The Internet and Information Innovation Sector (I3S) includes functions and services that create or utilize the Internet or networking services and have large potential for growth, entrepreneurship, and vitalization of the economy, but would fall outside the classification of covered critical infrastructure as defined by existing law and [government] policy. Business models may differ, but the following functions and services are included in the I3S:
- provision of information services and content;
- facilitation of the wide variety of transactional services available through the Internet as an intermediary;
- storage and hosting of publicly accessible content; and
- support of users' access to content or transaction activities, including, but not limited to application, browser, social network, and search providers.
The I3S is comprised of companies, from small business to “brick and mortar-based firms” with online services to large companies that only exist on the Internet, that are significantly impacted by cybersecurity concerns, yet do not have the same level of operational criticality that would cause them to be designated as covered critical infrastructure.