Sec. 208. Identification of information systems relating to national security
235 words·~1 min read·
/bill/114/s/754/es/section-208·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Except as provided in subsection (c), not later than 180 days after the date of enactment of this Act— the Director of National Intelligence and the Director of the Office of Management and Budget, in coordination with the heads of other agencies, shall— identify all unclassified information systems that provide access to information that may provide an adversary with the ability to derive information that would otherwise be considered classified; assess the risks that would result from the breach of each unclassified information system identified in subparagraph (A); and assess the cost and impact on the mission carried out by each agency that owns an unclassified information system identified in subparagraph
(A)if the system were to be subsequently designated as a national security system; and the Director of National Intelligence and the Director of the Office of Management and Budget shall submit to the appropriate congressional committees, the Select Committee on Intelligence of the Senate, and the Permanent Select Committee on Intelligence of the House of Representatives a report that includes the findings under paragraph (1). The report submitted under subsection (a)(2) shall be in unclassified form, and shall include a classified annex. The requirements under subsection (a)(1) shall not apply to the Department of Defense, a national security system, or an element of the intelligence community. Nothing in this section shall be construed to designate an information system as a national security system.