itical infrastructure information'' means
information not customarily in the public domain and
related to the security of critical infrastructure or
protected systems--
(A) actual, potential, or threatened
interference with, attack on, compromise of, or
incapacitation of critical infrastructure or
protected systems by either physical or
computer-based attack or other similar conduct
(including the misuse of or unauthorized access
to all types of communications and data
transmission systems) that violates Federal,
State, or local law, harms interstate commerce
of the United States, or threatens public
health or safety;
(B) the ability of any critical
infrastructure or protected system to resist
such interference, compromise, or
incapacitation, including any planned or past
assessment, projection, or estimate of the
vulnerability of critical infrastructure or a
protected system, including security testing,
risk evaluation thereto, risk management
planning, or risk audit; or
(C) any planned or past operational problem
or solution regarding critical infrastructure
or protected systems, including repair,
recovery, reconstruction, insurance, or
continuity, to the extent it is related to such
interference, compromise, or incapacitation.
(4) Critical infrastructure protection program.--
The term ``critical infrastructure protection program''
means any component or bureau of a covered Federal
agency that has been designated by the President or any
agency head to receive critical infrastructure
information.
(5) Information sharing and analysis
organization.--The term ``Information Sharing and
Analysis Organization'' means any formal or informal
entity or collaboration created or employed by public
or private sector organizations, for purposes of--
(A) gathering and analyzing critical
infrastructure information in order to better
unders