---
kind: "section"
citation: "6 U.S.C. § 1500"
title: "6"
title_heading: "Domestic Security"
number: "1500"
heading: "National Cyber Director"
release: "119-102"
url: "https://uscodex.org/usc/6/1500"
units:
  - "Chapter 6 — Cybersecurity"
  - "Subchapter I — Cybersecurity Information Sharing"
---

# §1500. National Cyber Director

- (a) **Establishment—** There is established, within the Executive [Office](/usc/6/590.md?p=3) of the President, the [Office](/usc/6/590.md?p=3) of the National Cyber Director (in this section referred to as the “[Office](/usc/6/590.md?p=3)”).
- (b) **National Cyber Director—**
  - (1) **In general—** The [Office](/usc/6/590.md?p=3) shall be headed by the National Cyber Director (in this section referred to as the “Director”) who shall be appointed by the President, by and with the advice and consent of the Senate.
  - (2) **Position—** The Director shall hold [office](/usc/6/590.md?p=3) at the pleasure of the President.
  - (3) **Pay and allowances—** The Director shall be entitled to receive the same pay and allowances as are provided for level II of the Executive Schedule under [section 5313 of title 5](/usc/5/5313.md).
- (c) **Duties of the National Cyber Director—**
  - (1) **In general—** Subject to the authority, direction, and control of the President, the Director shall—
    - (A) serve as the principal advisor to the President on cybersecurity policy and strategy relating to the coordination of—
      - (i) [information security](#g-5) and data protection;
      - (ii) programs and policies intended to improve the [cybersecurity posture](#g-1) of the United States;
      - (iii) efforts to understand and deter malicious cyber activity;
      - (iv) efforts to increase the security of information and communications technology and services and to promote national supply chain risk management and vendor security;
      - (v) diplomatic and other efforts to develop norms and international consensus around responsible [state](/usc/6/701.md?p=11) behavior in cyberspace;
      - (vi) awareness and adoption of emerging technology that may enhance, augment, or degrade the [cybersecurity posture](#g-1) of the United States; and
      - (vii) such other cybersecurity matters as the President considers appropriate;
    - (B) offer advice and consultation to the National Security [Council](/usc/6/681.md?p=2) and its staff, the [Homeland](/usc/6/126.md?p=g-1) Security [Council](/usc/6/681.md?p=2) and its staff, and relevant Federal [departments](/usc/6/701.md?p=5) and [agencies](/usc/6/1501.md?p=1), for their consideration, relating to the development and coordination of national cyber policy and strategy, including the National Cyber Strategy;
    - (C) lead the coordination of implementation of national cyber policy and strategy, including the National Cyber Strategy, by—
      - (i) in coordination with the heads of relevant Federal [departments](/usc/6/701.md?p=5) or [agencies](/usc/6/1501.md?p=1), monitoring and assessing the effectiveness, including cost-effectiveness, of the implementation of such national cyber policy and strategy by Federal [departments](/usc/6/701.md?p=5) and [agencies](/usc/6/1501.md?p=1);
      - (ii) making recommendations, relevant to changes in the organization, personnel, and resource allocation and to policies of Federal [departments](/usc/6/701.md?p=5) and [agencies](/usc/6/1501.md?p=1), to the heads of relevant Federal [departments](/usc/6/701.md?p=5) and [agencies](/usc/6/1501.md?p=1) in order to implement such national cyber policy and strategy;
      - (iii) reviewing the annual budget proposals for relevant Federal [departments](/usc/6/701.md?p=5) and [agencies](/usc/6/1501.md?p=1) and advising the heads of such [departments](/usc/6/701.md?p=5) and [agencies](/usc/6/1501.md?p=1) whether such proposals are consistent with such national cyber policy and strategy;
      - (iv) continuously assessing and making relevant recommendations to the President on the appropriate level of integration and interoperability across the Federal cyber [centers](/usc/6/681.md?p=1);
      - (v) coordinating with the Attorney General, the Federal Chief Information Officer, the Director of the [Office](/usc/6/590.md?p=3) of Management and Budget, the Director of National [Intelligence](#g-6), and the Director of the Cybersecurity and Infrastructure Security [Agency](/usc/6/1501.md?p=1), on the streamlining of Federal policies and guidelines, including with respect to implementation of subchapter II of [chapter 35](/usc/44/ch35.md) of title 44, and, as appropriate or applicable, regulations relating to cybersecurity;
      - (vi) reporting annually to the President, the Assistant to the President for National Security Affairs, and Congress on the [state](/usc/6/701.md?p=11) of the [cybersecurity posture](#g-1) of the United States, the effectiveness of such national cyber policy and strategy, and the status of the implementation of such national cyber policy and strategy by Federal [departments](/usc/6/701.md?p=5) and [agencies](/usc/6/1501.md?p=1); and
      - (vii) such other activity as the President considers appropriate to further such national cyber policy and strategy;
    - (D) lead coordination of the development and ensuring implementation by the Federal Government of integrated [incident response](#g-4) to cyberattacks and cyber campaigns of significant consequence, including—
      - (i) ensuring and facilitating coordination among relevant Federal [departments](/usc/6/701.md?p=5) and [agencies](/usc/6/1501.md?p=1) in the development of integrated operational plans, processes, and playbooks, including for [incident response](#g-4), that feature—
        - (I) clear lines of authority and lines of effort across the Federal Government;
        - (II) authorities that have been delegated to an appropriate level to facilitate effective operational responses across the Federal Government; and
        - (III) support for the integration of defensive cyber plans and capabilities with offensive cyber plans and capabilities in a manner consistent with improving the [cybersecurity posture](#g-1) of the United States;
      - (ii) ensuring the exercising of defensive operational plans, processes, and playbooks for [incident response](#g-4);
      - (iii) ensuring the updating of defensive operational plans, processes, and playbooks for [incident response](#g-4) as needed to keep them updated; and
      - (iv) reviewing and ensuring that defensive operational plans, processes, and playbooks improve coordination with relevant private sector entities, as appropriate;
    - (E) preparing the response by the Federal Government to cyberattacks and cyber campaigns of significant consequence across Federal [departments](/usc/6/701.md?p=5) and [agencies](/usc/6/1501.md?p=1) with responsibilities pertaining to cybersecurity and with the relevant private sector entities, including—
      - (i) developing for the approval of the President, in coordination with the Assistant to the President for National Security Affairs and the heads of relevant Federal [departments](/usc/6/701.md?p=5) and [agencies](/usc/6/1501.md?p=1), operational priorities, requirements, and plans;
      - (ii) ensuring [incident response](#g-4) is executed consistent with the plans described in [clause (i)](#c-1-E-i); and
      - (iii) ensuring relevant Federal [department](/usc/6/701.md?p=5) and [agency](/usc/6/1501.md?p=1) consultation with relevant private sector entities in [incident response](#g-4);
    - (F) coordinate and consult with private sector leaders on cybersecurity and emerging technology issues in support of, and in coordination with, the Director of the Cybersecurity and Infrastructure Security [Agency](/usc/6/1501.md?p=1), the Director of National [Intelligence](#g-6), and the heads of other Federal [departments](/usc/6/701.md?p=5) and [agencies](/usc/6/1501.md?p=1), as appropriate;
    - (G) annually report to Congress on [cybersecurity threats](/usc/6/383.md?p=i-1) and issues facing the United States, including any new or emerging technologies that may affect national security, economic prosperity, or enforcing the rule of law; and
    - (H) be responsible for such other functions as the President may direct.
  - (2) **Delegation of authority—**
    - (A) The Director may—
      - (i) serve as the senior representative to any organization that the President may establish for the purpose of providing the President advice on cybersecurity;
      - (ii) subject to [subparagraph (B)](#c-2-B), be included as a participant in preparations for and, when appropriate, the execution of domestic and international summits and other international meetings at which cybersecurity is a major topic;
      - (iii) delegate any of the Director’s functions, powers, and duties to such officers and employees of the [Office](/usc/6/590.md?p=3) as the Director considers appropriate; and
      - (iv) authorize such successive re-delegations of such functions, powers, and duties to such officers and employees of the [Office](/usc/6/590.md?p=3) as the Director considers appropriate.
    - (B) In acting under [subparagraph (A)(ii)](#c-2-A-ii) in the case of a summit or a meeting with an international partner, the Director shall act in coordination with the Secretary of State.
- (d) **Omitted—**
- (e) **Powers of the Director—**
  - (1) **In general—** The Director may, for the purposes of carrying out the functions of the Director under this section—
    - (A) subject to the civil service and classification laws, select, appoint, employ, and fix the compensation of such officers and employees as are necessary and prescribe their duties, except that not more than 75 individuals may be employed without regard to any provision of law regulating the employment or compensation at rates not to exceed the basic rate of basic pay payable for level IV of the Executive Schedule under [section 5315 of title 5](/usc/5/5315.md);
    - (B) employ experts and consultants in accordance with [section 3109 of title 5](/usc/5/3109.md), and compensate individuals so employed for each day (including travel time) at rates not in excess of the maximum rate of basic pay for grade GS–15 as provided in [section 5332](/usc/5/5332.md) of such title, and while such experts and consultants are so serving away from their homes or regular place of business, to pay such employees travel expenses and per diem in lieu of subsistence at rates authorized by [section 5703](/usc/5/5703.md) of such title 5 for persons in Federal Government service employed intermittently;
    - (C) accept officers or employees of the United States or members of the Armed Forces on a detail from an element of the [intelligence](#g-6) community (as such term is defined in [section 3003(4) of title 50](/usc/50/3003.md?p=4)) or from another element of the Federal Government on a nonreimbursable basis, as jointly agreed to by the heads of the receiving and detailing elements, for a period not to exceed three years;
    - (D) promulgate such rules and regulations as may be necessary to carry out the functions, powers, and duties vested in the Director;
    - (E) utilize, with their consent, the services, personnel, and facilities of other Federal [agencies](/usc/6/1501.md?p=1);
    - (F) enter into and perform such contracts, leases, cooperative agreements, or other transactions as may be necessary in the conduct of the work of the [Office](/usc/6/590.md?p=3) and on such terms as the Director may determine appropriate, with any Federal [agency](/usc/6/1501.md?p=1), or with any public or private person or entity;
    - (G) accept voluntary and uncompensated services, notwithstanding the provisions of [section 1342 of title 31](/usc/31/1342.md);
    - (H) adopt an official seal, which shall be judicially noticed; and
    - (I) provide, where authorized by law, copies of documents to persons at cost, except that any [funds](/usc/6/677a.md?p=5) so received shall be credited to, and be available for use from, the account from which expenditures relating thereto were made.
  - (2) **Rules of construction regarding details—** Nothing in [paragraph (1)(C)](#e-1-C) may be construed as imposing any limitation on any other authority for reimbursable or nonreimbursable details. A nonreimbursable detail made pursuant to such paragraph shall not be considered an augmentation of the appropriations of the receiving element of the [Office](/usc/6/590.md?p=3) of the National Cyber Director.
- (f) **Rules of construction—** Nothing in this section may be construed as—
  - (1) modifying any authority or responsibility, including any operational authority or responsibility of any head of a Federal [department](/usc/6/701.md?p=5) or [agency](/usc/6/1501.md?p=1);
  - (2) authorizing the Director or any person acting under the authority of the Director to interfere with or to direct a criminal or national security investigation, arrest, search, seizure, or disruption operation;
  - (3) amending a legal restriction that was in effect on the day before January 1, 2021 that requires a law enforcement [agency](/usc/6/1501.md?p=1) to keep confidential information learned in the course of a criminal or national security investigation;
  - (4) authorizing the Director or any person acting under the authority of the Director to interfere with or to direct a military operation;
  - (5) authorizing the Director or any person acting under the authority of the Director to interfere with or to direct any diplomatic or consular activity;
  - (6) authorizing the Director or any person acting under the authority of the Director to interfere with or to direct an [intelligence](#g-6) activity, resource, or operation; or
  - (7) authorizing the Director or any person acting under the authority of the Director to modify the classification of [intelligence](#g-6) information.
- (g) **Definitions—** In this section:
  - (1) The term “cybersecurity posture” means the ability to identify, to protect against, to detect, to respond to, and to recover from an intrusion in an [information system](/usc/6/383.md?p=i-3) the compromise of which could constitute a cyber attack or cyber campaign of significant consequence.
  - (2) The term “cyber attack and cyber campaign of significant consequence” means an [incident](#g-3) or series of [incidents](#g-3) that has the purpose or effect of—
    - (A) causing a significant disruption to the confidentiality, integrity, or availability of a Federal [information system](/usc/6/383.md?p=i-3);
    - (B) harming, or otherwise significantly compromising the provision of service by, a computer or network of computers that support one or more entities in a critical infrastructure sector;
    - (C) significantly compromising the provision of services by one or more entities in a critical infrastructure sector;
    - (D) causing a significant misappropriation of [funds](/usc/6/677a.md?p=5) or economic [resources](/usc/6/741.md?p=12), trade secrets, personal identifiers, or financial information for commercial or competitive advantage or private financial gain; or
    - (E) otherwise constituting a significant threat to the national security, foreign policy, or economic health or financial stability of the United States.
  - (3) The term “incident” has the meaning given such term in [section 3552 of title 44](/usc/44/3552.md).
  - (4) The term “incident response” means a government or private sector activity that detects, mitigates, or recovers from a cyber attack or cyber campaign of significant consequence.
  - (5) The term “information security” has the meaning given such term in [section 3552 of title 44](/usc/44/3552.md).
  - (6) The term “intelligence” has the meaning given such term in [section 3003 of title 50](/usc/50/3003.md).

## Source credit

(Pub. L. 116–283, div. A, title XVII, § 1752, Jan. 1, 2021, 134 Stat. 4144; Pub. L. 117–81, div. A, title XV, § 1552, Dec. 27, 2021, 135 Stat. 2070.)

## Notes

### Editorial Notes

### Codification

Section was enacted as part of the William M. (Mac) Thornberry National Defense Authorization Act for Fiscal Year 2021, and not as part of the Cybersecurity Information Sharing Act of 2015 which comprises this subchapter and not as part of the Cybersecurity Act of 2015 which comprises this chapter.

Section is comprised of section 1752 of Pub. L. 116–283. Subsec. (d) of section 1752 of Pub. L. 116–283 amended section 3021 of Title 50, War and National Defense.

### Amendments

2021—Subsec. (e). Pub. L. 117–81, § 1552(1), (2), (4), designated existing provisions as par. (1) and inserted heading, redesignated former pars. (1) to (8) as subpars. (A) to (H), respectively, of par. (1) and realigned margins, and added par. (2).

Subsec. (e)(1)(C) to (I). Pub. L. 117–81, § 1552(3), added subpar. (C) and redesignated former subpars. (C) to (H) (as redesignated by section 1552(1) of Pub. L. 117–81, see above) as (D) to (I), respectively.

### Statutory Notes and Related Subsidiaries

### Short Title of 2022 Amendment

Pub. L. 117–260, § 1, Dec. 21, 2022, 136 Stat. 2389, provided that: “This Act [enacting section 1526 of this title and provisions set out as notes under section 1526 of this title] may be cited as the ‘Quantum Computing Cybersecurity Preparedness Act’.”