vulnerabilities, as appropriate," after "measures,". (National Defense Authorization Act for Fiscal Year 2022) Law text · (c)
    • Pub. L. 116–283, §1716(a)(2), added par. (12). (William M. (Mac) Thornberry National Defense Authorization Act for Fiscal Year 2021) Law text · (c)
    • Pub. L. 117–81, §1541(a)(1), added subpar. (I). (National Defense Authorization Act for Fiscal Year 2022) Law text · (e)
    • Pub. L. 117–81, §1542(4), added subsec. (o). Former subsec. (o) redesignated (p) relating to subpoena authority. (National Defense Authorization Act for Fiscal Year 2022) Law text · (o)
    • Pub. L. 116–283, §1716(a)(3), added subsec. (o). (William M. (Mac) Thornberry National Defense Authorization Act for Fiscal Year 2021) Law text · (o)
    • Pub. L. 117–81, §1542(3), redesignated subsec. (o) as (p) relating to subpoena authority. (National Defense Authorization Act for Fiscal Year 2022) Law text · (p)
    • Pub. L. 117–81, §1541(a)(2), added subsec. (q) relating to industrial control systems. (National Defense Authorization Act for Fiscal Year 2022) Law text · (q)

    2019

    • Pub. L. 116–94, §102(a)(1), inserted ", including cybersecurity specialists" after "entities". (Further Consolidated Appropriations Act, 2020) Law text · (d)
    • Pub. L. 116–94, §102(a)(3), added subsec. (f). Former subsec. (f) redesignated (g). (Further Consolidated Appropriations Act, 2020) Law text · (f)
    • Pub. L. 116–94, §102(a)(2), redesignated subsec. (f) as (g). Former subsec. (g) redesignated (h). (Further Consolidated Appropriations Act, 2020) Law text · (g)
    • Pub. L. 116–94, §102(a)(4), inserted ", or any team or activity of the Center," after "Center". (Further Consolidated Appropriations Act, 2020) Law text · (g), (2)
    • Pub. L. 116–94, §102(a)(2), redesignated subsecs. (g) to (m) as (h) to (n), respectively. (Further Consolidated Appropriations Act, 2020) Law text · (h), (i), (j), (k), (l), (m), (n)

    2018

    • Pub. L. 115–278, §2(g)(9)(A)(iii)(I), substituted "Director" for "Under Secretary appointed under section 113(a)(1)(H) of this title" wherever appearing. (Cybersecurity and Infrastructure Security Agency Act of 2018) Law text
    • Pub. L. 115–278, §2(g)(9)(A)(iii)(II), substituted "section 671(5) of this title" for "section 131(5) of this title". (Cybersecurity and Infrastructure Security Agency Act of 2018) Law text · (a)
    • Pub. L. 115–278, §2(g)(9)(A)(iii)(III), inserted at end "The Center shall be located in the Cybersecurity and Infrastructure Security Agency. The head of the Center shall report to the Assistant Director for Cybersecurity." (Cybersecurity and Infrastructure Security Agency Act of 2018) Law text · (b)
    • Pub. L. 115–278, §2(g)(9)(A)(iii)(IV), substituted "Emergency Communications Division" for "Office of Emergency Communications". (Cybersecurity and Infrastructure Security Agency Act of 2018) Law text · (c)

    2016

    • Pub. L. 114–328 added subsec. (l) and redesignated former subsec. (l) as (m). (National Defense Authorization Act for Fiscal Year 2017) Law text · (l), (m)

    2015

    • Pub. L. 114–113, §203(1)(A), (B), added pars. (1) to (3), redesignated former pars. (3) and (4) as (4) and (5), respectively, and struck out former pars. (1) and (2), which defined "cybersecurity risk" and "incident", respectively. (Consolidated Appropriations Act, 2016) Law text · (a)
    • Pub. L. 114–113, §203(1)(C)–(E), added par. (6). (Consolidated Appropriations Act, 2016) Law text · (a)
    • Pub. L. 114–113, §203(2)(A), inserted "cyber threat indicators, defensive measures," before "cybersecurity risks" and ", including the implementation of title I of the Cybersecurity Act of 2015" before semicolon at end. (Consolidated Appropriations Act, 2016) Law text · (c)
    • Pub. L. 114–113, §203(2)(B), substituted "cyber threat indicators, defensive measures, cybersecurity risks," for "cybersecurity risks". (Consolidated Appropriations Act, 2016) Law text · (c)
    • Pub. L. 114–113, §203(2)(C), substituted "cyber threat indicators, defensive measures, cybersecurity risks," for "cybersecurity risks". (Consolidated Appropriations Act, 2016) Law text · (c)
    • Pub. L. 114–113, §203(2)(D), substituted "cyber threat indicators, defensive measures, cybersecurity risks," for "cybersecurity risks" and struck out "and" at end. (Consolidated Appropriations Act, 2016) Law text · (c)
    • Pub. L. 114–113, §203(2)(E), added subpar. (C). (Consolidated Appropriations Act, 2016) Law text · (c)
    • Pub. L. 114–113, §203(2)(F), added pars. (8) to (11). (Consolidated Appropriations Act, 2016) Law text · (c)
    • Pub. L. 114–113, §203(3)(A)(i), substituted ", local, and tribal" for "and local". (Consolidated Appropriations Act, 2016) Law text · (d)
    • Pub. L. 114–113, §203(3)(A)(ii), substituted ", including information sharing and analysis centers;" for "; and". (Consolidated Appropriations Act, 2016) Law text · (d)
    • Pub. L. 114–113, §203(3)(A)(iii), (iv), added cl. (iv). (Consolidated Appropriations Act, 2016) Law text · (d)
    • Pub. L. 114–113, §203(3)(B)–(D), added subpar. (E) and redesignated former subpar. (E) as (F). (Consolidated Appropriations Act, 2016) Law text · (d), (F)
    • Pub. L. 114–113, §203(4)(A)(i), inserted "cyber threat indicators, defensive measures, and" before "information". (Consolidated Appropriations Act, 2016) Law text · (e)
    • Pub. L. 114–113, §203(4)(A)(ii), inserted "cyber threat indicators, defensive measures, and" before "information related". (Consolidated Appropriations Act, 2016) Law text · (e)
    • Pub. L. 114–113, §203(4)(A)(iii), substituted "cyber threat indicators, defensive measures, cybersecurity risks," for "cybersecurity risks" and struck out "and" at end. (Consolidated Appropriations Act, 2016) Law text · (e)
    • Pub. L. 114–113, §203(4)(A)(iv), substituted "cyber threat indicators, defensive measures, cybersecurity risks, and incidents; and" for "cybersecurity risks and incidents". (Consolidated Appropriations Act, 2016) Law text · (e)
    • Pub. L. 114–113, §203(4)(A)(v), added subpar. (H). (Consolidated Appropriations Act, 2016) Law text · (e)
    • Pub. L. 114–113, §203(4)(B), substituted "cyber threat indicators, defensive measures, cybersecurity risks," for "cybersecurity risks" and inserted "or disclosure" after "access". (Consolidated Appropriations Act, 2016) Law text · (e)
    • Pub. L. 114–113, §203(4)(C), inserted ", including by working with the Privacy Officer appointed under section 142 of this title to ensure that the Center follows the policies and procedures specified in subsections (b) and (d)(5)(C) of section 105 of the Cybersecurity Act of 2015" … (Consolidated Appropriations Act, 2016) Law text · (e)
    • Pub. L. 114–113, §203(5), added subsecs. (g) to (l). (Consolidated Appropriations Act, 2016) Law text · (g), (h), (i), (j), (k), (l)

    Text, outline and history from the official U.S. Code (2024 edition) on GovInfo, published by the Office of the Law Revision Counsel. Changes made after that edition appear under This Congress.