The head of each agency operating or exercising control of a national security system shall be responsible for ensuring that the agency—

1. (1) provides information security protections commensurate with the risk and magnitude of the harm resulting from the unauthorized access, use, disclosure, disruption, modification, or destruction of the information contained in such system;
2. (2) implements information security policies and practices as required by standards and guidelines for national security systems, issued in accordance with law and as directed by the President; and
3. (3) complies with the requirements of this subchapter.

(Added Pub. L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat. 2266.)

Applicability of Section

This section not to apply while subchapter III of this chapter is in effect, see section 3549 of this title.

Prior Provisions

A prior section 3536, added Pub. L. 106–398, § 1 [[div. A], title X, § 1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–272; amended Pub. L. 107–314, div. A, title X, § 1052(a), Dec. 2, 2002, 116 Stat. 2648, set forth expiration date of this subchapter prior to the general amendment of this subchapter by Pub. L. 107–296.

Effective Date

Section effective 60 days after Nov. 25, 2002, see section 4 of Pub. L. 107–296, set out as a note under section 101 of Title 6, Domestic Security.