6 U.S.C. § 677c: Cyber Response and Recovery Fund

the coordination of activities described in section 677b(b) of this title ; vulnerability assessments and mitigation; technical incident mitigation; malware analysis; analytic support; threat detection and hunting; and network protections; hardware or software to replace, update, improve, harden, or enhance the functionality of existing hardware, software, or systems; and technical contract personnel support; and advance actions taken by the Secretary under section 677b(f)(1)(B) of this title . appropriations to the Fund for activities of the Fund; and reimbursement from Federal agencies for the activities described in paragraphs (1), (2), and (4) of subsection (a), which shall only be from amounts made available in advance in appropriations Acts for such reimbursement. Any expenditure from the Fund for the purposes of this part shall be made from amounts available in the Fund from a deposit described in paragraph (1), and amounts available in the Fund shall be in addition to any other appropriations available to the Cybersecurity and Infrastructure Security Agency for such purposes. Amounts in the Fund shall be used to supplement, not supplant, other Federal, State, local, or Tribal funding for activities in response to a declaration. The Secretary shall require an entity that receives amounts from the Fund to submit a report to the Secretary that details the specific use of the amounts.