Section 230 – Federal intrusion detection and prevention system (6 U.S.C. § 151 & 151 note). The Federal Cybersecurity Enhancement Act of 2015 created section 230 of the Homeland Security Act, which authorizes DHS to deploy technology that detects and removes cybersecurity risks in information transiting or traveling to and from agency systems, notwithstanding any other provision of law. The Act mandates that all agencies “apply and continue to utilize” DHS technologies authorized by this section, including improvements and new capabilities that DHS makes available within six months. Section 226 – Cybersecurity recruitment and retention (6 U.S.C. § 147). The Border Patrol Agent Pay Reform Act of 2014 (Pub. Law 113-277) amended the Homeland Security Act to authorize the Secretary to establish cybersecurity positions, appoint personnel, fix rates of pay and promulgate implementing regulations in consultation with the director of the Office of Personnel Management (OPM). • The Cybersecurity Information Sharing Act of 2015 (CISA) (Title I of the Cybersecurity Act of 2015) (6 U.S.C. §§ 1501-1510). CISA requires DHS, in consultation with interagency partners, to establish the Federal Government’s capability and process for receiving cyber threat indicators and defensive measures, and directs DHS to further share cyber threat indicators and defensive measures it receives with federal entities in an automated and real-time manner. CISA provides targeted liability protection to companies that share cyber threat indicators with DHS and provides other legal protections for indicators shared in accordance with CISA. CISA also authorizes private entities to share cyber threat indicators with one another and to monitor their networks for cybersecurity threats, with liability protection for doing so, as well as to operate defensive measures. • Subchapter II of Chapter 35 of Title 44 (44 U.S.C. §§ 3551-3558). These provisions, created by the Federal Information Security Modernization Act of 2014 (Pub. Law 113-283), direct the Secretary to provide information protections for DHS networks commensurate with the risk and magnitude of the harm resulting from unauthorized access, use, disclosure, disruption, modification, or destruction of DHS information or information systems. The provisions also establish DHS’s central role in the security of the information and information systems of federal executive branch agencies. Through NPPD, DHS administers the implementation of government-wide policies, deploys technologies to assist in the protection of federal agencies’ networks information and information systems, and issues binding operational directives to agencies to safeguard information and information systems. The Act also places in DHS the federal information security incident center. • Strengthening State and Local Cyber Crime Fighting Act of 2017, Pub. Law 115-76, (6 U.S.C. § 383). The Act amended the Homeland Security Act, adding a section 822, to authorize the USSS to operate the National Computer Forensics Institute to disseminate information related to the investigation and prevention of cyber and electronic crime and related threats, and educate, train, and equip state, local, tribal, and territorial law enforcement officers, prosecutors, and judges, and facilitate the expansion of the network of Electronic Crime Task Forces of the USSS. A-2