Sec. 1635. Expansion of authority for access and information relating to cyber attacks on operationally critical contractors of the Armed Forces
232 words·~1 min read·
/bill/116/s/4049/rs/section-1635·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Section 391(c) of title 10, United States Code, is amended— by amending paragraph
(3)to read as follows: The procedures established pursuant to subsection
(a)shall— include mechanisms for a member of the armed forces— if requested by an operationally critical contractor, to assist the contractor in detecting and mitigating penetrations; or at the request of the Secretary of Defense or the Commandant of the Coast Guard, to obtain access to equipment or information of an operationally critical contractor necessary to conduct a forensic analysis, in addition to any analysis conducted by the contractor; and provide that an operationally critical contractor is only required to provide access to equipment or information as described in subparagraph
(A)to determine whether— information created by or for the armed forces in connection with any program of the armed forces was successfully exfiltrated from or compromised on a network or information system of such contractor and, if so, what information was exfiltrated or compromised; or the ability of the contractor to provide operationally critical support has been affected and, if so, how and to what extent it has been affected. ; in paragraph (4), by inserting , so as to minimize delays in or any curtailing of the cyber response or defensive actions of the Department or the Coast Guard after specific person ; and in paragraph (5)(C), by inserting or counterintelligence activities after investigations .