Sec. 1635. Evaluation of cyber vulnerabilities of major weapon systems of the Department of Defense
340 words·~2 min read·
/bill/114/hr/1735/eas/section-1635·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
The Secretary of Defense shall complete an evaluation of the cyber vulnerabilities of each major weapon system of the Department of Defense by not later than December 31, 2019. The Secretary may waive the requirement of paragraph
(1)with respect to a weapon system or complete the evaluation of a weapon system required by such paragraph after the date specified in such paragraph if the Secretary certifies to the congressional defense committees before that date that all known cyber vulnerabilities in the weapon system have minimal consequences for the capability of the weapon system to meet operational requirements or otherwise satisfy mission requirements. Not later than 180 days after the date of the enactment of this Act, the Secretary shall submit to the congressional defense committees the plan of the Secretary for the evaluations of major weapon systems required by subsection (a), including an identification of each of the weapon systems to be evaluated and an estimate of the funding required to conduct the evaluations. The plan under paragraph
(1)shall accord a priority among evaluations based on the criticality of major weapon systems, as determined by the Chairman of the Joint Chiefs of Staff based on an assessment of employment of forces and threats. The plan under paragraph
(1)shall build upon existing efforts regarding the identification and mitigation of cyber vulnerabilities of major weapon systems, and shall not duplicate similar ongoing efforts such as Task Force Cyber Awakening of the Navy or Task Force Cyber Secure of the Air Force. On a regular basis, the Secretary shall inform the congressional defense committees of the activities undertaken in the evaluation of major weapon systems under this section. As part of the evaluation of cyber vulnerabilities of major weapon systems of the Department under this section, the Secretary shall develop strategies for mitigating the risks of cyber vulnerabilities identified in the course of such evaluations. Of amounts appropriated or otherwise made available under section 201, $200,000,000 shall be available to the Secretary to conduct the evaluations required by subsection (a)(1).