View all text of Part C [§ 677 - § 677g]
§ 677c. Cyber Response and Recovery Fund
(a) In generalThere is established a Cyber Response and Recovery Fund, which shall be available for—
(1) the coordination of activities described in section 677b(b) of this title;
(2) response and recovery support for the specific significant incident associated with a declaration to Federal, State, local, and Tribal, entities and public and private entities on a reimbursable or non-reimbursable basis, including through asset response activities and technical assistance, such as—
(A) vulnerability assessments and mitigation;
(B) technical incident mitigation;
(C) malware analysis;
(D) analytic support;
(E) threat detection and hunting; and
(F) network protections;
(3) as the Director determines appropriate, grants for, or cooperative agreements with, Federal, State, local, and Tribal public and private entities to respond to, and recover from, the specific significant incident associated with a declaration, such as—
(A) hardware or software to replace, update, improve, harden, or enhance the functionality of existing hardware, software, or systems; and
(B) technical contract personnel support; and
(4) advance actions taken by the Secretary under section 677b(f)(1)(B) of this title.
(b) Deposits and expenditures
(1) In generalAmounts shall be deposited into the Fund from—
(A) appropriations to the Fund for activities of the Fund; and
(B) reimbursement from Federal agencies for the activities described in paragraphs (1), (2), and (4) of subsection (a), which shall only be from amounts made available in advance in appropriations Acts for such reimbursement.
(2) Expenditures
(c) Supplement not supplant
(d) Reporting
(Pub. L. 107–296, title XXII, § 2234, as added Pub. L. 117–58, div. G, title VI, § 70602(a), Nov. 15, 2021, 135 Stat. 1270.)