Sec. 1631. Security product integration framework
203 words·~1 min read·
/bill/115/s/2987/pcs/section-1631·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Congress makes the following findings: The Department of Defense requires a standard, enterprise-wide, security product integration framework
(SPIF)that provides a machine-to-machine data exchange architecture and protocol to achieve interoperability and automated orchestration and coordinated action between and among cybersecurity services, devices, appliances, agents, applications, tools, and command and control centers. Information security products and services need to be engineered to consume and act on information, direction, and cues from other security elements on a network through this framework. A security product integration framework should ideally be non-proprietary or designed as a modular open system. A security integration framework is essential to achieve the speed, scale, and agility of response required for cyber warfare, and to reduce the cost and time needed to integrate new products and services into the existing security environment. The Principal Cyber Adviser, the Chief Information Officer, and the Commander of the United States Cyber Command shall select a network or network segment and associated computer network defense service provider to conduct a demonstration and evaluation of one or more existing security product integration frameworks, including modifying network security systems to enable such systems to ingest, publish, subscribe, tip and cue, and request information or services from each other.