Sec. 304.
258 words·~1 min read·
/bill/117/hr/4431/rh/section-304·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Notwithstanding any other provision of law, the Director of the Cybersecurity and Infrastructure Security Agency shall provide to the Committees on Appropriations of the Senate and the House of Representatives a plan, including a classified annex as necessary, to be submitted not later than 120 days after the date of enactment of this Act and to be updated annually thereafter and submitted concurrent with the budget of the President that is submitted to Congress pursuant to section 1105(a) of title 31, United States Code, detailing documented, capability-specific federal civilian executive branch department and agency cybersecurity investment requirements delineated by each such department and agency.
The plan under this section shall specify for each such requirement— a description, including— the capabilities intended to be delivered; the security gains such capabilities will yield; and the nexus of such capabilities to cybersecurity; funding status as of the date of the report including any unobligated balances from any prior year appropriation; if such requirement is funded— a deployment schedule, or lifecycle management plan, as appropriate; and the funding source, by account; whether such requirement is proposed to be funded in the budget referred to in subsection
(a)and if so, the funding source; and the relative priority within each agency for any requirement for which funds are not currently available. The plan required by this section shall not include investment requirements for any department or agency for which the Cybersecurity and Infrastructure Security Agency has not obligated nor has a plan to obligate funding to further such department’s or agency’s cybersecurity capabilities.