Skip to content

Title 6 — Domestic Security

Part A · Chapter 1 — Homeland Security Organization

§ 661. Cybersecurity strategy

Statutory text

(a)

In general

Not later than 90 days after , the Secretary shall develop a departmental strategy to carry out cybersecurity responsibilities as set forth in law.

(b)

Contents

The strategy required under subsection (a) shall include the following:

(1)

Strategic and operational goals and priorities to successfully execute the full range of the Secretary’s cybersecurity responsibilities.

(2)

Information on the programs, policies, and activities that are required to successfully execute the full range of the Secretary’s cybersecurity responsibilities, including programs, policies, and activities in furtherance of the following:

(A)

Cybersecurity functions set forth in section 659 of this title (relating to the national cybersecurity and communications integration center).

(B)

Cybersecurity investigations capabilities.

(C)

Cybersecurity research and development.

(D)

Engagement with international cybersecurity partners.

(c)

Considerations

In developing the strategy required under subsection (a), the Secretary shall—

(1)

consider—

(A)

the cybersecurity strategy for the Homeland Security Enterprise published by the Secretary in November 2011;

(B)

the Department of Homeland Security Fiscal Years 2014–2018 Strategic Plan; and

(C)

the most recent Quadrennial Homeland Security Review issued pursuant to section 347 of this title; and

(2)

include information on the roles and responsibilities of components and offices of the Department, to the extent practicable, to carry out such strategy.

(d)

Implementation plan

Not later than 90 days after the development of the strategy required under subsection (a), the Secretary shall issue an implementation plan for the strategy that includes the following:

(1)

Strategic objectives and corresponding tasks.

(2)

Projected timelines and costs for such tasks.

(3)

Metrics to evaluate performance of such tasks.

(e)

Congressional oversight

The Secretary shall submit to Congress for assessment the following:

(1)

A copy of the strategy required under subsection (a) upon issuance.

(2)

A copy of the implementation plan required under subsection (d) upon issuance, together with detailed information on any associated legislative or budgetary proposals.

(f)

Classified information

The strategy required under subsection (a) shall be in an unclassified form but may contain a classified annex.

(g)

Rule of construction

Nothing in this section may be construed as permitting the Department to engage in monitoring, surveillance, exfiltration, or other collection activities for the purpose of tracking an individual’s personally identifiable information.

Legislative history

Reconstructed from this section’s Code source credit and amendment notes, resolved against the local Statutes at Large. Editorial notes are evidence, not the law that made the change.

  1. Homeland Security Act of 2002

    Pub. L. 107–296 title XXII § 2211 · 116 Stat. 2135

    Enacted · 6 U.S.C. § 661

    Pub. L. 107–296, title XXII, § 2211, formerly title II, § 228A, as added Pub. L. 114–328, div. A, title XIX, § 1912(a), Dec. 23, 2016, 130 Stat. 2683

    Source evidence

    Code source credit
    Pub. L. 107–296, title XXII, § 2211, formerly title II, § 228A, as added Pub. L. 114–328, div. A, title XIX, § 1912(a), Dec. 23, 2016, 130 Stat. 2683

  2. Cybersecurity and Infrastructure Security Agency Act of 2018

    Pub. L. 115–278 § 2(g)(9)(A)(v) · 132 Stat. 4168

    Substituted · 6 U.S.C. § 661(b)(2)(A)

    Pub. L. 115–278, § 2(g)(9)(A)(v), substituted “section 659 of this title” for “the section 148 of this title”

    Source evidence

    Code amendment note
    Subsec. (b)(2)(A). Pub. L. 115–278, § 2(g)(9)(A)(v), substituted “section 659 of this title” for “the section 148 of this title”.

    Enacted provision · exact public law section
    (v) in section 2211(b)(2)(A), as so redesignated, by striking “the section 227” and inserting “section 2209”;

  3. James M. Inhofe National Defense Authorization Act for Fiscal Year 2023

    Pub. L. 117–263 div. G title LXXI § 7143(b)(2)(F) · 136 Stat. 2395

    Struck · 6 U.S.C. § 661(h)

    Pub. L. 117–263 struck out subsec. (h). Text read as follows: “In this section, the term ‘Homeland Security Enterprise’ means relevant governmental and nongovernmental entities involved in homeland security, including Federal, State, local, and tribal government officials, private sector representatives, academics, and other policy experts.”

    Source evidence

    Code amendment note
    Subsec. (h). Pub. L. 117–263 struck out subsec. (h). Text read as follows: “In this section, the term ‘Homeland Security Enterprise’ means relevant governmental and nongovernmental entities involved in homeland security, including Federal, State, local, and tribal government officials, private sector representatives, academics, and other policy experts.”

    Enacted provision · exact public law section
    (F) in section 2211 (6 U.S.C. 661), by striking subsection (h);

2 of 3 references resolved to an enrolled provision · 1 partial

Editorial Notes

Codification

Section was formerly classified to section 149a of this title prior to renumbering by Pub. L. 115–278.

Amendments2018–2022 · 2 rounds

2022

Subsec. (h). Pub. L. 117–263 struck out subsec. (h). Text read as follows: “In this section, the term ‘Homeland Security Enterprise’ means relevant governmental and nongovernmental entities involved in homeland security, including Federal, State, local, and tribal government officials, private sector representatives, academics, and other policy experts.”

2018

Credits

2016–2022 · 3 acts
  1. 2016Pub. L. 107–296, title XXII, § 2211, formerly title II, § 228A, as added Pub. L. 114–328, div. A, title XIX, § 1912(a), , 130 Stat. 2683
  2. 2018renumbered title XXII, § 2211, and amended Pub. L. 115–278, § 2(g)(2)(I), (9)(A)(v), , 132 Stat. 4178, 4181
  3. 2022Pub. L. 117–263, div. G, title LXXI, § 7143(b)(2)(F), , 136 Stat. 3660.
Show as published

(Pub. L. 107–296, title XXII, § 2211, formerly title II, § 228A, as added Pub. L. 114–328, div. A, title XIX, § 1912(a), , 130 Stat. 2683; renumbered title XXII, § 2211, and amended Pub. L. 115–278, § 2(g)(2)(I), (9)(A)(v), , 132 Stat. 4178, 4181; Pub. L. 117–263, div. G, title LXXI, § 7143(b)(2)(F), , 136 Stat. 3660.)

Parsed from the official OLRC USLM XML in data/usc_all/usc06.xml · release point 119-108 · OLRC build 2026-09-09

USLM identifier /us/usc/t6/s661