6 U.S.C. § 664 — National asset database

(a) Establishment. (1) The Secretary must establish and maintain a national database of every system or asset that the Secretary, consulting appropriate State homeland-security officials, finds vital because its loss, interruption, incapacity, or destruction would negatively or severely affect United States, State, or local economic security, public health, or safety, and every other system or asset the Secretary finds appropriate to include. (2) Consistent with Homeland Security Presidential Directive–7 as it existed January 1, 2007, the Secretary must maintain one classified, prioritized list of database systems and assets that would cause national or regional catastrophic effects if destroyed or disrupted. (b) Use. The Secretary must use the database in developing and carrying out Department plans and programs when appropriate. (c) Maintenance. (1) The Secretary must maintain and update the database and list annually. This includes setting data-collection guidelines and giving them to each State’s appropriate homeland-security official; regularly reviewing them with State officials for feedback; allowing a reasonable time for recommended State submissions; examining submissions for inaccurate descriptions or failure to meet the guidelines; and giving each relevant State official a list of those submissions for review and possible correction before final inclusion. (2) The Secretary may organize the database and list as appropriate, but must categorize them by National Infrastructure Protection Plan sectors and by State and county location. (3) The Secretary must identify and evaluate ways, including the Protected Critical Infrastructure Information Program, to obtain relevant private-sector information for generating either the database or list. (4) A Sector Risk Management Agency’s required classification, including its classification level, binds Congress, the Department, and any other federal agency receiving the information. (d) Reports. (1) Within 180 days after August 3, 2007, and annually afterward, the Secretary must report on the database and list to the Senate Homeland Security and Governmental Affairs Committee and House Homeland Security Committee. (2) Each report must include: (A) each listed system or asset’s name, location, and sector; (B) the same information for those the Secretary finds most at risk from terrorism; (C) major difficulties compiling the list or database; (D) major changes since the previous report; (E) when appropriate, how the database or list was used separately or together to allocate federal funds to prevent, reduce, mitigate, or respond to terrorism; (F) the Department’s coordination with private industry to ensure accuracy; and (G) other relevant information the Secretary considers relevant. (3) The report must be unclassified but may have a classified annex. (e) Consortium. The Secretary may create a National Infrastructure Protection Consortium to advise on identifying, generating, organizing, and maintaining the database or list. If created, it may include experienced national laboratories, federal agencies, State and local homeland-security organizations, academic institutions, or national Centers of Excellence, and may advise the Secretary on requests about database or list contents.