Sec. 312. Intelligence community information technology environment
855 words·~4 min read·
/bill/116/s/245/is/section-312A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
In this section: The term core service means a capability that is available to multiple elements of the intelligence community and required for consistent operation of the intelligence community information technology environment. The term intelligence community information technology environment means all of the information technology services across the intelligence community, including the data sharing and protection environment across multiple classification domains. The Director of National Intelligence shall be responsible for coordinating the performance by elements of the intelligence community of the intelligence community information technology environment, including each of the following:
Ensuring compliance with all applicable environment rules and regulations of such environment. Ensuring measurable performance goals exist for such environment. Documenting standards and practices of such environment. Acting as an arbiter among elements of the intelligence community related to any disagreements arising out of the implementation of such environment. Delegating responsibilities to the elements of the intelligence community and carrying out such other responsibilities as are necessary for the effective implementation of such environment.
Providers of core services shall be responsible for— providing core services, in coordination with the Director of National Intelligence; and providing the Director with information requested and required to fulfill the responsibilities of the Director under paragraph (1). Except as provided in subparagraph (B), each element of the intelligence community shall use core services when such services are available. The Director of National Intelligence may provide for a written exception to the requirement under subparagraph
(A)if the Director determines there is a compelling financial or mission need for such exception. Not later than 90 days after the date of the enactment of this Act, the Director of National Intelligence shall designate and maintain one or more accountable executives of the intelligence community information technology environment to be responsible for— management, financial control, and integration of such environment; overseeing the performance of each core service, including establishing measurable service requirements and schedules; to the degree feasible, ensuring testing of each core service of such environment, including testing by the intended users, to evaluate performance against measurable service requirements and to ensure the capability meets user requirements; and coordinate transition or restructuring efforts of such environment, including phaseout of legacy systems. Not later than 180 days after the date of the enactment of this Act, the Director of National Intelligence shall develop and maintain a security plan for the intelligence community information technology environment. Not later than 180 days after the date of the enactment of this Act, and during each of the second and fourth fiscal quarters thereafter, the Director of National Intelligence shall submit to the congressional intelligence committees a long-term roadmap that shall include each of the following: A description of the minimum required and desired core service requirements, including— key performance parameters; and an assessment of current, measured performance. Implementation milestones for the intelligence community information technology environment, including each of the following: A schedule for expected deliveries of core service capabilities during each of the following phases: Concept refinement and technology maturity demonstration. Development, integration, and demonstration. Production, deployment, and sustainment. System retirement. Dependencies of such core service capabilities. Plans for the transition or restructuring necessary to incorporate core service capabilities. A description of any legacy systems and discontinued capabilities to be phased out. Such other matters as the Director determines appropriate. Not later than 180 days after the date of the enactment of this Act, and during each of the second and fourth fiscal quarters thereafter, the Director of National Intelligence shall submit to the congressional intelligence committees a business plan that includes each of the following: A systematic approach to identify core service funding requests for the intelligence community information technology environment within the proposed budget, including multiyear plans to implement the long-term roadmap required by subsection (e). A uniform approach by which each element of the intelligence community shall identify the cost of legacy information technology or alternative capabilities where services of the intelligence community information technology environment will also be available. A uniform effort by which each element of the intelligence community shall identify transition and restructuring costs for new, existing, and retiring services of the intelligence community information technology environment, as well as services of such environment that have changed designations as a core service. Beginning not later than 180 days after the date of the enactment of this Act, the Director of National Intelligence shall provide to the congressional intelligence committees quarterly updates regarding ongoing implementation of the intelligence community information technology environment as compared to the requirements in the most recently submitted security plan required by subsection (d), long-term roadmap required by subsection (e), and business plan required by subsection (f). The Director of National Intelligence shall provide timely notification to the congressional intelligence committees regarding any policy changes related to or affecting the intelligence community information technology environment, new initiatives or strategies related to or impacting such environment, and changes or deficiencies in the execution of the security plan required by subsection (d), long-term roadmap required by subsection (e), and business plan required by subsection (f). The section shall have no effect on or after September 30, 2024.