44 U.S.C. § 3556 — Federal information security incident center

(a) In general. The Secretary^* must ensure operation of a central Federal information-security incident^* center that (1) gives agency-system operators timely technical help about incidents, including detection and handling guidance; (2) collects and analyzes information about threats to information security^*; (3) tells operators about current and possible threats and vulnerabilities; (4) when appropriate, gives agencies intelligence and other information about cyber threats, vulnerabilities, and incidents to help with risk assessments under section 3554(b); and (5) consults NIST, agencies or offices operating or controlling national-security systems, including the NSA, and other agencies or offices as law and the President direct. (b) National-security systems. Each agency operating or controlling a national-security system must share information about security incidents, threats, and vulnerabilities with the center to the extent consistent with national-security-system standards and guidelines issued under law and presidential direction.