; (B) by inserting after paragraph (1) the following: (2) The term high value asset means information or an information system that the head of an agency, using policies, principles, standards, or guidelines issued by the Director under section 3553(a), determines to be so critical to the agency that the loss or degradation of the confidentiality, integrity, or availability of such information or information system would have a serious impact on the ability of the agency to perform the mission of the agency or conduct business. ; (C) by inserting after paragraph (6), as so redesignated, the following: (7) The term major incident has the meaning given the term in guidance issued by the Director under section 3598(a). ; (D) in paragraph (8)(A), as so redesignated, by striking used and inserting owned, managed, ; (E) by inserting after paragraph (8), as so redesignated, the following: (9) The term penetration test — (A) means an authorized assessment that emulates attempts to gain unauthorized access to, or disrupt the operations of, an information system or component of an information system; and (B) includes any additional meaning given the term in policies, principles, standards, or guidelines issued by the Director under section 3553(a).