6 U.S.C. § 661: Cybersecurity strategy

Not later than 90 days after December 23, 2016 , the Secretary shall develop a departmental strategy to carry out cybersecurity responsibilities as set forth in law. Strategic and operational goals and priorities to successfully execute the full range of the Secretary’s cybersecurity responsibilities. Cybersecurity functions set forth in section 659 of this title (relating to the national cybersecurity and communications integration center). Cybersecurity investigations capabilities. Cybersecurity research and development. Engagement with international cybersecurity partners. the cybersecurity strategy for the Homeland Security Enterprise published by the Secretary in November 2011; the Department of Homeland Security Fiscal Years 2014–2018 Strategic Plan; and the most recent Quadrennial Homeland Security Review issued pursuant to section 347 of this title ; and include information on the roles and responsibilities of components and offices of the Department, to the extent practicable, to carry out such strategy. Strategic objectives and corresponding tasks. Projected timelines and costs for such tasks. Metrics to evaluate performance of such tasks. A copy of the strategy required under subsection (a) upon issuance. A copy of the implementation plan required under subsection (d) upon issuance, together with detailed information on any associated legislative or budgetary proposals. The strategy required under subsection (a) shall be in an unclassified form but may contain a classified annex. Nothing in this section may be construed as permitting the Department to engage in monitoring, surveillance, exfiltration, or other collection activities for the purpose of tracking an individual’s personally identifiable information.