6 U.S.C. § 383
Section 383 · National Computer Forensics Institute
Current version, with additions and removals from the November 2, 2017 version.
The functions of the Institute shall include the following:
(1) Educating State, local, tribal, and territorial law enforcement officers, prosecutors, and judges on current—
(A) cyber and electronic crimes and related threats;
(B) methods for investigating cyber and electronic crime and related threats and conducting computer and mobile device forensic examinations; and
(C) prosecutorial and judicial challenges related to cyber and electronic crime and related threats, and computer and mobile device forensic examinations.
(2) Training State, local, tribal, and territorial law enforcement officers to—
(A) conduct cyber and electronic crime and related threat investigations;
(B) conduct computer and mobile device forensic examinations; and
(C) respond to network intrusion incidents.
In furtherance of subsection (a), all education and training of the Institute shall be conducted in accordance with relevant Federal law regarding privacy, civil rights, and civil liberties protections. Education and training provided pursuant to subsection (a) shall relate to the following:
(1) Investigating and preventing cybersecurity incidents, electronic crimes, and related cybersecurity threats, including relating to instances involving illicit use of digital assets and emerging trends in cybersecurity and electronic crime.
(2) Conducting forensic examinations of computers, mobile devices, and other information systems.
(3) Prosecutorial and judicial considerations related to cybersecurity incidents, electronic crimes, related cybersecurity threats, and forensic examinations of computers, mobile devices, and other information systems.
All authorized activities and functions carried out by the Institute at any location as of the day before November 2, 2017, are authorized to continue to be carried out at any such location on and after such date.
All authorized activities and functions carried out by the Institute at any location as of the day before November 2, 2017, are authorized to continue to be carried out at any such location on and after such date.
The Director of the United States Secret Service may pay for all or a part of the education, training, or equipment provided by the Institute, including relating to the travel, transportation, and subsistence expenses of recipients of education and training provided pursuant to subsection (a).
(1) In general
The Secretary shall include in the annual report required under section 1116 of title 31 information regarding the activities of the Institute, including, where possible, the following:
(A) An identification of jurisdictions with recipients of the education and training provided pursuant to subsection (a) during such year.
(B) Information relating to the costs associated with that education and training.
(C) Any information regarding projected future demand for the education and training provided pursuant to subsection (a).
(D) Impacts of the activities of the Institute on the capability of jurisdictions to investigate and prevent cybersecurity incidents, electronic crimes, and related cybersecurity threats.
(E) A description of the nomination process for potential recipients of the information and training provided pursuant to subsection (a).
(F) Any other issues determined relevant by the Secretary.
(2) Exception
Any information required under paragraph (1) that is submitted as part of the annual budget submitted by the President to Congress under section 1105 of title 31 is not required to be included in the report required under paragraph (1).
In this section:
(1) Cybersecurity threat
The term "cybersecurity threat" has the meaning given such term in section 1501 of this title.
(2) Incident
The term "incident" has the meaning given such term in section 659(a) of this title.
(3) Information system
The term "information system" has the meaning given such term in section 1501(9) of this title.