; and (2) for each subsequent fiscal year, such sums as may be necessary. (p) Definitions In this section: (1) Critical infrastructure The term critical infrastructure has the meaning given that term in section 2. (2) Cyber threat indicator The term cyber threat indicator has the meaning given such term in section 102 of the Cybersecurity Act of 2015. (3) Cybersecurity risk The term cybersecurity risk has the meaning given such term in section 2209. (4) Director The term Director means the Director of the Cybersecurity and Infrastructure Security Agency. (5) Incident The term incident has the meaning given such term in section 2209. (6) Information sharing and analysis organization The term information sharing and analysis organization has the meaning given such term in section 2222. (7) Information system The term information system has the meaning given such term in section 102(9) of the Cybersecurity Act of 2015 ( 6 U.S.C. 1501(9) ). (8) Key resources The term key resources has the meaning given that term in section 2. (9) State The term State — (A) means each of the several States, the District of Colombia, and the territories and possessions of the United States