Joint Cyber Defense Collaborative Act

This bill amends the Homeland Security Act of 2002 to formally establish the Joint Cyber Defense Collaborative (JCDC) within the Cybersecurity and Infrastructure Security Agency (CISA). The JCDC is a program to enhance public-private partnerships for collective cyber defense, information sharing, and operational collaboration across critical infrastructure sectors.

Sec. 2, Establishment of Joint Cyber Defense Collaborative: This section replaces the existing 'joint cyber planning office' with the JCDC. It details the program's functions, including maintaining strategic partnerships, developing cyber defense plans for public and private entities, gathering and sharing threat information, and establishing focused initiatives for significant cyber risks. The JCDC must operate under a charter developed by the CISA Director, which outlines its structure, capabilities, partnership criteria, and performance metrics. An Advisory Council of 25 partners will be created to inform the charter. The section also includes provisions on partner views, clarifies that participation creates no legal rights, exempts implementation from certain administrative procedures, and adds a five-year sunset clause.

Sec. 2(b), Strategy; Annual Briefings; Information Policy: This subsection requires the CISA Director to submit the JCDC charter to Congress within 120 days and publish it. Within one year, a strategy with priorities and metrics must be submitted. Annual briefings on JCDC activities are required. Within 90 days, a policy must be issued on how shared information can be used, including restrictions on sharing with entities from countries identified as foreign adversaries, and requiring that threat information be protected as a High Value Asset.

Sec. 2(c), Clerical Amendment: This section makes a technical update to the table of contents of the Homeland Security Act of 2002 to reflect the new section title.