Page:United States Statutes at Large Volume 112 Part 3.djvu/500

This page needs to be proofread.

112 STAT. 2330 PUBLIC LAW 105-262—OCT. 17, 1998 Notification. Records. Deadline. (2) at least two of those exercises are conducted by the commander of each unified or specified combatant command; and (3) all mission critical systems that are expected to be used if the Armed Forces are involved in a conflict in a major theater of war are tested in at least two exercises. (c) COVERED MILITARY EXERCISES. —^A military exercise referred to in this section is a military exercise conducted by the Department of Defense, during the period beginning on January 1, 1999, and ending on September 30, 1999— (1) under the training exercises program known as the "CJCS Exercise Program"; (2) at the Naval Strike and Air Warfare Center, the Army National Training Center, or the Air Force Air Warfare Center; or (3) as part of Naval Carrier Group fleet training or Marine Corps Expeditionary Unit training. (d) ALTERNATIVE TESTING METHOD.— In the case of an information technology or national security system for which a simulated year 2000 test as part of a military exercise described in subsection (c) is not feasible or presents undue risk, the Secretary of Defense shall test the system using a functional end-to-end test or through a Defense Major Range and Test Facility Base. The Secretary shall include the plans for these tests in the plan required by subsection (a). Tests under this subsection are in addition to the 25 tests required by subsection (b). (e) AUTHORITY FOR EXCLUSION OF SYSTEMS NOT CAPABLE OF PERFORMING RELIABLY IN YEAR 2000 SIMULATION.— (1) In carrying out a year 2000 simulation exercise, the Secretary of Defense may exclude a particular information technology or national security system from the year 2000 simulation phase of the exercise if the Secretary determines that the system would be incapable of performing reliably during the year 2000 simulation phase of the exercise. In such a case, the system excluded shall be replaced in accordance with the year 2000 contingency plan for the system. (2) If the Secretary of Defense excludes an information technology or national security system from the year 2000 simulation phase of an exercise as provided in paragraph (1), the Secretary shall notify Congress of that exclusion not later than two weeks before commencing that exercise. The notice shall include a list of each information technology or national security system excluded from the exercise, a description of how the exercise will use the year 2000 contingency plan for each such system, and a description of the effect that continued year 2000 noncompliance of each such system would have on military readiness. (3) An information technology or national security system with cryptological applications that is not capable of having its internal clock adjusted forward to a simulated later time is exempt from the year 2000 simulation phase of an exercise under this section. (f) COMPTROLLER GENERAL REVIEW. —Not later than January 30, 1999, the Comptroller (General shall review the report and Elan submitted under subsection (a) and submit to Congress a riefing evaluating the methodology to be used under the plan to simulate the year 2000 and describing the potential information that will be collected as a result of implementation of the plan, the adequacy of the planned tests, and the impact that the plan will have on military readiness.