Sec. 705. REPORT ON EFFECTS OF DATA BREACH OF OFFICE OF PERSONNEL MANAGEMENT

338 words·~2 min read·/statute-compilations/comps-13909/sec-705

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

## SEC. 705 REPORT ON EFFECTS OF DATA BREACH OF OFFICE OF PERSONNEL MANAGEMENT ###

(a)Report Not later than 120 days after the date of the enactment of this Act, the President shall transmit to the congressional intelligence committees a report on the data breach of the Office of Personnel Management disclosed in June 2015. ###

(b)Matters Included The report under subsection

(a)shall include the following: ####

(1)The effects, if any, of the data breach on the operations of the intelligence community abroad, including the types of operations, if any, that have been negatively affected or entirely suspended or terminated as a result of the data breach. ####

(2)An assessment of the effects of the data breach on each element of the intelligence community. ####

(3)An assessment of how foreign persons, groups, or countries may use the data collected by the data breach (particularly regarding information included in background investigations for security clearances), including with respect to— #####

(A)recruiting intelligence assets; #####

(B)influencing decisionmaking processes within the Federal Government, including regarding foreign policy decisions; and #####

(C)compromising employees of the Federal Government and friends and families of such employees for the purpose of gaining access to sensitive national security and economic information. ####

(4)An assessment of which departments or agencies of the Federal Government use the best practices to protect sensitive data, including a summary of any such best practices that were not used by the Office of Personnel Management. ####

(5)An assessment of the best practices used by the departments or agencies identified under paragraph

(4)to identify and fix potential vulnerabilities in the systems of the department or agency. ###

(c)Briefing The Director of National Intelligence shall provide to the congressional intelligence committees an interim briefing on the report under subsection (a), including a discussion of proposals and options for responding to cyber attacks. ###

(d)Form The report under subsection

(a)shall be submitted in unclassified form, but may include a classified annex.