Sec. 1625. Evaluation of cyber vulnerabilities of major weapon systems of the Department of Defense

365 words·~2 min read·/bill/116/hr/2500/rh/section-1625

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

Section 1647 of the National Defense Authorization Act for Fiscal Year 2016 is amended by adding at the end the following new subsections: If the Secretary determines that the Department will not complete an evaluation of the cyber vulnerabilities of each major weapon system of the Department by the date specified in subsection (a)(1), the Secretary shall provide to the congressional defense committee written notification relating to each such incomplete evaluation. Such a written notification shall include the following:

An identification of each major weapon system requiring such an evaluation and the anticipated date of completion. A justification for the inability to complete such an evaluation by the date specified in subsection (a)(1). The Secretary, acting through the Assistant Secretary of Defense for Acquisition and Sustainment, shall provide a report to the congressional defense committees upon completion of the requirement for an evaluation of the cyber vulnerabilities of each major weapon system of the Department under this section.

Such report shall include the following: An identification of cyber vulnerabilities of each major weapon system requiring mitigation. An identification of current and planned efforts to address the cyber vulnerabilities of each major weapon system requiring mitigation, including efforts across the doctrine, organization, training, materiel, leadership and education, personnel, and facilities of the Department. A description of joint and common cyber vulnerability mitigation solutions and efforts, including solutions and efforts across the doctrine, organization, training, materiel, leadership and education, personnel, and facilities of the Department.

A description of lessons learned and best practices regarding evaluations of the cyber vulnerabilities and cyber vulnerability mitigation efforts relating to major weapon systems. A description of efforts to share lessons learned and best practices regarding evaluations of the cyber vulnerabilities and cyber vulnerability mitigation efforts of major weapon systems across the Department. An identification of measures taken to institutionalize evaluations of cyber vulnerabilities of major weapon systems.

Information relating to guidance, processes, procedures, or other activities established to mitigate or address the likelihood of cyber vulnerabilities of major weapon systems by incorporation of lessons learned in the research, development, test, evaluation, and acquisition cycle, including promotion of cyber education of the acquisition workforce. Any other matters the Secretary determines relevant. .