National Cyber Director

There is established, within the Executive Office of the President, the Office of the National Cyber Director (in this section referred to as the “Office”). The Office shall be headed by the National Cyber Director (in this section referred to as the “Director”) who shall be appointed by the President, by and with the advice and consent of the Senate. The Director shall hold office at the pleasure of the President. The Director shall be entitled to receive the same pay and allowances as are provided for level II of the Executive Schedule under section 5313 of title 5. Subject to the authority, direction, and control of the President, the Director shall— serve as the principal advisor to the President on cybersecurity policy and strategy relating to the coordination of— lead the coordination of implementation of national cyber policy and strategy, including the National Cyber Strategy, by— lead coordination of the development and ensuring implementation by the Federal Government of integrated incident response to cyberattacks and cyber campaigns of significant consequence, including— ensuring and facilitating coordination among relevant Federal departments and agencies in the development of integrated operational plans, processes, and playbooks, including for incident response, that feature— preparing the response by the Federal Government to cyberattacks and cyber campaigns of significant consequence across Federal departments and agencies with responsibilities pertaining to cybersecurity and with the relevant private sector entities, including— The Director may— The Director may, for the purposes of carrying out the functions of the Director under this section— Nothing in paragraph (1)(C) may be construed as imposing any limitation on any other authority for reimbursable or nonreimbursable details. A nonreimbursable detail made pursuant to such paragraph shall not be considered an augmentation of the appropriations of the receiving element of the Office of the National Cyber Director. Nothing in this section may be construed as— In this section: The term “cyber attack and cyber campaign of significant consequence” means an incident or series of incidents that has the purpose or effect of—