Sec. 1613. Modifications to and codification of the Department of Defense insider threat program
577 words·~3 min read·
/bill/119/hr/3838/rh/section-1613·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Chapter 131 of title 10, United States Code, is amended by inserting after section 2224a a new section 2225 consisting of— a heading as follows: ; and a text consisting of the text of subsections
(a)and
(b)of section 922 of the National Defense Authorization Act for Fiscal Year 2012 (Public Law 112‑81; 10 U.S.C. 2224 note). Section 922 of the National Defense Authorization Act for Fiscal Year 2012 ( Public Law 112–81 ; 10 U.S.C. 2224 note) is repealed. Section 2225 of title 10, United States Code, as added by subsection
(a)of this section, is amended— in subsection (b)— in the heading, by striking and inserting Elements ; and Required Elements in paragraph (1)— by striking subparagraphs (C), (D), (E), and (F); by redesignating subparagraphs
(A)and
(B)as subparagraphs
(B)and (C), respectively; by inserting before subparagraph
(B)(as so redesignated) the following new subparagraph: user activity monitoring in accordance with the Committee on National Security Systems Directive 504, issued February 4, 2014, or any successor directive; . in subparagraph (C), as redesignated by clause
(ii)of this subparagraph, by striking the semicolon and inserting ; and ; and by redesignating subparagraph
(G)as subparagraph (D); and by adding at the end of the following new subsections: The Secretary may include additional elements in the program established under subsection (a), including— solutions and capabilities to prevent the unauthorized export of information from a network or to render such information unusable in the event of the unauthorized export of such information; using a roles-based access certification system; cross-domain solutions adhering to the Raise the Bar strategy of the Cross Domain Strategy and Management Office of the National Security Agency or any successor strategy; analytic solutions to detect anomalous user activity and triage user activity monitoring alerts to elevate the highest risk events for immediate review; case management solutions to minimize disclosure risk, orchestrate effective response, and ensure appropriate governance; and full-motion video screen recording and deep context. The program established under subsection
(a)shall apply to networks and enclaves used by— civilian personnel of the Department of Defense; privileged users; members of the armed forces; and contractors to the Department of Defense that have access to classified, controlled unclassified, or personally identifiable information in furtherance of work on behalf of the Department. . The Secretary of Defense shall ensure the program established under 2225 of title 10, United States Code, as added and amended by subsections
(a)and
(b)of this section— achieves initial operating capability not later than October 1, 2027; and achieves full operating capability not later than October 1, 2028. Before the Secretary implements section 2225 of title 10, United States Code, as added and amended by subsections
(a)and
(b)of this section, the Secretary shall submit to the congressional defense committees— a written notification that describes the personnel of the Department affected by the implementation; a plan to implement such section; an identification of the resources required to implement such section; an identification of any legal or technical concerns that may need to be addressed prior to implementation; and and any other issues related to such implementation that the Secretary considers appropriate. Not later than December 1, 2027, the Secretary shall submit to the congressional defense committees a report on the implementation of section 2225 of title 10, United States Code, including the resources required and planned expenditures to achieve full operating capability not later than October 1, 2028.
Connectionstraces to 1
Traces to 1 document
1 reference not yet in our index
- Pub. L. 112-81
Citation graph
cites case law
Sec. 1613
Modifications to and codification of the Department of Defense insider threat program
Pub. L.Pub. L. 112-81
Cites 2Cited by 0 across 0 sources