### Question
How does CYBERSECURITY AND INFRASTRUCTURE SECURITY AGENCY define covered cyber incident?


### Answer
Under *6 U.S.C. § 681*, **covered cyber incident** is defined as:

> a substantial cyber incident experienced by a covered entity that satisfies the definition and criteria established by the Director in the final rule issued pursuant to section 681b(b) of this title

#### Citation:
  - *6 U.S.C. § 681*
  - Heading: **CHAPTER 1-HOMELAND SECURITY ORGANIZATION > SUBCHAPTER XVIII-CYBERSECURITY AND INFRASTRUCTURE SECURITY AGENCY > Part D-Cyber Incident Reporting**

