(1) The Committee shall within reasonable time and in consultation with the owner or a person in control of an identified critical information infrastructure, submit to the National Security Council its recommendations of entities to be gazetted as critical information infrastructures.
(2) The Committee shall, after the gazettement under subsection (1),in consultation with a person that owns or operates the critical information infrastructure—
(a) conduct an assessment of the threats, vulnerabilities, risks, and probability of a cyber attack across all critical infrastructure sectors;
(b) determine the harm to the economy that would result from damage or unauthorized access to critical infrastructure;
(c) measure the overall preparedness of each sector against damage or unauthorized access to critical infrastructure including the effectiveness of market forces driving security innovation and secure practices.
(d) identify any other risk-based security factors appropriate and necessary to protect public health and safety, or national socioeconomic security; and
(e) recommend to the owners of systems designated as critical infrastructure, methods of securing their systems against cyber threats.
(2) The Committee shall, after the gazettement under subsection (1),in consultation with a person that owns or operates the critical information infrastructure—
(a) conduct an assessment of the threats, vulnerabilities, risks, and probability of a cyber attack across all critical infrastructure sectors;
(b) determine the harm to the economy that would result from damage or unauthorized access to critical infrastructure;
(c) measure the overall preparedness of each sector against damage or unauthorized access to critical infrastructure including the effectiveness of market forces driving security innovation and secure practices.
(d) identify any other risk-based security factors appropriate and necessary to protect public health and safety, or national socioeconomic security; and
(e) recommend to the owners of systems designated as critical infrastructure, methods of securing their systems against cyber threats.
Check the current authoritative text and amendment history before relying on a provision.