H. R. 2029—722
Subtitle B—Federal Cybersecurity
Enhancement
SEC. 221. SHORT TITLE.
This subtitle may be cited as the ‘‘Federal Cybersecurity
Enhancement Act of 2015’’.
SEC. 222. DEFINITIONS.
In this subtitle:
(1) AGENCY.—The term ‘‘agency’’ has the meaning given
the term in section 3502 of title 44, United States Code.
(2) AGENCY INFORMATION SYSTEM.—The term ‘‘agency
information system’’ has the meaning given the term in section
228 of the Homeland Security Act of 2002, as added by section
223(a)(4) of this division.
(3) APPROPRIATE CONGRESSIONAL COMMITTEES.—The term
‘‘appropriate congressional committees’’ means—
(A) the Committee on Homeland Security and Governmental Affairs of the Senate; and
(B) the Committee on Homeland Security of the House
of Representatives.
(4) CYBERSECURITY RISK; INFORMATION SYSTEM.—The terms
‘‘cybersecurity risk’’ and ‘‘information system’’ have the
meanings given those terms in section 227 of the Homeland
Security Act of 2002, as so redesignated by section 223(a)(3)
of this division.
(5) DIRECTOR.—The term ‘‘Director’’ means the Director
of the Office of Management and Budget.
(6) INTELLIGENCE COMMUNITY.—The term ‘‘intelligence
community’’ has the meaning given the term in section 3(4)
of the National Security Act of 1947 (50 U.S.C. 3003(4)).
(7) NATIONAL SECURITY SYSTEM.—The term ‘‘national security system’’ has the meaning given the term in section 11103
of title 40, United States Code.
(8) SECRETARY.—The term ‘‘Secretary’’ means the Secretary
of Homeland Security.
SEC. 223. IMPROVED FEDERAL NETWORK SECURITY.
(a) IN GENERAL.—Subtitle C of title II of the Homeland Security
Act of 2002 (6 U.S.C. 141 et seq.) is amended—
(1) by redesignating section 228 as section 229;
(2) by redesignating section 227 as subsection (c) of section
228, as added by paragraph (4), and adjusting the margins
accordingly;
(3) by redesignating the second section designated as section 226 (relating to the national cybersecurity and communications integration center) as section 227;
(4) by inserting after section 227, as so redesignated, the
following:
‘‘SEC. 228. CYBERSECURITY PLANS.
‘‘(a) DEFINITIONS.—In this section—
‘‘(1) the term ‘agency information system’ means an
information system used or operated by an agency or by another
entity on behalf of an agency;