- agency
has the meaning given the term in section 3502 of title 44.
- agency information
has the meaning given the term in section 2213 of the Homeland Security Act of 2002 [6 U.S.C. 663].
- agency information system
has the meaning given the term in section 660 of this title.
- appropriate congressional committees
means—
- appropriate Federal entities
means the following:
- business associate
has the meaning given such term in section 160.103 of title 45, Code of Federal Regulations (as in effect on the day before December 18, 2015).
- covered entity
has the meaning given such term in section 160.103 of title 45, Code of Federal Regulations (as in effect on the day before December 18, 2015).
- cyber attack and cyber campaign of significant consequence
means an incident or series of incidents that has the purpose or effect of—
- cyber threat indicator
has the meaning given the term in section 650 of this title.
- cybersecurity posture
means the ability to identify, to protect against, to detect, to respond to, and to recover from an intrusion in an information system the compromise of which could constitute a cyber attack or cyber campaign of significant consequence.
- cybersecurity purpose
has the meaning given the term in section 650 of this title.
- cybersecurity threat
has the meaning given the term in section 650 of this title.
- defensive measure
has the meaning given the term in section 650 of this title.
- Director
means the Director of the Office of Management and Budget.
- Federal entity
means a department or agency of the United States or any component of such department or agency.
- health care industry stakeholder
means any—
- incident
has the meaning given such term in section 3552 of title 44.
- incident response
means a government or private sector activity that detects, mitigates, or recovers from a cyber attack or cyber campaign of significant consequence.
- information security
has the meaning given such term in section 3552 of title 44.
- information system
has the meaning given the term in section 650 of this title.
- intelligence
has the meaning given such term in section 3003 of title 50.
- intelligence community
has the meaning given the term in section 3003(4) of title 50.
- international cyber criminal
means an individual—
- intrusion assessment plan
means the plan required under section 2210(b)(1) of the Homeland Security Act of 2002 [6 U.S.C. 660(b)(1)].
- intrusion assessments
means actions taken under the intrusion assessment plan to identify and remove intruders in agency information systems.
- intrusion detection and prevention capabilities
means the capabilities required under section 2213(b) of the Homeland Security Act of 2002 [6 U.S.C. 663(b)].
- local government
means any borough, city, county, parish, town, township, village, or other political subdivision of a State.
- malicious cyber command and control
has the meaning given the term in section 650 of this title.
- malicious reconnaissance
has the meaning given the term in section 650 of this title.
- monitor
has the meaning given the term in section 650 of this title.
- national security system
has the meaning given the term in section 11103 of title 40.
- non-Federal entity
includes a government agency or department of the District of Columbia, the Commonwealth of Puerto Rico, the United States Virgin Islands, Guam, American Samoa, the Northern Mariana Islands, and any other territory or possession of the United States.
- private entity
means any person or private group, organization, proprietorship, partnership, trust, cooperative, corporation, or other commercial or nonprofit entity, including an officer, employee, or agent thereof.
- Secretary
means the Secretary of Homeland Security.
- security control
has the meaning given the term in section 650 of this title.
- security vulnerability
has the meaning given the term in section 650 of this title.
- tribal
has the meaning given the term “Indian tribe” in section 5304 of title 25.