; or (B) law. ; and (6) in subsection (k) (as so redesignated)— (A) by redesignating paragraph (2) as paragraph (3); and (B) by inserting after paragraph (1) the following new paragraph: (2) The term covered incident means— (A) a cyber incident involving a Department of Defense information system, or a breach of a Department of Defense system that involves personally identifiable information, that the Secretary of Defense determines is likely to result in demonstrable harm to the national security interests, foreign relations, or the economy of the United States, or to the public confidence, civil liberties, or public health and safety of the people of the United States; (B) a cyber incident or collection of related cyber incidents that the President determines is likely to result in demonstrable harm to the national security interests, foreign relations, or economy of the United States or to the public confidence, civil liberties, or public health and safety of the people of the United States; or (C) a significant incident declared pursuant to section 2233 of the Homeland Security Act of 2002 ( 6 U.S.C. 677b ). .