Page:United States Statutes at Large Volume 122.djvu/290

This page needs to be proofread.

12 2 STA T . 2 67PUBLIC LA W 11 0– 1 8 1 —J A N .28 , 2008 (2)Therol e sand res p ons ib ili t iesini m plementin g s uc h policies and procedures o f— ( A ) the U nder S ecretar y of D efense for Ac q uisition , Technology, and L ogistics

( B ) the C hief I nformation O fficer of the Department of Defense; (C) the Director of the Business Transformation Agency; (D) the ser v ice acquisition e x ecutives; ( E ) the chief information officers of the military depart - ments; ( F ) Defense Agency acquisition officials; ( G ) the information officers of the Defense Agencies; and ( H ) the Director of Operational Test and Evaluation and the heads of the operational test organi z ations of the military departments and the Defense Agencies . ( 3 ) The application of such policies and procedures to information technologies that are an integral part of w eapons or weapon systems. ( 4 ) The requirements of subtitle III of title 4 0 , United States Code, and chapter 3 5 of title 44, United States Code, regarding performance-based and results-based management, capital planning, and investment control in the acquisition of information technology. (5) Department of Defense policies and procedures for maxi- mizing the usage of commercial information technology while ensuring the security of the microelectronics, software, and networ k s of the Department. ( 6 ) The suitability of Department of Defense acquisition regulations, including Department of Defense Directive 5000. 1 and the accompanying milestones, to the acquisition of informa- tion technology systems. ( 7 ) The adequacy and transparency of metrics used by the Department of Defense for the acquisition of information technology systems. ( 8 ) The effectiveness of existing statutory and regulatory reporting requirements for the acquisition of information tech- nology systems. ( 9 ) The adequacy of operational and development test resources (including infrastructure and personnel), policies, and procedures to ensure appropriate testing of information tech- nology systems both during development and before operational use. (10) The appropriate policies and procedures for technology assessment, development, and operational testing for purposes of the adoption of commercial technologies into information technology systems. (c) REPORT RE QUI RE D .— N ot later than one year after the date of enactment of this Act, the Secretary shall submit to the congres- sional defense committees a report on the results of the review required by subsection (a). The report shall include the findings and recommendations of the Defense Science Board pursuant to the review, including such recommendations for legislative or administrative action as the Board considers appropriate, together with any comments the Secretary considers appropriate.