§ 29.4 - PCII Program administration.

§ 29.4 Protected Critical Infrastructure Information PCII Program administration.

(a) Preparedness Directorate Program ManagementCybersecurity and Infrastructure Security Agency. The Secretary of the Department of Homeland Security hereby designates the Under Secretary for Preparedness Director as the senior DHS official responsible for the direction and administration of the PCII Program. He shall administer The Director administers this program through the Executive Assistant Secretary for Infrastructure ProtectionDirector.

(b) Appointment of a PCII Program Manager. The Under Secretary for Preparedness shallDirector will:

(1) Appoint a PCII Program Manager serving under the Executive Assistant Secretary for Infrastructure Protection Director who is responsible for the administration of the PCII Program;

(2) Commit resources necessary for the effective implementation of the PCII Program;

(3) Ensure that sufficient personnel, including such detailees or assignees from other Federal federal national security, homeland security, or law enforcement entities, as the Under Secretary Director deems appropriate, are assigned to the PCII Program to facilitate secure information sharing with appropriate authorities. ; and

(4) Promulgate implementing directives and prepare training materials, as appropriate, for the proper treatment of PCII.

(c) Appointment of PCII Program Officers. The PCII Program Manager shall will establish procedures to ensure that each DHS component and each Federal, State, or local Local agency or entity that works with PCII appoint appoints one or more employees to serve as a PCII Program Officer in order to carry out the responsibilities stated in paragraph (d) of this section. Persons appointed to serve as PCII Program Officers shall must be fully familiar with these procedures.

(d) Responsibilities of PCII Program Officers. PCII Program Officers shall:

(1) Oversee the handling, use, and storage of PCII;

(2) Ensure the secure sharing of PCII with appropriate authorities and individuals, as set forth in 6 CFR § 29.1(a), and paragraph (b)(3) of this section;

(3) Establish and maintain an ongoing self-inspection program , to include including periodic review and assessment of the compliance with handling, use, and storage of PCII;

(4) Establish additional procedures, measures, and penalties, as necessary, to prevent unauthorized access to PCII; and

(5) Ensure prompt and appropriate coordination with the PCII Program Manager regarding any request, challenge, or complaint arising out of the implementation of these regulations.

(e) Protected Critical Infrastructure Information Management System (or PCIIMS). The PCII Program Manager shall will develop, for use by the PCII Program Manager Office and the PCII Manager's designeesDesignees, an electronic database , to be known as the “Protected Critical Infrastructure Information Management System” ( PCIIMS ), to record the receipt, acknowledgement, validation, storage, dissemination, and destruction of PCII. This compilation of PCII shall must be safeguarded and protected in accordance with the provisions of the CII Act. The PCII Program Manager may require the completion of appropriate background investigations of an individual before granting that individual access to any PCII.