Sec. 3113. Cybersecurity Risk Inventory, Assessment, and Mitigation Working Group
277 words·~1 min read·
/bill/118/hr/2670/rh/section-3113·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Subtitle A of title XXXII of the National Defense Authorization Act for Fiscal Year 2000 ( Public Law 106–65 ) is amended by adding at the end the following new section: There is in the Administration a working group, to be known as the Cybersecurity Risk Inventory, Assessment, and Mitigation Working Group . Members of the working group shall include the Deputy Administrator for Defense Programs, the Associate Administrator for Information Management and Chief Information Officer, and staff from other offices as determined appropriate by the Deputy Administrator and Associate Administrator.
The working group shall prepare a comprehensive strategy for inventorying the range of National Nuclear Security Administration systems that are potentially at risk in the operational technology and nuclear weapons information technology environments, assessing the systems at risk, and implementing risk mitigation actions. Such strategy shall incorporate key elements of effective cybersecurity risk management strategies, as identified by the Government Accountability Office, including the specification of— goals, objectives, activities, and performance measures; organizational roles, responsibilities, and coordination; necessary resources needed to implement the strategy over the next ten years; and detailed milestones and schedules for completion of tasks.
Not later than 120 days after the date of the enactment of this Act, the members of the working group shall provide to the congressional defense committees a briefing on the plan of the working group plan to develop the strategy required under subsection (c). Not later than April 1, 2025, the working group shall submit the congressional defense committees a copy of the completed strategy. The working group shall terminate on the date that is five years after the date of the enactment of this section. .
Connections1 off-index
1 reference not yet in our index
- Pub. L. 106-65
Citation graph
cites case law
Sec. 3113
Cybersecurity Risk Inventory, Assessment, and Mitigation Working Group
Pub. L.Pub. L. 106-65
Cites 1Cited by 0 across 0 sources