1. Short title This Act may be cited as the Cybersecurity and Infrastructure Security Agency Act of 2017 . 2. Cybersecurity and Infrastructure Security Agency (a) In general The Homeland Security Act of 2002 is amended by adding at the end the following new title: XXII Cybersecurity and Infrastructure Security Agency A Cybersecurity and Infrastructure Security 2201. Definitions In this subtitle: (1) Critical infrastructure information The term critical infrastructure information has the meaning given such term in section 2215. (2) Critical infrastructure risk The term critical infrastructure risk means threats to and vulnerabilities of critical infrastructure and any related consequences, including consequences caused by or resulting from an act of terrorism. (3) Cybersecurity risk The term cybersecurity risk has the meaning given such term in section 2209. (4) Cybersecurity threat The term cybersecurity threat has the meaning given such term in paragraph (5) of section 102 of the Cybersecurity Act of 2015 (contained in division N of the Consolidated Appropriations Act, 2016 ( Public Law 114–113 ; 6 U.S.C. 1501 )). (5) Federal entity The term Federal entity has the meaning given such term in paragraph (8) of section 102 of the Cybersecurity Act of 2015 (contained in division N of the Consolidated Appropriations Act, 2016 ( Public Law 114–113 ; 6 U.S.C. 1501 )). (6) Non-Federal entity The term non-Federal entity has the meaning given such term in paragraph (14) of section 102 of the Cybersecurity Act of 2015 (contained in division N of the Consolidated Appropriations Act, 2016 ( Public Law 114–113 ; 6 U.S.C. 1501 )). (7) Sharing The term sharing has the meaning given such term in section 2209. (8) National cybersecurity asset response activities The term national cybersecurity asset response activities means— (A) furnishing technical assistance to entities affected by cybersecurity risks to protect assets, mitigate vulnerabilities, and reduce impacts of cyber incidents