132 STAT. 4168 PUBLIC LAW 115–278—NOV. 16, 2018 Public Law 115–278 115th Congress An Act Nov. 16, 2018 [H.R. 3359] Cybersecurity and Infrastructure Security Agency Act of 2018. 6 USC 101 note. To amend the Homeland Security Act of 2002 to authorize the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security, and for other purposes. Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, SECTION 1. SHORT TITLE. This Act may be cited as the ‘‘Cybersecurity and Infrastructure Security Agency Act of 2018’’. SEC. 2. CYBERSECURITY AND INFRASTRUCTURE SECURITY AGENCY. (a) IN GENERAL.—The Homeland Security Act of 2002 (6 U.S.C. 101 et seq.) is amended by adding at the end the following: ‘‘TITLE XXII—CYBERSECURITY AND INFRASTRUCTURE SECURITY AGENCY ‘‘Subtitle A—Cybersecurity and Infrastructure Security ralbany on LAP520R082 with PUB LAWS PDF 6 USC 651. ‘‘SEC. 2201. DEFINITIONS. ‘‘In this subtitle: ‘‘(1) CRITICAL INFRASTRUCTURE INFORMATION.—The term ‘critical infrastructure information’ has the meaning given the term in section 2222. ‘‘(2) CYBERSECURITY RISK.—The term ‘cybersecurity risk’ has the meaning given the term in section 2209. ‘‘(3) CYBERSECURITY THREAT.—The term ‘cybersecurity threat’ has the meaning given the term in section 102(5) of the Cybersecurity Act of 2015 (contained in division N of the Consolidated Appropriations Act, 2016 (Public Law 114–113; 6 U.S.C. 1501)). ‘‘(4) NATIONAL CYBERSECURITY ASSET RESPONSE ACTIVITIES.—The term ‘national cybersecurity asset response activities’ means— ‘‘(A) furnishing cybersecurity technical assistance to entities affected by cybersecurity risks to protect assets, mitigate vulnerabilities, and reduce impacts of cyber incidents; ‘‘(B) identifying other entities that may be at risk of an incident and assessing risk to the same or similar vulnerabilities; VerDate Sep 11 2014 03:28 Aug 28, 2019 Jkt 089139 PO 00278 Frm 00002 Fmt 6580 Sfmt 6581 E:\PUBLAW\PUBL278.115 PUBL278