Sec. 7016. document requests, records management, and related cybersecurity protections

327 words·~1 min read·/statute-compilations/comps-16716/sec-7016

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

## SEC. 7016 document requests, records management, and related cybersecurity protections ###

(a)Document Requests None of the funds appropriated or made available pursuant to titles III through VI of this Act shall be available to a nongovernmental organization, including any contractor, which fails to provide upon timely request any document, file, or record necessary to the auditing requirements of the Department of State and the United States Agency for International Development. ###

(b)Records Management and Related Cybersecurity Protections The Secretary of State and USAID Administrator shall— ####

(1)regularly review and update the policies, directives, and oversight necessary to comply with Federal statutes, regulations, and presidential executive orders and memoranda concerning the preservation of all records made or received in the conduct of official business, including record emails, instant messaging, and other online tools; ####

(2)use funds appropriated by this Act under the headings “Diplomatic Programs” and “Capital Investment Fund” in title I, and “Operating Expenses” and “Capital Investment Fund” in title II, as appropriate, to improve Federal records management pursuant to the Federal Records Act (44 U.S.C. Chapters 21, 29, 31, and 33) and other applicable Federal records management statutes, regulations, or policies for the Department of State and USAID; ####

(3)direct departing employees, including senior officials, that all Federal records generated by such employees belong to the Federal Government; ####

(4)substantially reduce, compared to the previous fiscal year, the response time for identifying and retrieving Federal records, including requests made pursuant to section 552 of title 5, United States Code (commonly known as the “Freedom of Information Act”); and ####

(5)strengthen cybersecurity measures to mitigate vulnerabilities, including those resulting from the use of personal email accounts or servers outside the .gov domain, improve the process to identify and remove inactive user accounts, update and enforce guidance related to the control of national security information, and implement the recommendations of the applicable reports of the cognizant Office of Inspector General.