Sec. 6611. Strategy on quantum readiness
387 words·~2 min read·
/bill/119/s/2296/es/section-6611·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Not later than 180 days after the date of the enactment of this Act, the Secretary of Defense shall, in coordination with the Chief Information Officer of the Department of Defense, submit to the congressional defense committees a strategy on quantum readiness. Such strategy shall include each of the following: An assessment of the risks that quantum computing pose to Department of Defense systems and data. A determination of which Department systems and data are most vulnerable to quantum threats and critical to protect, and timelines for the transition of such systems and data.
An identification of the progress made by organizations and elements of the Department of Defense in inventorying and migrating all cryptographic systems to post-quantum cryptography by 2035 or earlier. A plan to adopt and deploy automated quantum readiness platform tools, including capabilities that— provide continuous visibility into an organization's cryptographic landscape; automate the prioritization of cryptographic risks; and facilitate the remediation of insecure cryptography.
An identification of the methodology used for evaluating and validating Department cryptographic modules as quantum ready. An estimate of resources needed to achieve quantum readiness by the target deadline of 2035, as well as an additional estimate of resources needed to achieve quantum readiness earlier than 2035. A detailed breakdown of how the funds provided in section 20005(a)(29) of the Act entitled An Act to provide for reconciliation pursuant to title II of H. Con. Res. 14 , approved July 4, 2025 ( Public Law 119–21 ) will be allocated and obligated across specific programs, projects, and activities.
Any other matter the Secretary of Defense considers relevant. The strategy required by subsection
(a)shall be submitted in unclassified form but may contain a classified annex. Not later than 240 days after the date of the enactment of this Act, the Secretary shall, in coordination with the Chief Information Officer, submit to the congressional defense committees a briefing on the strategy required under subsection (a). In this section: The term post-quantum cryptography has the meaning given that term in section 3 of the Quantum Computing Cybersecurity Preparedness Act ( Public Law 117–260 ; 6 U.S.C. 1526 note). The term quantum readiness means the state in which an agency's cryptographic systems have been inventoried, continuously assessed for quantum vulnerabilities, and remediated through the adoption of quantum-resistant cryptographic algorithms and other practices.
Connectionstraces to 3
Citation graph
cites case law
Cites 3Cited by 0 across 0 sources