H. R. 2029—716 (1) APPROPRIATE CONGRESSIONAL COMMITTEES.—The term ‘‘appropriate congressional committees’’ means— (A) the Committee on Homeland Security and Governmental Affairs of the Senate; and (B) the Committee on Homeland Security of the House of Representatives. (2) CYBERSECURITY RISK; INCIDENT.—The terms ‘‘cybersecurity risk’’ and ‘‘incident’’ have the meanings given those terms in section 227 of the Homeland Security Act of 2002, as so redesignated by section 223(a)(3) of this division. (3) CYBER THREAT INDICATOR; DEFENSIVE MEASURE.—The terms ‘‘cyber threat indicator’’ and ‘‘defensive measure’’ have the meanings given those terms in section 102. (4) DEPARTMENT.—The term ‘‘Department’’ means the Department of Homeland Security. (5) SECRETARY.—The term ‘‘Secretary’’ means the Secretary of Homeland Security. SEC. 203. INFORMATION SHARING STRUCTURE AND PROCESSES. Section 227 of the Homeland Security Act of 2002, as so redesignated by section 223(a)(3) of this division, is amended— (1) in subsection (a)— (A) by redesignating paragraphs (3) and (4) as paragraphs (4) and (5), respectively; (B) by striking paragraphs (1) and (2) and inserting the following: ‘‘(1) the term ‘cybersecurity risk’— ‘‘(A) means threats to and vulnerabilities of information or information systems and any related consequences caused by or resulting from unauthorized access, use, disclosure, degradation, disruption, modification, or destruction of such information or information systems, including such related consequences caused by an act of terrorism; and ‘‘(B) does not include any action that solely involves a violation of a consumer term of service or a consumer licensing agreement; ‘‘(2) the terms ‘cyber threat indicator’ and ‘defensive measure’ have the meanings given those terms in section 102 of the Cybersecurity Act of 2015; ‘‘(3) the term ‘incident’ means an occurrence that actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information on an information system, or actually or imminently jeopardizes, without lawful authority, an information system;’’; (C) in paragraph (4), as so redesignated, by striking ‘‘and’’ at the end; (D) in paragraph (5), as so redesignated, by striking the period at the end and inserting ‘‘; and’’; and (E) by adding at the end the following: ‘‘(6) the term ‘sharing’ (including all conjugations thereof) means providing, receiving, and disseminating (including all conjugations of each of such terms).’’; (2) in subsection (c)— (A) in paragraph (1)—