Page:United States Statutes at Large Volume 124.djvu/4364

This page needs to be proofread.

124 STAT. 4338 PUBLIC LAW 111–383—JAN. 7, 2011 telecommunications service providers, and by the Department of Defense. (4) An organization or organizations within the Department of Defense to be responsible for the operation and maintenance of cyber infrastructure for research, development, test, and evaluation purposes. (5) Appropriate disclosure regarding United States cyber warfare capabilities to the independent test and evaluation community, and the involvement of that community in the development and maintenance of such capabilities, regardless of classification. (6) The role of the private sector and appropriate Depart- ment of Defense organizations in developing capabilities to operate in cyberspace, and a clear process for determining whether to allocate responsibility for responding to Department of Defense cyber warfare requirements through Federal Govern- ment personnel, contracts with private sector entities, or a combination of both. (7) The roles of each military department, and of the combat support Defense Agencies, in the development of cyber warfare capabilities in support of offensive, defensive, and intelligence operational requirements. (8) Mechanisms to promote information sharing, coopera- tive agreements, and collaboration with international, inter- agency, academic, and industrial partners in the development of cyber warfare capabilities. (9) The manner in which the Department of Defense will promote interoperability, share innovation, and avoid unproduc- tive duplication in cyber warfare capabilities through specializa- tion among the components of the Department responsible for developing cyber capabilities. (d) REPORT ON STRATEGY.— (1) REPORT REQUIRED.—Not later than 180 days after the date of the enactment of this Act, the Secretary of Defense shall submit to the appropriate committees of Congress a report on the strategy required by subsection (a). The report shall include a comprehensive description of the strategy and plans (including a schedule) for the implementation of the strategy. (2) APPROPRIATE COMMITTEES OF CONGRESS DEFINED.—In this subsection, the term ‘‘appropriate committees of Congress’’ means— (A) the Committee on Armed Services, the Committee on Appropriations, and the Select Committee on Intel- ligence of the Senate; and (B) the Committee on Armed Services, the Committee on Appropriations, and the Permanent Select Committee on Intelligence of the House of Representatives. SEC. 934. REPORT ON THE CYBER WARFARE POLICY OF THE DEPART- MENT OF DEFENSE. (a) REPORT REQUIRED.—Not later than March 1, 2011, the Secretary of Defense shall submit to Congress a report on the cyber warfare policy of the Department of Defense. (b) ELEMENTS.—The report required under this section shall include the following: (1) A description of the policy and legal issues investigated and evaluated by the Department in considering the range