6 U.S.C. § 665j — Ransomware threat mitigation activities

(a) Joint Ransomware Task Force. (1) Within 180 days after March 15, 2022, the Director, consulting the National Cyber Director, Attorney General, and FBI Director, must establish and chair the Task Force. It must coordinate an ongoing nationwide campaign against ransomware attacks and find and pursue opportunities for international cooperation. (2) It must include participants from Federal agencies chosen as appropriate by the National Cyber Director in consultation with the Homeland Security Secretary. (3) Using only each participating agency’s existing authorities, it must coordinate: (A) intelligence-driven operations to disrupt particular ransomware actors; (B) consultation with relevant private-sector, State, local, Tribal, territorial, and international stakeholders to identify needs and ways to provide input; (C) an continuously updated list of the highest-threat ransomware entities, created with relevant entities, to help Federal agencies prioritize action and identify success measures; (D) disruption of ransomware criminals, related infrastructure, and finances; (E) Federal coordination and collaboration with relevant entities, including the private sector, to improve action against ransomware; (F) collection, sharing, and analysis of ransomware trends; (G) after-action reports and other lessons identifying successes and failures to improve later action; and (H) other activities the Task Force considers appropriate to reduce ransomware threats. (b) Rule of construction. This section gives no additional authority to any Federal agency.