HOMELAND SECURITY ADVISORY SYSTEM AND INFORMATION SHARING.

SEC. 501. HOMELAND SECURITY ADVISORY SYSTEM AND INFORMATION SHARING.(a) Advisory System and Information Sharing.—(1) In general.—Subtitle A of title II of the Homeland Security Act of 2002 (6 U.S.C. 121 et seq.) is amended by adding at the end the following:“SEC. 203. HOMELAND SECURITY ADVISORY SYSTEM.“(a) Requirement.—The Secretary shall administer the Homeland Security Advisory System in accordance with this section to provide advisories or warnings regarding the threat or risk that acts of terrorism will be committed on the homeland to Federal, State, local, and tribal government authorities and to the people of the United States, as appropriate. The Secretary shall exercise primary responsibility for providing such advisories or warnings.121 STAT. 307“(b) Required Elements.—In administering the Homeland Security Advisory System, the Secretary shall—“(1) establish criteria for the issuance and revocation of such advisories or warnings;“(2) develop a methodology, relying on the criteria established under paragraph (1), for the issuance and revocation of such advisories or warnings;“(3) provide, in each such advisory or warning, specific information and advice regarding appropriate protective measures and countermeasures that may be taken in response to the threat or risk, at the maximum level of detail practicable to enable individuals, government entities, emergency response providers, and the private sector to act appropriately;“(4) whenever possible, limit the scope of each such advisory or warning to a specific region, locality, or economic sector believed to be under threat or at risk; and“(5) not, in issuing any advisory or warning, use color designations as the exclusive means of specifying homeland security threat conditions that are the subject of the advisory or warning. “SEC. 204. HOMELAND SECURITY INFORMATION SHARING.“(a) Information Sharing.—Consistent with section 1016 of the Intelligence Reform and Terrorism Prevention Act of 2004 (6 U.S.C. 485), the Secretary, acting through the Under Secretary for Intelligence and Analysis, shall integrate the information and standardize the format of the products of the intelligence components of the Department containing homeland security information, terrorism information, weapons of mass destruction information, or national intelligence (as defined in section 3(5) of the National Security Act of 1947 (50 U.S.C. 401a(5))) except for any internal security protocols or personnel information of such intelligence components, or other administrative processes that are administered by any chief security officer of the Department.“(b) Information Sharing and Knowledge Management Officers.—For each intelligence component of the Department, the Secretary shall designate an information sharing and knowledge management officer who shall report to the Under Secretary for Intelligence and Analysis regarding coordinating the different systems used in the Department to gather and disseminate homeland security information or national intelligence (as defined in section 3(5) of the National Security Act of 1947 (50 U.S.C. 401a(5))).“(c) State, Local, and Private-Sector Sources of Information.—“(1) Establishment of business processes.—The Secretary, acting through the Under Secretary for Intelligence and Analysis or the Assistant Secretary for Infrastructure Protection, as appropriate, shall—“(A) establish Department-wide procedures for the review and analysis of information provided by State, local, and tribal governments and the private sector;“(B) as appropriate, integrate such information into the information gathered by the Department and other departments and agencies of the Federal Government; and“(C) make available such information, as appropriate, within the Department and to other departments and agencies of the Federal Government.121 STAT. 308“(2) Feedback.—The Secretary shall develop mechanisms to provide feedback regarding the analysis and utility of information provided by any entity of State, local, or tribal government or the private sector that provides such information to the Department.“(d) Training and Evaluation of Employees.—“(1) Training.—The Secretary, acting through the Under Secretary for Intelligence and Analysis or the Assistant Secretary for Infrastructure Protection, as appropriate, shall provide to employees of the Department opportunities for training and education to develop an understanding of—“(A) the definitions of homeland security information and national intelligence (as defined in section 3(5) of the National Security Act of 1947 (50 U.S.C. 401a(5))); and“(B) how information available to such employees as part of their duties—“(i) might qualify as homeland security information or national intelligence; and“(ii) might be relevant to the Office of Intelligence and Analysis and the intelligence components of the Department.“(2) Evaluations.—The Under Secretary for Intelligence and Analysis shall—“(A) on an ongoing basis, evaluate how employees of the Office of Intelligence and Analysis and the intelligence components of the Department are utilizing homeland security information or national intelligence, sharing information within the Department, as described in this title, and participating in the information sharing environment established under section 1016 of the Intelligence Reform and Terrorism Prevention Act of 2004 (6 U.S.C. 485); and“(B) provide to the appropriate component heads regular reports regarding the evaluations under subparagraph (A). “SEC. 205. COMPREHENSIVE INFORMATION TECHNOLOGY NETWORK ARCHITECTURE.“(a) Establishment.—The Secretary, acting through the Under Secretary for Intelligence and Analysis, shall establish, consistent with the policies and procedures developed under section 1016 of the Intelligence Reform and Terrorism Prevention Act of 2004 (6 U.S.C. 485), and consistent with the enterprise architecture of the Department, a comprehensive information technology network architecture for the Office of Intelligence and Analysis that connects the various databases and related information technology assets of the Office of Intelligence and Analysis and the intelligence components of the Department in order to promote internal information sharing among the intelligence and other personnel of the Department.“(b) Comprehensive Information Technology Network Architecture Defined.—The term ‘comprehensive information technology network architecture’ means an integrated framework for evolving or maintaining existing information technology and acquiring new information technology to achieve the strategic management and information resources management goals of the Office of Intelligence and Analysis.121 STAT. 309 “SEC. 206. COORDINATION WITH INFORMATION SHARING ENVIRONMENT.“(a) Guidance.—All activities to comply with sections 203, 204, and 205 shall be—“(1) consistent with any policies, guidelines, procedures, instructions, or standards established under section 1016 of the Intelligence Reform and Terrorism Prevention Act of 2004 (6 U.S.C. 485);“(2) implemented in coordination with, as appropriate, the program manager for the information sharing environment established under that section;“(3) consistent with any applicable guidance issued by the Director of National Intelligence; and“(4) consistent with any applicable guidance issued by the Secretary relating to the protection of law enforcement information or proprietary information.“(b) Consultation.—In carrying out the duties and responsibilities under this subtitle, the Under Secretary for Intelligence and Analysis shall take into account the views of the heads of the intelligence components of the Department.” .(2) Technical and conforming amendments.—(A) In general.—Section 201(d) of the Homeland Security Act of 2002 (6 U.S.C. 121(d)) is amended—(i) by striking paragraph (7); and(ii) by redesignating paragraphs (8) through (19) as paragraphs (7) through (18), respectively.(B) Table of contents.—The table of contents in section 1(b) of the Homeland Security Act of 2002 (6 U.S.C. 101 et seq.) is amended by inserting after the item relating to section 202 the following: “Sec. 203. Homeland Security Advisory System. “Sec. 204. Homeland security information sharing. “Sec. 205. Comprehensive information technology network architecture. “Sec. 206. Coordination with information sharing environment.”. (b) Office of Intelligence and Analysis and Office of Infrastructure Protection.—Section 201(d) of the Homeland Security Act of 2002 (6 U.S.C. 121(d)) is amended—(1) in paragraph (1), by inserting “, in support of the mission responsibilities of the Department and the functions of the National Counterterrorism Center established under section 119 of the National Security Act of 1947 (50 U.S.C. 404o),” after “and to integrate such information”; and(2) by striking paragraph (7), as redesignated by subsection (a)(2)(A)(ii) of this section, and inserting the following:“(7) To review, analyze, and make recommendations for improvements to the policies and procedures governing the sharing of information within the scope of the information sharing environment established under section 1016 of the Intelligence Reform and Terrorism Prevention Act of 2004 (6 U.S.C. 485), including homeland security information, terrorism information, and weapons of mass destruction information, and any policies, guidelines, procedures, instructions, or standards established under that section.”.(c) Report on Comprehensive Information Technology Network Architecture.—Not later than 120 days after the date of enactment of this Act, the Secretary of Homeland Security shall submit to the Committee on Homeland Security and Governmental 121 STAT. 310 Affairs of the Senate and the Committee on Homeland Security of the House of Representatives a report on the progress of the Secretary in developing the comprehensive information technology network architecture required under section 205 of the Homeland Security Act of 2002, as added by subsection (a). The report shall include—(1) a description of the priorities for the development of the comprehensive information technology network architecture and a rationale for such priorities;(2) an explanation of how the various components of the comprehensive information technology network architecture will work together and interconnect;(3) a description of the technological challenges that the Secretary expects the Office of Intelligence and Analysis will face in implementing the comprehensive information technology network architecture;(4) a description of the technological options that are available or are in development that may be incorporated into the comprehensive information technology network architecture, the feasibility of incorporating such options, and the advantages and disadvantages of doing so;(5) an explanation of any security protections to be developed as part of the comprehensive information technology network architecture;(6) a description of safeguards for civil liberties and privacy to be built into the comprehensive information technology network architecture; and(7) an operational best practices plan.