DEFINITIONS.

SEC. 102. [6 U.S.C. 665j note] DEFINITIONS. In this division: (1) Covered cyber incident; covered entity; cyber incident; information system; ransom payment; ransomware attack; security vulnerability.—The terms “covered cyber incident”, “covered entity”, “cyber incident”, “information system”, “ransom payment”, “ransomware attack”, and “security vulnerability” have the meanings given those terms in section 2240 of the Homeland Security Act of 2002, as added by section 103 of this division. (2) Director.—The term “Director” means the Director of the Cybersecurity and Infrastructure Security Agency.