42 U.S.C. § 18725 - U.S. Code - Unannotated Title 42. The Public Health and Welfare § 18725. Cybersecurity plan

(1) to submit to the Secretary, prior to the issuance of the award or other funding, a cybersecurity plan that demonstrates the cybersecurity maturity of the recipient in the context of the project for which that award or other funding was provided; and

(2) establish a plan for maintaining and improving cybersecurity throughout the life of the proposed solution of the project.

(1) plans to maintain cybersecurity between networks, systems, devices, applications, or components--

(2) will perform ongoing evaluation of cybersecurity risks to address issues as the issues arise throughout the life of the proposed solution;

(3) will report known or suspected network or system compromises of the project to the Secretary; and

(4) will leverage applicable cybersecurity programs of the Department, including cyber vulnerability testing and security engineering evaluations.

(1) maximize the use of open guidance and standards, including, wherever possible--

(2) document --

(1) shall be exempt from disclosure under section 552(b)(3) of Title 5; and

(2) shall not be made available by any Federal agency, State, political subdivision of a State, or Tribal authority pursuant to any Federal, State, political subdivision of a State, or Tribal law, respectively, requiring public disclosure of information or records.