---
kind: "section"
citation: "6 U.S.C. § 665b"
title: "6"
title_heading: "Domestic Security"
number: "665b"
heading: "Joint cyber planning office"
release: "119-102"
url: "https://uscodex.org/usc/6/665b"
units:
  - "Chapter 1 — Homeland Security Organization"
  - "Subchapter XVIII — Cybersecurity and Infrastructure Security Agency"
  - "Part A — Cybersecurity and Infrastructure Security"
---

# §665b. Joint cyber planning office

- (a) **Establishment of Office—** There is established in the [Agency](/usc/6/650.md?p=1) an [office](/usc/6/590.md?p=3) for joint cyber planning (in this section referred to as the “[Office](/usc/6/590.md?p=3)”) to develop, for public and private sector entities, plans for [cyber defense operations](#f), including the development of a set of coordinated actions to protect, detect, respond to, and recover from [cybersecurity risks](/usc/6/650.md?p=7) or [incidents](/usc/6/650.md?p=12) or limit, mitigate, or defend against coordinated, malicious cyber operations that pose a potential risk to [critical infrastructure](/usc/6/101.md?p=4) or national interests. The [Office](/usc/6/590.md?p=3) shall be headed by a senior official of the [Agency](/usc/6/650.md?p=1) selected by the [Director](/usc/6/650.md?p=10).
- (b) **Planning and execution—** In leading the development of plans for [cyber defense operations](#f) pursuant to [subsection (a)](#a), the head of the [Office](/usc/6/590.md?p=3) shall—
  - (1) coordinate with relevant Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/650.md?p=1) to establish processes and procedures necessary to develop and maintain ongoing coordinated plans for [cyber defense operations](#f);
  - (2) leverage cyber capabilities and authorities of participating Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/650.md?p=1), as appropriate, in furtherance of plans for [cyber defense operations](#f);
  - (3) ensure that plans for [cyber defense operations](#f) are, to the greatest extent practicable, developed in collaboration with relevant private sector entities, particularly in areas in which such entities have comparative advantages in limiting, mitigating, or defending against a [cybersecurity risk](/usc/6/650.md?p=7) or [incident](/usc/6/650.md?p=12) or coordinated, malicious cyber operation;
  - (4) ensure that plans for [cyber defense operations](#f), as appropriate, are responsive to potential adversary activity conducted in response to [United States](/usc/6/101.md?p=19-A) offensive cyber operations;
  - (5) facilitate the exercise of plans for [cyber defense operations](#f), including by developing and modeling scenarios based on an understanding of adversary threats to, vulnerability of, and potential consequences of disruption or compromise of [critical infrastructure](/usc/6/101.md?p=4);
  - (6) coordinate with and, as necessary, support relevant Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/650.md?p=1) in the establishment of procedures, development of additional plans, including for offensive and intelligence activities in support of [cyber defense operations](#f), and creation of agreements necessary for the rapid execution of plans for [cyber defense operations](#f) when a [cybersecurity risk](/usc/6/650.md?p=7) or [incident](/usc/6/650.md?p=12) or malicious cyber operation has been identified; and
  - (7) support public and private sector entities, as appropriate, in the execution of plans developed pursuant to this section.
- (c) **Composition—** The [Office](/usc/6/590.md?p=3) shall be composed of—
  - (1) a central planning staff; and
  - (2) appropriate representatives of Federal [departments](/usc/6/101.md?p=5) and [agencies](/usc/6/650.md?p=1), including—
    - (A) the [Department](/usc/6/101.md?p=5);
    - (B) [United States](/usc/6/101.md?p=19-A) Cyber Command;
    - (C) the National Security [Agency](/usc/6/650.md?p=1);
    - (D) the Federal Bureau of Investigation;
    - (E) the [Department](/usc/6/101.md?p=5) of Justice; and
    - (F) the [Office](/usc/6/590.md?p=3) of the [Director](/usc/6/650.md?p=10) of National Intelligence.
- (d) **Consultation—** In carrying out its responsibilities described in [subsection (b)](#b), the [Office](/usc/6/590.md?p=3) shall regularly consult with appropriate representatives of [non-Federal entities](/usc/6/1533.md?p=a-4), such as—
  - (1) [State](/usc/6/101.md?p=17), local, federally-recognized Tribal, and territorial governments;
  - (2) [Information Sharing and Analysis Organizations](/usc/6/650.md?p=13), including information [sharing](/usc/6/650.md?p=26) and analysis [centers](/usc/6/681.md?p=1);
  - (3) owners and operators of critical [information systems](/usc/6/650.md?p=14);
  - (4) [private entities](/usc/6/665h.md?p=b-2); and
  - (5) other appropriate representatives or entities, as determined by the [Secretary](/usc/6/101.md?p=16).
- (e) **Interagency agreements—** The [Secretary](/usc/6/101.md?p=16) and the head of a Federal [department](/usc/6/101.md?p=5) or [agency](/usc/6/650.md?p=1) referred to in [subsection (c)](#c) may enter into agreements for the purpose of detailing [personnel](/usc/6/101.md?p=15) on a reimbursable or non-reimbursable basis.
- (f) **Definitions—** In this section, the term “cyber defense operation” means the defensive activities performed for a [cybersecurity purpose](/usc/6/650.md?p=6).

## Source credit

(Pub. L. 107–296, title XXII, § 2216, formerly § 2215, as added Pub. L. 116–283, div. A, title XVII, § 1715(a), Jan. 1, 2021, 134 Stat. 4092; renumbered § 2216 and amended Pub. L. 117–81, div. A, title XV, § 1547(b)(1)(A)(iii), Dec. 27, 2021, 135 Stat. 2061; Pub. L. 117–263, div. G, title LXXI, § 7143(b)(2)(I), Dec. 23, 2022, 136 Stat. 3660.)

## Notes

### Editorial Notes

### Prior Provisions

A prior section 2216 of Pub. L. 107–296 was renumbered section 2219 and is classified to section 665e of this title.

### Amendments

2022—Subsec. (d)(2). Pub. L. 117–263, § 7143(b)(2)(I)(i), substituted “Information Sharing and Analysis Organizations” for “information sharing and analysis organizations”.

Subsec. (f). Pub. L. 117–263, § 7143(b)(2)(I)(ii), substituted “section, the term ‘cyber defense operation’ means the defensive activities performed for a cybersecurity purpose.” for “section:” and struck out pars. (1) to (4) which defined cyber defense operation, cybersecurity purpose, cybersecurity risk, incident, and information sharing and analysis organization.

2021—Pub. L. 117–81 reenacted section catchline.