Sec. 893. Requirements relating to Selected Acquisition Reports

361 words·~2 min read·/bill/116/hr/2500/rh/section-893

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

Selected Acquisition Reports required by section 2432 of title 10, United States Code, shall not constitute reports covered by subsection

(b)of section 1080 of the National Defense Authorization Act for Fiscal Year 2016 ( Public Law 114–92 ; 129 Stat. 1000; 10 U.S.C. 111 note), and their submittal to Congress as required by such section 2432 shall not be terminated by operation of subsection

(a)of such section 1080. Effective on December 30, 2021, section 1051(x) of the National Defense Authorization Act for Fiscal Year 2018 ( Public Law 115–91 ; 131 Stat. 1567) is amended by striking paragraph (4). Section 2432 of title 10, United States Code, is amended by adding at the end the following new subsection: A report required under this section shall be submitted in unclassified form without any designation relating to dissemination control, but may contain a classified annex. . The Secretary of Defense shall include with the budget for fiscal year 2021, as submitted to Congress pursuant to section 1105(a) of title 31, United States Code, a report proposing an alternative methodology for providing status reports on major defense acquisition programs and other acquisition activities, including programs carried out under section 804 of the National Defense Authorization Act for Fiscal Year 2016 ( Public Law 114–92 ; 10 U.S.C. 2302 note), where such status reports shall include information on— scheduled and completed cybersecurity tests of software acquired through a program covered by the status report, including assessments on cooperative vulnerability and penetration and adversarial assessments; software development metrics, including initial and most recent estimates of the projected value, sizing, schedule, and level of effort for software acquired through a program covered by the status report; and quality metrics for software acquired through a program covered by the status report. With respect to cybersecurity tests included in the alternative methodology report described in subsection (c)(1), the Secretary of Defense, in coordination with the Director of Operational Test and Evaluation, shall develop policies on the selection of cybersecurity tests, methods to consistently describe the cybersecurity tests, and methods to associate cybersecurity tests with a component part of a system or a version of the software tested.

Connectionstraces to 4

Traces to 4 documents

public-private-law

U.S. Code

2 references not yet in our index