Title 6 — Domestic Security
Part A · Chapter 1 — Homeland Security Organization
§ 665b. Joint cyber planning office
Statutory text
Establishment of Office
There is established in the Agency an office for joint cyber planning (in this section referred to as the “Office”) to develop, for public and private sector entities, plans for cyber defense operations, including the development of a set of coordinated actions to protect, detect, respond to, and recover from cybersecurity risks or incidents or limit, mitigate, or defend against coordinated, malicious cyber operations that pose a potential risk to critical infrastructure or national interests. The Office shall be headed by a senior official of the Agency selected by the Director.
Planning and execution
In leading the development of plans for cyber defense operations pursuant to subsection (a), the head of the Office shall—
coordinate with relevant Federal departments and agencies to establish processes and procedures necessary to develop and maintain ongoing coordinated plans for cyber defense operations;
leverage cyber capabilities and authorities of participating Federal departments and agencies, as appropriate, in furtherance of plans for cyber defense operations;
ensure that plans for cyber defense operations are, to the greatest extent practicable, developed in collaboration with relevant private sector entities, particularly in areas in which such entities have comparative advantages in limiting, mitigating, or defending against a cybersecurity risk or incident or coordinated, malicious cyber operation;
ensure that plans for cyber defense operations, as appropriate, are responsive to potential adversary activity conducted in response to United States offensive cyber operations;
facilitate the exercise of plans for cyber defense operations, including by developing and modeling scenarios based on an understanding of adversary threats to, vulnerability of, and potential consequences of disruption or compromise of critical infrastructure;
coordinate with and, as necessary, support relevant Federal departments and agencies in the establishment of procedures, development of additional plans, including for offensive and intelligence activities in support of cyber defense operations, and creation of agreements necessary for the rapid execution of plans for cyber defense operations when a cybersecurity risk or incident or malicious cyber operation has been identified; and
support public and private sector entities, as appropriate, in the execution of plans developed pursuant to this section.
Composition
The Office shall be composed of—
a central planning staff; and
appropriate representatives of Federal departments and agencies, including—
the Department;
United States Cyber Command;
the National Security Agency;
the Federal Bureau of Investigation;
the Department of Justice; and
the Office of the Director of National Intelligence.
Consultation
In carrying out its responsibilities described in subsection (b), the Office shall regularly consult with appropriate representatives of non-Federal entities, such as—
State, local, federally-recognized Tribal, and territorial governments;
Information Sharing and Analysis Organizations, including information sharing and analysis centers;
owners and operators of critical information systems;
private entities; and
other appropriate representatives or entities, as determined by the Secretary.
Interagency agreements
The Secretary and the head of a Federal department or agency referred to in subsection (c) may enter into agreements for the purpose of detailing personnel on a reimbursable or non-reimbursable basis.
Definitions
In this section, the term “cyber defense operation” means the defensive activities performed for a cybersecurity purpose.
Legislative history
Reconstructed from this section’s Code source credit and amendment notes, resolved against the local Statutes at Large. Editorial notes are evidence, not the law that made the change.
Homeland Security Act of 2002
Pub. L. 107–296 title XXII § 2216 · 116 Stat. 2135
Enacted · 6 U.S.C. § 665b
Pub. L. 107–296, title XXII, § 2216, formerly § 2215, as added Pub. L. 116–283, div. A, title XVII, § 1715(a), Jan. 1, 2021, 134 Stat. 4092
Source evidence
Code source credit
Pub. L. 107–296, title XXII, § 2216, formerly § 2215, as added Pub. L. 116–283, div. A, title XVII, § 1715(a), Jan. 1, 2021, 134 Stat. 4092National Defense Authorization Act for Fiscal Year 2022
Pub. L. 117–81 div. A title XV § 1547(b)(1)(A)(iii) · 135 Stat. 1541
Changed · 6 U.S.C. § 665b
Pub. L. 117–81 reenacted section catchline
Source evidence
Code amendment note
Pub. L. 117–81 reenacted section catchline.Enacted provision · exact public law section
(iii) in the second section 2215 (6 U.S.C. 665b; relating to the joint cyber planning office), by amending the section enumerator and heading to read as follows: “SEC. 2216. JOINT CYBER PLANNING OFFICE.” ;James M. Inhofe National Defense Authorization Act for Fiscal Year 2023
Pub. L. 117–263 § 7143(b)(2)(I)(i) · 136 Stat. 2395
Substituted · 6 U.S.C. § 665b(d)(2)
Pub. L. 117–263, § 7143(b)(2)(I)(i), substituted “Information Sharing and Analysis Organizations” for “information sharing and analysis organizations”
Source evidence
Code amendment note
Subsec. (d)(2). Pub. L. 117–263, § 7143(b)(2)(I)(i), substituted “Information Sharing and Analysis Organizations” for “information sharing and analysis organizations”.Enacted provision · exact public law section
(i) in subsection (d)(2), by striking “information sharing and analysis organizations” and inserting “Information Sharing and Analysis Organizations”; andJames M. Inhofe National Defense Authorization Act for Fiscal Year 2023
Pub. L. 117–263 § 7143(b)(2)(I)(ii) · 136 Stat. 2395
Substituted · 6 U.S.C. § 665b(f)
Pub. L. 117–263, § 7143(b)(2)(I)(ii), substituted “section, the term ‘cyber defense operation’ means the defensive activities performed for a cybersecurity purpose.” for “section:”
Struck · 6 U.S.C. § 665b(f)
Pub. L. 117–263, § 7143(b)(2)(I)(ii), struck out pars. (1) to (4) which defined cyber defense operation, cybersecurity purpose, cybersecurity risk, incident, and information sharing and analysis organization
Source evidence
Code amendment note
Subsec. (f). Pub. L. 117–263, § 7143(b)(2)(I)(ii), substituted “section, the term ‘cyber defense operation’ means the defensive activities performed for a cybersecurity purpose.” for “section:” and struck out pars. (1) to (4) which defined cyber defense operation, cybersecurity purpose, cybersecurity risk, incident, and information sharing and analysis organization.Enacted provision · exact public law section
(ii) in subsection (f), by striking “section:” and all that follows and inserting “section, the term ‘cyber defense operation’ means the defensive activities performed for a cybersecurity purpose.”;
4 of 5 references resolved to an enrolled provision · 1 partial
Editorial Notes
Prior Provisions
A prior section 2216 of Pub. L. 107–296 was renumbered section 2219 and is classified to section 665e of this title.
Amendments2021–2022 · 2 rounds
2022
Subsec. (d)(2). Pub. L. 117–263, § 7143(b)(2)(I)(i), substituted “Information Sharing and Analysis Organizations” for “information sharing and analysis organizations”.
Subsec. (f). Pub. L. 117–263, § 7143(b)(2)(I)(ii), substituted “section, the term ‘cyber defense operation’ means the defensive activities performed for a cybersecurity purpose.” for “section:” and struck out pars. (1) to (4) which defined cyber defense operation, cybersecurity purpose, cybersecurity risk, incident, and information sharing and analysis organization.
2021
Pub. L. 117–81 reenacted section catchline.
Credits
2021–2022 · 3 acts
- 2021Pub. L. 107–296, title XXII, § 2216, formerly § 2215, as added Pub. L. 116–283, div. A, title XVII, § 1715(a), , 134 Stat. 4092
- 2021renumbered § 2216 and amended Pub. L. 117–81, div. A, title XV, § 1547(b)(1)(A)(iii), , 135 Stat. 2061
- 2022Pub. L. 117–263, div. G, title LXXI, § 7143(b)(2)(I), , 136 Stat. 3660.
Show as published
(Pub. L. 107–296, title XXII, § 2216, formerly § 2215, as added Pub. L. 116–283, div. A, title XVII, § 1715(a), , 134 Stat. 4092; renumbered § 2216 and amended Pub. L. 117–81, div. A, title XV, § 1547(b)(1)(A)(iii), , 135 Stat. 2061; Pub. L. 117–263, div. G, title LXXI, § 7143(b)(2)(I), , 136 Stat. 3660.)