Sec. 1635. Role of Chief Information Officer in improving enterprise-wide cybersecurity
285 words·~1 min read·
/bill/116/s/1790/es/section-1635·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
In carrying out the responsibilities established in section 142 of title 10, United States Code, the Chief Information Officer of the Department of Defense shall, to the maximum extent practicable, ensure that the cybersecurity programs and capabilities of the Department— fit into an enterprise-wide cybersecurity architecture; are maximally interoperable with each other, including those deployed by the components of the Department; enhance enterprise-level visibility and responsiveness to threats; and are developed, procured, instituted, and managed in a cost-efficient manner, exploiting economies of scale and enterprise-wide services and discouraging unnecessary customization and piecemeal acquisition.
In carrying out subsection (a), the Chief Information Officer shall— manage and modernize the cybersecurity architecture of the Department, including— ensuring the cybersecurity architecture of the Department maximizes cybersecurity capability, network, and endpoint activity data-sharing across Department components; ensuring the cybersecurity architecture of the Department supports improved automaticity of cybersecurity detection and response; and modernizing and configuring the Department’s standardized deployed perimeter, network-level, and endpoint capabilities to improve interoperability, meet pressing capability needs, and negate common adversary tactics, techniques, and procedures; establish mechanisms to enable and mandate, as necessary, cybersecurity capability, and network and endpoint activity data-sharing across Department components; make mission data, through data tagging, automatic transmission, and other means, accessible and discoverable by Department components other than owners of those mission data; incorporate emerging cybersecurity technologies from the Defense Advanced Research Projects Agency, the Strategic Capabilities Office, the Defense Innovation Unit, the laboratories of the military departments, and the commercial sector into the cybersecurity architecture of the Department; and ensure that the Department possesses the necessary computing infrastructure, through technology refresh, installation or acquisition of bandwidth, and the use of cloud computing power, to host and enable necessary cybersecurity capabilities.