Definitions

In this Act: (1) Cryptography The term cryptography has the meaning given such term in the National Institute of Standards and Technology Special Publication 1800–21B (relating to mobile device security) and the National Institute of Standards and Technology Special Publication 800–59 (relating to guidelines for identifying an information system as a national security system). (2) Classical computer The term classical computer means a device that accepts digital data and manipulates the data based on a program or sequence of instructions for how such data is to be processed, and that encodes information in binary. (3) Quantum computer The term quantum computer means a computer that uses the collective properties of quantum states, such as superposition, interference, and entanglement, to perform calculations. (4) Post-Quantum Cryptography The term post-quantum cryptography means cryptographic algorithms or methods that are not specifically vulnerable to attacks by either a quantum computer or classical computer. (5) Critical Infrastructure The term critical infrastructure has the meaning given that term in section 1016(e) of the Critical Infrastructures Protection Act of 2001 (42 U.S.C. 5195c(e)). (6) High-impact system The term high-impact system means a Federal information system that holds sensitive information, the loss of which would be categorized as high impact under Federal Information Processing Standards Publication 199 (relating to standards for security categorization of Federal information and information systems), as in effect on the day before the date of the enactment of this Act. (7) Sector risk management agency The term sector risk management agency has the meaning given the term in section 2200 of the Homeland Security Act of 2002 (6 U.S.C. 650).