(a) Under Secretary of Homeland Security for Information Analysis and Infrastructure Protection (1) In general There shall be in the Department a Directorate for Information Analysis and Infrastructure Protection headed by an Under Secretary for Information Analysis and Infrastructure Protection, who shall be appointed by the President, by and with the advice and consent of the Senate. (2) Responsibilities The Under Secretary shall assist the Secretary in discharging the responsibilities assigned by the Secretary. (b) Assistant Secretary for Information Analysis; Assistant Secretary for Infrastructure Protection (1) Assistant Secretary for Information Analysis There shall be in the Department an Assistant Secretary for Information Analysis, who shall be appointed by the President. (2) Assistant Secretary for Infrastructure Protection There shall be in the Department an Assistant Secretary for Infrastructure Protection, who shall be appointed by the President. (3) Responsibilities The Assistant Secretary for Information Analysis and the Assistant Secretary for Infrastructure Protection shall assist the Under Secretary for Information Analysis and Infrastructure Protection in discharging the responsibilities of the Under Secretary under this section. (c) Discharge of information analysis and infrastructure protection The Secretary shall ensure that the responsibilities of the Department regarding information analysis and infrastructure protection are carried out through the Under Secretary for Information Analysis and Infrastructure Protection. (d) Responsibilities of Under Secretary Subject to the direction and control of the Secretary, the responsibilities of the Under Secretary for Information Analysis and Infrastructure Protection shall be as follows: (1) To access, receive, and analyze law enforcement information, intelligence information, and other information from agencies of the Federal Government, State and local government agencies (including law enforcement agencies), and private sector entities, and to integrate such information in order to - (A) identify and assess the nature and scope of terrorist threats to the homeland; (B) detect and identify threats of terrorism against the United States; and (C) understand such threats in light of actual and potential vulnerabilities of the homeland. (2) To carry out comprehensive assessments of the vulnerabilities of the key resources and critical infrastructure of the United States, including the performance of risk assessments to determine the risks posed by particular types of terrorist attacks within the United States (including an assessment of the probability of success of such attacks and the feasibility and potential efficacy of various countermeasures to such attacks). (3) To integrate relevant information, analyses, and vulnerability assessments (whether such information, analyses, or assessments are provided or produced by the Department or others) in order to identify priorities for protective and support measures by the Department, other agencies of the Federal Government, State and local government agencies and authorities, the private sector, and other entities. (4) To ensure, pursuant to section 122 of this title, the timely and efficient access by the Department to all information necessary to discharge the responsibilities under this section, including obtaining such information from other agencies of the Federal Government. (5) To develop a comprehensive national plan for securing the key resources and critical infrastructure of the United States, including power production, generation, and distribution systems, information technology and telecommunications systems (including satellites), electronic financial and property record storage and transmission systems, emergency preparedness communications systems, and the physical and technological assets that support such systems. (6) To recommend measures necessary to protect the key resources and critical infrastructure of the United States in coordination with other agencies of the Federal Government and in cooperation with State and local government agencies and authorities, the private sector, and other entities. (7) To administer the Homeland Security Advisory System, including - (A) exercising primary responsibility for public advisories related to threats to homeland security; and (B) in coordination with other agencies of the Federal Government, providing specific warning information, and advice about appropriate protective measures and countermeasures, to State and local government agencies and authorities, the private sector, other entities, and the public. (8) To review, analyze, and make recommendations for improvements in the policies and procedures governing the sharing of law enforcement information, intelligence information, intelligence-related information, and other information relating to homeland security within the Federal Government and between the Federal Government and State and local government agencies and authorities. (9) To disseminate, as appropriate, information analyzed by the Department within the Department, to other agencies of the Federal Government with responsibilities relating to homeland security, and to agencies of State and local governments and private sector entities with such responsibilities in order to assist in the deterrence, prevention, preemption of, or response to, terrorist attacks against the United States. (10) To consult with the Director of Central Intelligence and other appropriate intelligence, law enforcement, or other elements of the Federal Government to establish collection priorities and strategies for information, including law enforcement-related information, relating to threats of terrorism against the United States through such means as the representation of the Department in discussions regarding requirements and priorities in the collection of such information. (11) To consult with State and local governments and private sector entities to ensure appropriate exchanges of information, including law enforcement-related information, relating to threats of terrorism against the United States. (12) To ensure that - (A) any material received pursuant to this chapter is protected from unauthorized disclosure and handled and used only for the performance of official duties; and (B) any intelligence information under this chapter is shared, retained, and disseminated consistent with the authority of the Director of Central Intelligence to protect intelligence sources and methods under the National Security Act of 1947 (50 U.S.C. 401 et seq.) and related procedures and, as appropriate, similar authorities of the Attorney General concerning sensitive law enforcement information. (13) To request additional information from other agencies of the Federal Government, State and local government agencies, and the private sector relating to threats of terrorism in the United States, or relating to other areas of responsibility assigned by the Secretary, including the entry into cooperative agreements through the Secretary to obtain such information. (14) To establish and utilize, in conjunction with the chief information officer of the Department, a secure communications and information technology infrastructure, including data-mining and other advanced analytical tools, in order to access, receive, and analyze data and information in furtherance of the responsibilities under this section, and to disseminate information acquired and analyzed by the Department, as appropriate. (15) To ensure, in conjunction with the chief information officer of the Department, that any information databases and analytical tools developed or utilized by the Department - (A) are compatible with one another and with relevant information databases of other agencies of the Federal Government; and (B) treat information in such databases in a manner that complies with applicable Federal law on privacy. (16) To coordinate training and other support to the elements and personnel of the Department, other agencies of the Federal Government, and State and local governments that provide information to the Department, or are consumers of information provided by the Department, in order to facilitate the identification and sharing of information revealed in their ordinary duties and the optimal utilization of information received from the Department. (17) To coordinate with elements of the intelligence community and with Federal, State, and local law enforcement agencies, and the private sector, as appropriate. (18) To provide intelligence and information analysis and support to other elements of the Department. (19) To perform such other duties relating to such responsibilities as the Secretary may provide. (e) Staff (1) In general The Secretary shall provide the Directorate with a staff of analysts having appropriate expertise and experience to assist the Directorate in discharging responsibilities under this section. (2) Private sector analysts Analysts under this subsection may include analysts from the private sector. (3) Security clearances Analysts under this subsection shall possess security clearances appropriate for their work under this section. (f) Detail of personnel (1) In general In order to assist the Directorate in discharging responsibilities under this section, personnel of the agencies referred to in paragraph (2) may be detailed to the Department for the performance of analytic functions and related duties. (2) Covered agencies The agencies referred to in this paragraph are as follows: (A) The Department of State. (B) The Central Intelligence Agency. (C) The Federal Bureau of Investigation. (D) The National Security Agency. (E) The National Geospatial-Intelligence Agency. (F) The Defense Intelligence Agency. (G) Any other agency of the Federal Government that the President considers appropriate. (3) Cooperative agreements The Secretary and the head of the agency concerned may enter into cooperative agreements for the purpose of detailing personnel under this subsection. (4) Basis The detail of personnel under this subsection may be on a reimbursable or non-reimbursable basis. (g) Functions transferred In accordance with subchapter XII of this chapter, there shall be transferred to the Secretary, for assignment to the Under Secretary for Information Analysis and Infrastructure Protection under this section, the functions, personnel, assets, and liabilities of the following: (1) The National Infrastructure Protection Center of the Federal Bureau of Investigation (other than the Computer Investigations and Operations Section), including the functions of the Attorney General relating thereto. (2) The National Communications System of the Department of Defense, including the functions of the Secretary of Defense relating thereto. (3) The Critical Infrastructure Assurance Office of the Department of Commerce, including the functions of the Secretary of Commerce relating thereto. (4) The National Infrastructure Simulation and Analysis Center of the Department of Energy and the energy security and assurance program and activities of the Department, including the functions of the Secretary of Energy relating thereto. (5) The Federal Computer Incident Response Center of the General Services Administration, including the functions of the Administrator of General Services relating thereto.
References In Text This chapter, referred to in subsec. (d)(12), was in the original "this Act", meaning Pub. L. 107-296, Nov. 25, 2002, 116 Stat. 2135, known as the Homeland Security Act of 2002, which is classified principally to this chapter.For complete classification of this Act to the Code, see Short Title note set out under section 101 of this title and Tables.The National Security Act of 1947, referred to in subsec. (d)(12)(B), is act July 26, 1947, ch. 343, 61 Stat. 495, as amended.For complete classification of this Act to the Code, see Short Title note set out under section 401 of Title 50, War and National Defense, and Tables. Codification Section is comprised of section 201 of Pub. L. 107-296. Subsec. (h) of section 201 of Pub. L. 107-296 amended section 401a of Title 50, War and National Defense. Amendments 2003 - Subsec. (f)(2)(E). Pub. L. 108-136 substituted "National Geospatial-Intelligence Agency" for "National Imagery and Mapping Agency". Ex. Ord. No. 13231. Critical Infrastructure Protection In TheINFORMATION AGE Ex. Ord. No. 13231, Oct. 16, 2001, 66 F.R. 53063, as amended by Ex. Ord. No. 13284, Sec. 2, Jan. 23, 2003, 68 F.R. 4075; Ex. Ord. No. 13286, Sec. 7, Feb. 28, 2003, 68 F.R. 10620, provided: By the authority vested in me as President by the Constitution and the laws of the United States of America, and in order to ensure protection of information systems for critical infrastructure, including emergency preparedness communications and the physical assets that support such systems, in the information age, it is hereby ordered as follows: Section 1. Policy.The information technology revolution has changed the way business is transacted, government operates, and national defense is conducted.Those three functions now depend on an interdependent network of critical information infrastructures.It is the policy of the United States to protect against disruption of the operation of information systems for critical infrastructure and thereby help to protect the people, economy, essential human and government services, and national security of the United States, and to ensure that any disruptions that occur are infrequent, of minimal duration, and manageable, and cause the least damage possible.The implementation of this policy shall include a voluntary public-private partnership, involving corporate and nongovernmental organizations.Sec. 2. Continuing Authorities.This order does not alter the existing authorities or roles of United States Government departments and agencies.Authorities set forth in 44 U.S.C. chapter 35, and other applicable law, provide senior officials with responsibility for the security of Federal Government information systems. (a) Executive Branch Information Systems Security.The Director of the Office of Management and Budget (OMB) has the responsibility to develop and oversee the implementation of government-wide policies, principles, standards, and guidelines for the security of information systems that support the executive branch departments and agencies, except those noted in section 2(b) of this order.The Director of OMB shall advise the President and the appropriate department or agency head when there is a critical deficiency in the security practices within the purview of this section in an executive branch department or agency. (b) National Security Information Systems.The Secretary of Defense and the Director of Central Intelligence (DCI) shall have responsibility to oversee, develop, and ensure implementation of policies, principles, standards, and guidelines for the security of information systems that support the operations under their respective control.In consultation with the Assistant to the President for National Security Affairs and the affected departments and agencies, the Secretary of Defense and the DCI shall develop policies, principles, standards, and guidelines for the security of national security information systems that support the operations of other executive branch departments and agencies with national security information. (i) Policies, principles, standards, and guidelines developed under this subsection may require more stringent protection than those developed in accordance with section 2(a) of this order. (ii) The Assistant to the President for National Security Affairs shall advise the President and the appropriate department or agency when there is a critical deficiency in the security practices of a department or agency within the purview of this section. (iii) National Security Systems.The National Security Telecommunications and Information Systems Security Committee, as established by and consistent with NSD-42 and chaired by the Department of Defense, shall be designated as the "Committee on National Security Systems." (c) Additional Responsibilities.The heads of executive branch departments and agencies are responsible and accountable for providing and maintaining adequate levels of security for information systems, including emergency preparedness communications systems, for programs under their control.Heads of such departments and agencies shall ensure the development and, within available appropriations, funding of programs that adequately address these mission systems, especially those critical systems that support the national security and other essential government programs.Additionally, security should enable, and not unnecessarily impede, department and agency business operations.Sec. 3. The National Infrastructure Advisory Council.The National Infrastructure Advisory Council (NIAC), established on October 16, 2001, shall provide the President through the Secretary of Homeland Security with advice on the security of information systems for critical infrastructure supporting other sectors of the economy: banking and finance, transportation, energy, manufacturing, and emergency government services. (a) Membership.The NIAC shall be composed of not more than 30 members appointed by the President.The members of the NIAC shall be selected from the private sector, academia, and State and local government.Members of the NIAC shall have expertise relevant to the functions of the NIAC and generally shall be selected from industry Chief Executive Officers (and equivalently ranked leaders of other organizations) with responsibilities for security of information infrastructure supporting the critical sectors of the economy, including banking and finance, transportation, energy, communications, and emergency government services.Members shall not be full-time officials or employees of the executive branch of the Federal Government.The President shall designate a Chair and Vice Chair from among the members of the NIAC. (b) Functions of the NIAC. The NIAC will meet periodically to: (i) enhance the partnership of the public and private sectors in protecting information systems for critical infrastructures and provide reports on this issue to the Secretary of Homeland Security, as appropriate; (ii) propose and develop ways to encourage private industry to perform periodic risk assessments of critical information and telecommunications systems; (iii) monitor the development of private sector Information Sharing and Analysis Centers (ISACs) and provide recommendations to the President through the Secretary of Homeland Security on how these organizations can best foster improved cooperation among the ISACs, the Department of Homeland Security, and other Federal Government entities; (iv) report to the President through the Secretary of Homeland Security, who shall ensure appropriate coordination with the Assistant to the President for Homeland Security, the Assistant to the President for Economic Policy, and the Assistant to the President for National Security Affairs under the terms of this order; and (v) advise lead agencies with critical infrastructure responsibilities, sector coordinators, the Department of Homeland Security, and the ISACs. (c) Administration of the NIAC. (i) The NIAC may hold hearings, conduct inquiries, and establish subcommittees, as appropriate. (ii) Upon request of the Chair, and to the extent permitted by law, the heads of the executive departments and agencies shall provide the NIAC with information and advice relating to its functions. (iii) Senior Federal Government officials may participate in the meetings of the NIAC, as appropriate. (iv) Members shall serve without compensation for their work on the NIAC. However, members may be reimbursed for travel expenses, including per diem in lieu of subsistence, as authorized by law for persons serving intermittently in Federal Government service (5 U.S.C. 5701-5707). (v) To the extent permitted by law and subject to the availability of appropriations, the Department of Homeland Security shall provide the NIAC with administrative services, staff, and other support services, and such funds as may be necessary for the performance of the NIAC's functions. (d) General Provisions. (i) Insofar as the Federal Advisory Committee Act, as amended (5 U.S.C. App.) (Act), may apply to the NIAC, the functions of the President under that Act, except that of reporting to the Congress, shall be performed by the Department of Homeland Security in accordance with the guidelines and procedures established by the Administrator of General Services. (ii) The NIAC shall terminate on October 15, 2003, unless extended by the President. (iii) Executive Order 13130 of July 14, 1999, was revoked on October 16, 2001. (iv) Nothing in this order shall supersede any requirement made by or under law. Sec. 4. Judicial Review.This order does not create any right or benefit, substantive or procedural, enforceable at law or in equity, against the United States, its departments, agencies, or other entities, its officers or employees, or any other person.George W. Bush. EXTENSION OF TERM OF NATIONAL INFRASTRUCTURE ADVISORY COUNCIL Term of the National Infrastructure Advisory Council extended until Sept. 30, 2005, by Ex. Ord. No. 13316, Sept. 17, 2003, 68 F.R. 55255, set out as a note under section 14 of the Federal Advisory Committee Act in the Appendix to Title 5, Government Organizations and Employees.EX. ORD. NO. 13284. AMENDMENT OF EXECUTIVE ORDERS, AND OTHER ACTIONS, IN CONNECTION WITH THE ESTABLISHMENT OF THE DEPARTMENT OF HOMELAND SECURITY Ex. Ord. No. 13284, Jan. 23, 2003, 68 F.R. 4075, provided: By the authority vested in me as President by the Constitution and the laws of the United States of America, including the Homeland Security Act of 2002 (Public Law 107-296) [see Tables for classification], and the National Security Act of 1947, as amended (50 U.S.C. 401 et seq.), and in order to reflect responsibilities vested in the Secretary of Homeland Security and take other actions in connection with the establishment of the Department of Homeland Security, it is hereby ordered as follows: Section 1. [Amended Ex. Ord. No. 13234.] Sec. 2. [Amended Ex. Ord. No. 13231, set out above.] Sec. 3. Executive Order 13228 of October 8, 2001 ("Establishing the Office of Homeland Security and the Homeland Security Council") [50 U.S.C. 402 note], is amended by inserting "the Secretary of Homeland Security," after "the Secretary of Transportation," in section 5(b). Further, during the period from January 24, 2003, until March 1, 2003, the Secretary of Homeland Security shall have the responsibility for coordinating the domestic response efforts otherwise assigned to the Assistant to the President for Homeland Security pursuant to section 3(g) of Executive Order 13228. Sec. 4. [Amended Ex. Ord. No. 13224, set out as a note under section 1701 of Title 50, War and National Defense.] Sec. 5. [Amended Ex. Ord. No. 13151, set out as a note under section 5195 of Title 42, The Public Health and Welfare.] Sec. 6. [Amended Ex. Ord. No. 13122, set out as a note under section 3121 of Title 42, The Public Health and Welfare.] Sec. 7. [Amended Ex. Ord. No. 13048, set out as a note under section 501 of Title 31, Money and Finance.] Sec. 8. [Amended Ex. Ord. No. 12992, set out as a note under section 1708 of Title 21, Food and Drugs.] Sec. 9. [Amended Ex. Ord. No. 12881, set out as a note under section 6601 of Title 42, The Public Health and Welfare.] Sec. 10. [Amended Ex. Ord. No. 12859, set out as a note preceding section 101 of Title 3, The President.] Sec. 11. [Amended Ex. Ord. No. 12590, set out as a note under former section 1201 of Title 21, Food and Drugs.] Sec. 12. [Amended Ex. Ord. No. 12260, set out as a note under section 2511 of Title 19, Customs Duties.] Sec. 13. [Amended Ex. Ord. No. 11958, set out as a note under section 2751 of Title 22, Foreign Relations and Intercourse.] Sec. 14. [Amended Ex. Ord. No. 11423, set out as a note under section 301 of Title 3, The President.] Sec. 15. [Amended Ex. Ord. No. 10865, set out as a note under section 435 of Title 50, War and National Defense.] Sec. 16. [Amended Ex. Ord. No. 13011, set out as a note under section 11101 of Title 40, Public Buildings, Property, and Works.] Sec. 17. Those elements of the Department of Homeland Security that are supervised by the Department's Under Secretary for Information Analysis and Infrastructure Protection through the Department's Assistant Secretary for Information Analysis, with the exception of those functions that involve no analysis of foreign intelligence information, are designated as elements of the Intelligence Community under section 201(h) of the Homeland Security Act of 2002 [Pub. L. 107-296, amending 50 U.S.C. 401a] and section 3(4) of the National Security Act of 1947, as amended (50 U.S.C. 401a[(4)]). Sec. 18. [Amended Ex. Ord. No. 12333, set out as a note under section 401 of title 50, War and National Defense.] Sec. 19. Functions of Certain Officials in the Department of Homeland Security.The Secretary of Homeland Security, the Deputy Secretary of Homeland Security, the Under Secretary for Information Analysis and Infrastructure Protection, Department of Homeland Security, and the Assistant Secretary for Information Analysis, Department of Homeland Security, each shall be considered a "Senior Official of the Intelligence Community" for purposes of Executive Order 12333 [50 U.S.C. 401 note], and all other relevant authorities, and shall: (a) recognize and give effect to all current clearances for access to classified information held by those who become employees of the Department of Homeland Security by operation of law pursuant to the Homeland Security Act of 2002 or by Presidential appointment; (b) recognize and give effect to all current clearances for access to classified information held by those in the private sector with whom employees of the Department of Homeland Security may seek to interact in the discharge of their homeland security-related responsibilities; (c) make all clearance and access determinations pursuant to Executive Order 12968 of August 2, 1995 [50 U.S.C. 435 note], or any successor Executive Order, as to employees of, and applicants for employment in, the Department of Homeland Security who do not then hold a current clearance for access to classified information; and (d) ensure all clearance and access determinations for those in the private sector with whom employees of the Department of Homeland Security may seek to interact in the discharge of their homeland security-related responsibilities are made in accordance with Executive Order 12829 of January 6, 1993 [50 U.S.C. 435 note]. Sec. 20. Pursuant to the provisions of section 1.4 of Executive Order 12958 of April 17, 1995 ("Classified National Security Information") [50 U.S.C. 435 note], I hereby authorize the Secretary of Homeland Security to classify information originally as "Top Secret." Any delegation of this authority shall be in accordance with section 1.4 of that order or any successor Executive Orders.Sec. 21. This order shall become effective on January 24, 2003. Sec. 22. This order does not create any right or benefit, substantive or procedural, enforceable at law or equity, against the United States, its departments, agencies, or other entities, its officers or employees, or any other person.George W. Bush. Section Referred To In Other Sections This section is referred to in section 143 of this title.