H. R. 2029—722 Subtitle B—Federal Cybersecurity Enhancement SEC. 221. SHORT TITLE. This subtitle may be cited as the ‘‘Federal Cybersecurity Enhancement Act of 2015’’. SEC. 222. DEFINITIONS. In this subtitle: (1) AGENCY.—The term ‘‘agency’’ has the meaning given the term in section 3502 of title 44, United States Code. (2) AGENCY INFORMATION SYSTEM.—The term ‘‘agency information system’’ has the meaning given the term in section 228 of the Homeland Security Act of 2002, as added by section 223(a)(4) of this division. (3) APPROPRIATE CONGRESSIONAL COMMITTEES.—The term ‘‘appropriate congressional committees’’ means— (A) the Committee on Homeland Security and Governmental Affairs of the Senate; and (B) the Committee on Homeland Security of the House of Representatives. (4) CYBERSECURITY RISK; INFORMATION SYSTEM.—The terms ‘‘cybersecurity risk’’ and ‘‘information system’’ have the meanings given those terms in section 227 of the Homeland Security Act of 2002, as so redesignated by section 223(a)(3) of this division. (5) DIRECTOR.—The term ‘‘Director’’ means the Director of the Office of Management and Budget. (6) INTELLIGENCE COMMUNITY.—The term ‘‘intelligence community’’ has the meaning given the term in section 3(4) of the National Security Act of 1947 (50 U.S.C. 3003(4)). (7) NATIONAL SECURITY SYSTEM.—The term ‘‘national security system’’ has the meaning given the term in section 11103 of title 40, United States Code. (8) SECRETARY.—The term ‘‘Secretary’’ means the Secretary of Homeland Security. SEC. 223. IMPROVED FEDERAL NETWORK SECURITY. (a) IN GENERAL.—Subtitle C of title II of the Homeland Security Act of 2002 (6 U.S.C. 141 et seq.) is amended— (1) by redesignating section 228 as section 229; (2) by redesignating section 227 as subsection (c) of section 228, as added by paragraph (4), and adjusting the margins accordingly; (3) by redesignating the second section designated as section 226 (relating to the national cybersecurity and communications integration center) as section 227; (4) by inserting after section 227, as so redesignated, the following: ‘‘SEC. 228. CYBERSECURITY PLANS. ‘‘(a) DEFINITIONS.—In this section— ‘‘(1) the term ‘agency information system’ means an information system used or operated by an agency or by another entity on behalf of an agency;