6 U.S.C. § 681 — Definitions

In this part: (1) “Center” means the center established under section 659. This section does not define “center” itself. (2) “Council” means the Cyber Incident^* Reporting Council described in section 681f. (3) “Covered cyber incident” means a substantial cyber incident experienced by a covered entity that meets the definition and criteria the Director^* establishes in the final rule under section 681b(b). (4) “Covered entity” means an entity in a critical-infrastructure sector, as defined in Presidential Policy Directive 21, that meets the definition the Director establishes in that final rule. (5) “Cyber incident” (A) has the meaning of “incident” in section 659; this section does not define that term; and (B) does not include an occurrence that is imminent but has not actually put at risk (i) information on information systems or (ii) information systems. (6) “Cyber threat” has the meaning of “cybersecurity threat^*” in section 650; this section does not define that term. (7) “Federal entity” has the meaning in section 1501; this section does not define that term. (8) “Ransom payment” means sending money or other property or an asset, including virtual currency, or any part of it, that at any time was delivered as ransom connected with a ransomware attack^*. (9) “Significant cyber incident” means a cyber incident, or related group of incidents, that the Secretary^* determines is likely to cause demonstrable harm to United States national-security interests, foreign relations, or economy, or to United States public confidence, civil liberties, or public health and safety. (10) “Virtual currency” means a digital representation of value that works as a medium of exchange, unit of account, or store of value. (11) “Virtual currency address” means a unique public cryptographic key identifying where a virtual-currency payment can be sent.