Arkansas Legal Resource Navigator

10 U.S.C. § 2223 — Information technology: additional responsibilities of Chief Information Officers

Federal law — U.S. Code and appendices · legal_authorities

10 U.S.C. § 2223 — Information technology: additional responsibilities of Chief Information Officers

**(a) Additional Responsibilities of Chief Information Officer of Department of Defense.—** In addition to the responsibilities provided for in chapter 35 of title 44 and in [section 11315 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11315&num=0&edition=prelim), the Chief Information Officer of the Department of Defense shall— (1) review and provide recommendations to the Secretary of Defense on Department of Defense budget requests for information technology and national security systems; (2) ensure the interoperability of information technology and national security systems throughout the Department of Defense; (3) ensure that information technology and national security systems standards that will apply throughout the Department of Defense are prescribed; (4) provide for the elimination of duplicate information technology and national security systems within and between the military departments and Defense Agencies; and (5) maintain a consolidated inventory of Department of Defense mission critical and mission essential information systems, identify interfaces between those systems and other information systems, and develop and maintain contingency plans for responding to a disruption in the operation of any of those information systems. **(b) Additional Responsibilities of Chief Information Officer of Military Departments.—** In addition to the responsibilities provided for in chapter 35 of title 44 and in [section 11315 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11315&num=0&edition=prelim), the Chief Information Officer of a military department, with respect to the military department concerned, shall— (1) review budget requests for all information technology and nation

Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 2223

Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.

Original supplied file — preserved unchanged

Download original Markdown file

File SHA-256: f9a218b6eebcf39be7177e2239c8df820d980ffd86c78483afb4ef56e62530b1. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.

Authority boundary: historical or unconfirmed source not current law verified.

Open the recorded source website ↗

Record provenance

Stable record: federal_law:legal_authorities:record_usc_055da198e555ed1f28267895
Source file: Laws/federal/codes/united-states-code/title-10/section-2223-information-technology-additional-responsibilities-of-chief-information--02b2e2ad15.md
Pages: Not recorded – Not recorded
Passage SHA-256: d03c2f654a3c8fcdf3737d380f6bb8512e28e685488fa971b08a0e15eb4b0ce6

Source location: Title 10, Chapter 131, § 2223; chapter-131-planning-and-coordination.md

Stored source content

**(a) Additional Responsibilities of Chief Information Officer of Department of Defense.—** In addition to the responsibilities provided for in chapter 35 of title 44 and in [section 11315 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11315&num=0&edition=prelim), the Chief Information Officer of the Department of Defense shall— (1) review and provide recommendations to the Secretary of Defense on Department of Defense budget requests for information technology and national security systems; (2) ensure the interoperability of information technology and national security systems throughout the Department of Defense; (3) ensure that information technology and national security systems standards that will apply throughout the Department of Defense are prescribed; (4) provide for the elimination of duplicate information technology and national security systems within and between the military departments and Defense Agencies; and (5) maintain a consolidated inventory of Department of Defense mission critical and mission essential information systems, identify interfaces between those systems and other information systems, and develop and maintain contingency plans for responding to a disruption in the operation of any of those information systems. **(b) Additional Responsibilities of Chief Information Officer of Military Departments.—** In addition to the responsibilities provided for in chapter 35 of title 44 and in [section 11315 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11315&num=0&edition=prelim), the Chief Information Officer of a military department, with respect to the military department concerned, shall— (1) review budget requests for all information technology and national security systems; (2) ensure that information technology and national security systems are in compliance with standards of the Government and the Department of Defense; (3) ensure that information technology and national security systems are interoperable with other relevant information technology and national security systems of the Government and the Department of Defense; and (4) coordinate with the Joint Staff with respect to information technology and national security systems. **(c) Definitions.—** In this section: (1) The term “Chief Information Officer” means the senior official designated by the Secretary of Defense or a Secretary of a military department pursuant to [section 3506 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3506&num=0&edition=prelim). (2) The term “information technology” has the meaning given that term by [section 11101 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11101&num=0&edition=prelim). (3) The term “national security system” has the meaning given that term by [section 3552(b)(6) of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3552/b/6&num=0&edition=prelim).

Cross-references

Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.

Federal law — U.S. Code and appendices · legal_authorities

44 U.S.C. § 3506 — Federal agency responsibilities

**(a)** (1) The head of each agency shall be responsible for— (A) carrying out the agency’s information resources management activities to improve agency productivity, efficiency, and effectiveness; and (B) complying with the requirements of this subchapter and related policies established by the Director. (2) (A) Except as provided under subparagraph (B), the head of each agency shall designate a Chief Information Officer who shall report directly to such agency head to carry out the responsibilities of the agency under this subchapter. (B) The Secretary of the Department of Defense and the Secretary of each military department may each designate Chief Information Officers who shall report directly to such Secretary to carry out the responsibilities of the department under this subchapter. If more than one Chief Information Officer is designated, the respective duties of the Chief Information Officers shall be clearly delineated. (3) The Chief Information Officer designated under paragraph (2) shall head an office responsible for ensuring agency compliance with and prompt, efficient, and effective implementation of the information policies and information resources management responsibilities established under this subchapter, including the reduction of information collection burdens on the public. The Chief Information Officer and employees of such office shall be selected with special attention to the professional qualifications required to administer the functions described under this subchapter. (4) Each agency program official shall be responsible and accountable for information resources assigned to and supporting the programs under such official. In consultation with the Chief Information Officer designated under paragraph (2) and the agency Chie

Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3506

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

10 U.S.C. § 111 — Executive department

**(a)** The Department of Defense is an executive department of the United States. **(b)** The Department is composed of the following: (1) The Office of the Secretary of Defense. (2) The Joint Chiefs of Staff. (3) The Joint Staff. (4) The Defense Agencies. (5) Department of Defense Field Activities. (6) The Department of the Army. (7) The Department of the Navy. (8) The Department of the Air Force. (9) The unified and specified combatant commands. (10) Such other offices, agencies, activities, and commands as may be established or designated by law or by the President. (11) All offices, agencies, activities, and commands under the control or supervision of any element named in paragraphs (1) through (10). **(c)** If the President establishes or designates an office, agency, activity, or command in the Department of Defense of a kind other than those described in paragraphs (1) through (9) of subsection (b), the President shall notify Congress not later than 60 days thereafter.

Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 111

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

40 U.S.C. § 11101 — Definitions

In this subtitle, the following definitions apply: (1) **Commercial product.—** — The term “commercial product” has the meaning given that term in [section 103 of title 41](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section103&num=0&edition=prelim). (2) **Executive agency.—** — The term “executive agency” has the meaning given that term in [section 133 of title 41](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section133&num=0&edition=prelim). (3) **Information resources.—** — The term “information resources” has the meaning given that term in [section 3502 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3502&num=0&edition=prelim). (4) **Information resources management.—** — The term “information resources management” has the meaning given that term in [section 3502 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3502&num=0&edition=prelim). (5) **Information system.—** — The term “information system” has the meaning given that term in [section 3502 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3502&num=0&edition=prelim). (6) **Information technology.—** — The term “information technology”— (A) with respect to an executive agency means any equipment or interconnected system or subsystem of equipment, used in the automatic acquisition, storage, analysis, evaluation, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information by the executive agency, if the equipment is used by the executive agency directly or is used by a contractor under a contract with the executive agency that requires the use— (i) of that equipment;

Source: Supplied U.S. Code snapshot — release unconfirmed · 40 U.S.C. § 11101

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

40 U.S.C. § 11103 — Applicability to national security systems

**(a) Definition.—** (1) **National security system.—** — In this section, the term “national security system” means a telecommunications or information system operated by the Federal Government, the function, operation, or use of which— (A) involves intelligence activities; (B) involves cryptologic activities related to national security; (C) involves command and control of military forces; (D) involves equipment that is an integral part of a weapon or weapons system; or (E) subject to paragraph (2), is critical to the direct fulfillment of military or intelligence missions. (2) **Limitation.—** — Paragraph (1)(E) does not include a system to be used for routine administrative and business applications (including payroll, finance, logistics, and personnel management applications). **(b) In General.—** Except as provided in subsection (c), chapter 113 of this title does not apply to national security systems. **(c) Exceptions.—** (1) **In general.—** — Sections 11313, 11315, and 11316 of this title apply to national security systems. (2) **Capital planning and investment control.—** — The heads of executive agencies shall apply sections 11302 and 11312 of this title to national security systems to the extent practicable. (3) **Applicability of performance-based and results-based management to national security systems.—** (A) *In general.—* — Subject to subparagraph (B), the heads of executive agencies shall apply [section 11303 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11303&num=0&edition=prelim) to national security systems to the extent practicable. (B) *Exception.—* — National security systems are subject to [section 11303(b)(5) of this title](https://uscode.house.gov/view.xhtml?req=granule

Source: Supplied U.S. Code snapshot — release unconfirmed · 40 U.S.C. § 11103

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

40 U.S.C. § 11315 — Agency Chief Information Officer

**(a) Definition.—** In this section, the term “information technology architecture”, with respect to an executive agency, means an integrated framework for evolving or maintaining existing information technology and acquiring new information technology to achieve the agency’s strategic goals and information resources management goals. **(b) General Responsibilities.—** The Chief Information Officer of an executive agency is responsible for— (1) providing advice and other assistance to the head of the executive agency and other senior management personnel of the executive agency to ensure that information technology is acquired and information resources are managed for the executive agency in a manner that implements the policies and procedures of this subtitle, consistent with chapter 35 of title 44 and the priorities established by the head of the executive agency; (2) developing, maintaining, and facilitating the implementation of a sound, secure, and integrated information technology architecture for the executive agency; and (3) promoting the effective and efficient design and operation of all major information resources management processes for the executive agency, including improvements to work processes of the executive agency. **(c) Duties and Qualifications.—** The Chief Information Officer of an agency listed in [section 901(b) of title 31](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title31-section901/b&num=0&edition=prelim)— (1) has information resources management duties as that official’s primary duty; (2) monitors the performance of information technology programs of the agency, evaluates the performance of those programs on the basis of the applicable performance measurements, and advises the head of the agency regarding whether

Source: Supplied U.S. Code snapshot — release unconfirmed · 40 U.S.C. § 11315

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

10 U.S.C. § 3455 — Repealed. Pub. L. 119–60, div. A, title VIII, § 811(a)(5), Dec. 18, 2025, 139 Stat. 948]

### Statutory Notes Section, added Pub. L. 109–163, div. A, title VIII, § 803(a)(1), Jan. 6, 2006, 119 Stat. 3370, § 2379; amended Pub. L. 110–181, div. A, title VIII, § 815(a)(1), Jan. 28, 2008, 122 Stat. 222; Pub. L. 113–291, div. A, title X, § 1071(a)(7), Dec. 19, 2014, 128 Stat. 3504; Pub. L. 114–92, div. A, title VIII, § 852(a)–(d), Nov. 25, 2015, 129 Stat. 917, 918; Pub. L. 114–328, div. A, title VIII, § 872, Dec. 23, 2016, 130 Stat. 2307; Pub. L. 115–232, div. A, title VIII, § 836(d)(4), (8)(D), Aug. 13, 2018, 132 Stat. 1868, 1869; renumbered § 3455 and amended Pub. L. 116–283, div. A, title XVIII, §§ 1821(a)(2), (b)(4), 1831(j)(4), 1883(b)(2), Jan. 1, 2021, 134 Stat. 4195, 4217, 4294; Pub. L. 117–81, div. A, title XVII, § 1701(b)(10)(i)(ii), Dec. 27, 2021, 135 Stat. 2134; Pub. L. 117–263, div. A, title VIII, § 803, Dec. 23, 2022, 136 Stat. 2693, related to requirement for prior determination by Secretary of Defense and notification to Congress for the procurement of a major weapon system as a commercial product.

Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 3455

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

47 U.S.C. § 906 — Wireless supply chain innovation and multilateral security

**(a) Communications technology security funds** (1) **Public Wireless Supply Chain Innovation Fund** (A) *Establishment* (i) *In general* — There is established in the Treasury of the United States a trust fund to be known as the “Public Wireless Supply Chain Innovation Fund” (referred to in this paragraph as the “Innovation Fund”). (ii) *Availability* (I) *In general* — Amounts appropriated to the Innovation Fund shall remain available through the end of the tenth fiscal year beginning after the date on which funds are appropriated to the Fund. (II) *Remainder to Treasury* — Any amounts remaining in the Innovation Fund after the end of the tenth fiscal year beginning after the date of appropriation shall be deposited in the general fund of the Treasury. (B) *Use of Fund* (i) *In general* — Amounts appropriated to the Innovation Fund shall be available to the Secretary, acting through the NTIA Administrator, to make grants on a competitive basis under this paragraph in such amounts as the Secretary, acting through the NTIA Administrator, determines appropriate, subject to clause (ii). (ii) *Limitation on grant amounts* — The amount of a grant awarded under this paragraph to a recipient for a specific research focus area may not exceed $50,000,000. (C) *Administration of Fund* — The Secretary, acting through the NTIA Administrator, in consultation with the Commission, the Under Secretary of Commerce for Standards and Technology, the Secretary of Homeland Security, the Secretary of Defense, and the Director of the Intelligence Advanced Research Projects Activity of the Office of the Director of National Intelligence, shall establish criteria for grants awarded under this paragraph, by the NTIA Administrator and administer the I

Source: Supplied U.S. Code snapshot — release unconfirmed · 47 U.S.C. § 906

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

44 U.S.C. § 3555 — Annual independent evaluation

**(a) In General.—** (1) Each year each agency shall have performed an independent evaluation of the information security program and practices of that agency to determine the effectiveness of such program and practices. (2) Each evaluation under this section shall include— (A) testing of the effectiveness of information security policies, procedures, and practices of a representative subset of the agency’s information systems; (B) an assessment of the effectiveness of the information security policies, procedures, and practices of the agency; and (C) separate presentations, as appropriate, regarding information security relating to national security systems. **(b) Independent Auditor.—** Subject to subsection (c)— (1) for each agency with an Inspector General appointed under chapter 4 of title 5, the annual evaluation required by this section shall be performed by the Inspector General or by an independent external auditor, as determined by the Inspector General of the agency; and (2) for each agency to which paragraph (1) does not apply, the head of the agency shall engage an independent external auditor to perform the evaluation. **(c) National Security Systems.—** For each agency operating or exercising control of a national security system, that portion of the evaluation required by this section directly relating to a national security system shall be performed— (1) only by an entity designated by the agency head; and (2) in such a manner as to ensure appropriate protection for information associated with any information security vulnerability in such system commensurate with the risk and in accordance with all applicable laws. **(d) Existing Evaluations.—** The evaluation required by this section may be based in whole or in part on an audit, eval

Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3555

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

50 U.S.C. § 3003 — Biennial reports on foreign biological threats

**(a) Reports** On a biennial basis until the date that is 10 years after March 15, 2022, the Director of National Intelligence shall submit to the congressional intelligence committees a comprehensive report on the activities, prioritization, and responsibilities of the intelligence community with respect to foreign biological threats emanating from the territory of, or sponsored by, a covered country. **(b) Matters included** Each report under subsection (a) shall include, with respect to foreign biological threats emanating from the territory of, or sponsored by, a covered country, the following: (1) A detailed description of all activities relating to such threats undertaken by each element of the intelligence community, and an assessment of any gaps in such activities. (2) A detailed description of all duties and responsibilities relating to such threats explicitly authorized or otherwise assigned, exclusively or jointly, to each element of the intelligence community, and an assessment of any identified gaps in such duties or responsibilities. (3) A description of the coordination among the relevant elements of the intelligence community with respect to the activities specified in paragraph (1) and the duties and responsibilities specified in paragraph (2). (4) An inventory of the strategies, plans, policies, and interagency agreements of the intelligence community relating to the collection, monitoring, analysis, mitigation, and attribution of such threats, and an assessment of any identified gaps therein. (5) A description of the coordination and interactions among the relevant elements of the intelligence community and non-intelligence community partners. (6) An assessment of foreign malign influence efforts relating to such threats, including any foreign

Source: Supplied U.S. Code snapshot — release unconfirmed · 50 U.S.C. § 3003

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

44 U.S.C. § 3608 — Federal risk and authorization management program

There is established within the General Services Administration the Federal Risk and Authorization Management Program. The Administrator, subject to section 3614, shall establish a Government-wide program that provides a standardized, reusable approach to security assessment and authorization for cloud computing products and services that process unclassified information used by agencies.

Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3608

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.