Browse Arkansas Code titles and sections
44 U.S.C. § 3506 — Federal agency responsibilities
Federal law — U.S. Code and appendices · legal_authorities
**(a)**
(1) The head of each agency shall be responsible for—
(A) carrying out the agency’s information resources management activities to improve agency productivity, efficiency, and effectiveness; and
(B) complying with the requirements of this subchapter and related policies established by the Director.
(2)
(A) Except as provided under subparagraph (B), the head of each agency shall designate a Chief Information Officer who shall report directly to such agency head to carry out the responsibilities of the agency under this subchapter.
(B) The Secretary of the Department of Defense and the Secretary of each military department may each designate Chief Information Officers who shall report directly to such Secretary to carry out the responsibilities of the department under this subchapter. If more than one Chief Information Officer is designated, the respective duties of the Chief Information Officers shall be clearly delineated.
(3) The Chief Information Officer designated under paragraph (2) shall head an office responsible for ensuring agency compliance with and prompt, efficient, and effective implementation of the information policies and information resources management responsibilities established under this subchapter, including the reduction of information collection burdens on the public. The Chief Information Officer and employees of such office shall be selected with special attention to the professional qualifications required to administer the functions described under this subchapter.
(4) Each agency program official shall be responsible and accountable for information resources assigned to and supporting the programs under such official. In consultation with the Chief Information Officer designated under paragraph (2) and the agency Chie
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3506
Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.
Original supplied file — preserved unchanged
Download original Markdown file
File SHA-256: 4e78858dc801e4d3bf7763b78179124a8e82fab895829cd8796d07ebe7de68d5. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.
Authority boundary: historical or unconfirmed source not current law verified.
Open the recorded source website ↗
Record provenance
Stable record: federal_law:legal_authorities:record_usc_06798df40f6d20bd0948f356
Source file: Laws/federal/codes/united-states-code/title-44/section-3506-federal-agency-responsibilities--6c546961ea.md
Pages: Not recorded – Not recorded
Passage SHA-256: 005e8e4881a489ce15c25c74b6b844174409b80dd69e23ee05cac0347031c8b8
Source location: Title 44, Chapter 35, § 3506; chapter-035-coordination-of-federal-information-policy.md
Stored source content
**(a)**
(1) The head of each agency shall be responsible for—
(A) carrying out the agency’s information resources management activities to improve agency productivity, efficiency, and effectiveness; and
(B) complying with the requirements of this subchapter and related policies established by the Director.
(2)
(A) Except as provided under subparagraph (B), the head of each agency shall designate a Chief Information Officer who shall report directly to such agency head to carry out the responsibilities of the agency under this subchapter.
(B) The Secretary of the Department of Defense and the Secretary of each military department may each designate Chief Information Officers who shall report directly to such Secretary to carry out the responsibilities of the department under this subchapter. If more than one Chief Information Officer is designated, the respective duties of the Chief Information Officers shall be clearly delineated.
(3) The Chief Information Officer designated under paragraph (2) shall head an office responsible for ensuring agency compliance with and prompt, efficient, and effective implementation of the information policies and information resources management responsibilities established under this subchapter, including the reduction of information collection burdens on the public. The Chief Information Officer and employees of such office shall be selected with special attention to the professional qualifications required to administer the functions described under this subchapter.
(4) Each agency program official shall be responsible and accountable for information resources assigned to and supporting the programs under such official. In consultation with the Chief Information Officer designated under paragraph (2) and the agency Chief Financial Officer (or comparable official), each agency program official shall define program information needs and develop strategies, systems, and capabilities to meet those needs.
**(b)** With respect to general information resources management, each agency shall—
(1) manage information resources to—
(A) reduce information collection burdens on the public;
(B) increase program efficiency and effectiveness; and
(C) improve the integrity, quality, and utility of information to all users within and outside the agency, including capabilities for ensuring dissemination of public information, public access to government information, and protections for privacy and security;
(2) in accordance with guidance by the Director, develop and maintain a strategic information resources management plan that, to the extent practicable—
(A) describes how information resources management activities help accomplish agency missions;
(B) includes an open data plan for data that does not concern monetary policy that—
(i) requires the agency to develop processes and procedures that—
(I) require data collection mechanisms created on or after the date of the enactment of the OPEN Government Data Act to be available in an open format; and
(II) facilitate collaboration with non-Government entities (including businesses), researchers, and the public for the purpose of understanding how data users value and use government data;
(ii) identifies and implements methods for collecting and analyzing digital information on data asset usage by users within and outside of the agency, including designating a point of contact within the agency to assist the public and to respond to quality issues, usability issues, recommendations for improvements, and complaints about adherence to open data requirements within a reasonable period of time;
(iii) develops and implements a process to evaluate and improve the timeliness, completeness, consistency, accuracy, usefulness, and availability of open Government data assets;
(iv) includes requirements for meeting the goals of the agency open data plan, including the acquisition of technology, provision of training for employees, and the implementation of procurement standards, in accordance with existing law, regulation, and policy, that allow for the acquisition of innovative solutions from public and private sectors;
(v) identifies as priority data assets any data asset for which disclosure would be in the public interest and establishes a plan to evaluate each priority data asset for disclosure on the Federal Data Catalogue under section 3511 and for a determination under 11 So in original. Probably should be followed by “section”. 3511(a)(2)(A)(iii)(I)(bb), including an accounting of which priority data assets have not yet been evaluated; and
(vi) requires the agency to comply with requirements under section 3511, including any standards established by the Director under such section, when disclosing a data asset pursuant to such section; and
(C) is updated annually and made publicly available on the website of the agency not later than 5 days after each such update;
(3) develop and maintain an ongoing process to—
(A) ensure that information resources management operations and decisions are integrated with organizational planning, budget, financial management, human resources management, and program decisions;
(B) in cooperation with the agency Chief Financial Officer (or comparable official), develop a full and accurate accounting of information technology expenditures, related expenses, and results; and
(C) establish goals for improving information resources management’s contribution to program productivity, efficiency, and effectiveness, methods for measuring progress towards those goals, and clear roles and responsibilities for achieving those goals;
(4) in consultation with the Director, the Administrator of General Services, and the Archivist of the United States, maintain a current and complete inventory of the agency’s information resources, including directories necessary to fulfill the requirements of section 3511 of this subchapter;
(5) in consultation with the Director and the Director of the Office of Personnel Management, conduct formal training programs to educate agency program and management officials about information resources management; and
(6) in accordance with guidance by the Director—
(A) make each data asset of the agency available in an open format; and
(B) make each public data asset of the agency available—
(i) as an open Government data asset; and
(ii) under an open license.
**(c)** With respect to the collection of information and the control of paperwork, each agency shall—
(1) establish a process within the office headed by the Chief Information Officer designated under subsection (a), that is sufficiently independent of program responsibility to evaluate fairly whether proposed collections of information should be approved under this subchapter, to—
(A) review each collection of information before submission to the Director for review under this subchapter, including—
(i) an evaluation of the need for the collection of information;
(ii) a functional description of the information to be collected;
(iii) a plan for the collection of the information;
(iv) a specific, objectively supported estimate of burden;
(v) a test of the collection of information through a pilot program, if appropriate; and
(vi) a plan for the efficient and effective management and use of the information to be collected, including necessary resources;
(B) ensure that each information collection—
(i) is inventoried, displays a control number and, if appropriate, an expiration date;
(ii) indicates the collection is in accordance with the clearance requirements of section 3507; and
(iii) informs the person receiving the collection of information of—
(I) the reasons the information is being collected;
(II) the way such information is to be used;
(III) an estimate, to the extent practicable, of the burden of the collection;
(IV) whether responses to the collection of information are voluntary, required to obtain a benefit, or mandatory; and
(V) the fact that an agency may not conduct or sponsor, and a person is not required to respond to, a collection of information unless it displays a valid control number; and
(C) assess the information collection burden of proposed legislation affecting the agency;
(2)
(A) except as provided under subparagraph (B) or section 3507(j), provide 60-day notice in the Federal Register, and otherwise consult with members of the public and affected agencies concerning each proposed collection of information, to solicit comment to—
(i) evaluate whether the proposed collection of information is necessary for the proper performance of the functions of the agency, including whether the information shall have practical utility;
(ii) evaluate the accuracy of the agency’s estimate of the burden of the proposed collection of information;
(iii) enhance the quality, utility, and clarity of the information to be collected; and
(iv) minimize the burden of the collection of information on those who are to respond, including through the use of automated collection techniques or other forms of information technology; and
(B) for any proposed collection of information contained in a proposed rule (to be reviewed by the Director under section 3507(d)), provide notice and comment through the notice of proposed rulemaking for the proposed rule and such notice shall have the same purposes specified under subparagraph (A)(i) through (iv);
(3) certify (and provide a record supporting such certification, including public comments received by the agency) that each collection of information submitted to the Director for review under section 3507—
(A) is necessary for the proper performance of the functions of the agency, including that the information has practical utility;
(B) is not unnecessarily duplicative of information otherwise reasonably accessible to the agency;
(C) reduces to the extent practicable and appropriate the burden on persons who shall provide information to or for the agency, including with respect to small entities, as defined under [section 601(6) of title 5](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title5-section601/6&num=0&edition=prelim), the use of such techniques as—
(i) establishing differing compliance or reporting requirements or timetables that take into account the resources available to those who are to respond;
(ii) the clarification, consolidation, or simplification of compliance and reporting requirements; or
(iii) an exemption from coverage of the collection of information, or any part thereof;
(D) is written using plain, coherent, and unambiguous terminology and is understandable to those who are to respond;
(E) is to be implemented in ways consistent and compatible, to the maximum extent practicable, with the existing reporting and recordkeeping practices of those who are to respond;
(F) indicates for each recordkeeping requirement the length of time persons are required to maintain the records specified;
(G) contains the statement required under paragraph (1)(B)(iii);
(H) has been developed by an office that has planned and allocated resources for the efficient and effective management and use of the information to be collected, including the processing of the information in a manner which shall enhance, where appropriate, the utility of the information to agencies and the public;
(I) uses effective and efficient statistical survey methodology appropriate to the purpose for which the information is to be collected; and
(J) to the maximum extent practicable, uses information technology to reduce burden and improve data quality, agency efficiency and responsiveness to the public; and
(4) in addition to the requirements of this chapter regarding the reduction of information collection burdens for small business concerns (as defined in section 3 of the Small Business Act ([15 U.S.C. 632](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section632&num=0&edition=prelim))), make efforts to further reduce the information collection burden for small business concerns with fewer than 25 employees.
**(d)** With respect to information dissemination, each agency shall—
(1) ensure that the public has timely and equitable access to the agency’s public information, including ensuring such access through—
(A) encouraging a diversity of public and private sources for information based on government public information;
(B) in cases in which the agency provides public information maintained in electronic format, providing timely and equitable access to the underlying data (in whole or in part); and
(C) agency dissemination of public information in an efficient, effective, and economical manner;
(2) regularly solicit and consider public input on the agency’s information dissemination activities;
(3) provide adequate notice when initiating, substantially modifying, or terminating significant information dissemination products;
(4) not, except where specifically authorized by statute—
(A) establish an exclusive, restricted, or other distribution arrangement that interferes with timely and equitable availability of public information to the public;
(B) restrict or regulate the use, resale, or redissemination of public information by the public;
(C) charge fees or royalties for resale or redissemination of public information; or
(D) establish user fees for public information that exceed the cost of dissemination;
(5) ensure that any public data asset of the agency is machine-readable; and
(6) engage the public in using public data assets of the agency and encourage collaboration by—
(A) publishing on the website of the agency, on a regular basis (not less than annually), information on the usage of such assets by non-Government users;
(B) providing the public with the opportunity to request specific data assets to be prioritized for disclosure and to provide suggestions for the development of agency criteria with respect to prioritizing data assets for disclosure;
(C) assisting the public in expanding the use of public data assets; and
(D) hosting challenges, competitions, events, or other initiatives designed to create additional value from public data assets of the agency.
**(e)** With respect to statistical policy and coordination, each agency shall—
(1) ensure the relevance, accuracy, timeliness, integrity, and objectivity of information collected or created for statistical purposes;
(2) inform respondents fully and accurately about the sponsors, purposes, and uses of statistical surveys and studies;
(3) protect respondents’ privacy and ensure that disclosure policies fully honor pledges of confidentiality;
(4) observe Federal standards and practices for data collection, analysis, documentation, sharing, and dissemination of information;
(5) ensure the timely publication of the results of statistical surveys and studies, including information about the quality and limitations of the surveys and studies; and
(6) make data available to statistical agencies and readily accessible to the public.
**(f)** With respect to records management, each agency shall implement and enforce applicable policies and procedures, including requirements for archiving information maintained in electronic format, particularly in the planning, design and operation of information systems.
**(g)** With respect to privacy and security, each agency shall—
(1) implement and enforce applicable policies, procedures, standards, and guidelines on privacy, confidentiality, security, disclosure and sharing of information collected or maintained by or for the agency; and
(2) assume responsibility and accountability for compliance with and coordinated management of sections 552 and 552a of title 5, subchapter II of this chapter, and related information management laws.
**(h)** With respect to Federal information technology, each agency shall—
(1) implement and enforce applicable Governmentwide and agency information technology management policies, principles, standards, and guidelines;
(2) assume responsibility and accountability for information technology investments;
(3) promote the use of information technology by the agency to improve the productivity, efficiency, and effectiveness of agency programs, including the reduction of information collection burdens on the public and improved dissemination of public information;
(4) propose changes in legislation, regulations, and agency procedures to improve information technology practices, including changes that improve the ability of the agency to use technology to reduce burden; and
(5) assume responsibility for maximizing the value and assessing and managing the risks of major information systems initiatives through a process that is—
(A) integrated with budget, financial, and program management decisions; and
(B) used to select, control, and evaluate the results of major information systems initiatives.
**(i)**
(1) In addition to the requirements described in subsection (c), each agency shall, with respect to the collection of information and the control of paperwork, establish 1 point of contact in the agency to act as a liaison between the agency and small business concerns (as defined in section 3 of the Small Business Act ([15 U.S.C. 632](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section632&num=0&edition=prelim))).
(2) Each point of contact described under paragraph (1) shall be established not later than 1 year after the date of enactment of the Small Business Paperwork Relief Act of 2002.
Cross-references
Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.
Federal law — U.S. Code and appendices · legal_authorities
As used in this subchapter—
(1) the term “agency” means any executive department, military department, Government corporation, Government controlled corporation, or other establishment in the executive branch of the Government (including the Executive Office of the President), or any independent regulatory agency, but does not include—
(A) the Government Accountability Office;
(B) Federal Election Commission;
(C) the governments of the District of Columbia and of the territories and possessions of the United States, and their various subdivisions; or
(D) Government-owned contractor-operated facilities, including laboratories engaged in national defense research and production activities;
(2) the term “burden” means time, effort, or financial resources expended by persons to generate, maintain, or provide information to or for a Federal agency, including the resources expended for—
(A) reviewing instructions;
(B) acquiring, installing, and utilizing technology and systems;
(C) adjusting the existing ways to comply with any previously applicable instructions and requirements;
(D) searching data sources;
(E) completing and reviewing the collection of information; and
(F) transmitting, or otherwise disclosing the information;
(3) the term “collection of information”—
(A) means the obtaining, causing to be obtained, soliciting, or requiring the disclosure to third parties or the public, of facts or opinions by or for an agency, regardless of form or format, calling for either—
(i) answers to identical questions posed to, or identical reporting or recordkeeping requirements imposed on, ten or more persons, other than agencies, instrumentalities, or employees of the United States; or
(ii) answers to questions posed to agencies, ins
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3502
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
Before approving a proposed collection of information, the Director shall determine whether the collection of information by the agency is necessary for the proper performance of the functions of the agency, including whether the information shall have practical utility. Before making a determination the Director may give the agency and other interested persons an opportunity to be heard or to submit statements in writing. To the extent, if any, that the Director determines that the collection of information by an agency is unnecessary for any reason, the agency may not engage in the collection of information.
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3508
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
### Statutory Notes
Section, Pub. L. 107–217, Aug. 21, 2002, 116 Stat. 1244, related to Federal computer system security training and plan.
#### Effective Date of Repeal
Repeal effective Dec. 17, 2002, see section 402(b) of Pub. L. 107–347, set out as an Effective Date of 2002 Amendments note under [section 3504 of Title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3504&num=0&edition=prelim), Public Printing and Documents.
Repeal by Pub. L. 107–296 effective 60 days after Nov. 25, 2002, see section 4 of Pub. L. 107–296, set out as an Effective Date note under [section 101 of Title 6](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section101&num=0&edition=prelim), Domestic Security.
Source: Supplied U.S. Code snapshot — release unconfirmed · 40 U.S.C. § 11332
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
The purposes of this subchapter are to—
(1) minimize the paperwork burden for individuals, small businesses, educational and nonprofit institutions, Federal contractors, State, local and tribal governments, and other persons resulting from the collection of information by or for the Federal Government;
(2) ensure the greatest possible public benefit from and maximize the utility of information created, collected, maintained, used, shared and disseminated by or for the Federal Government;
(3) coordinate, integrate, and to the extent practicable and appropriate, make uniform Federal information resources management policies and practices as a means to improve the productivity, efficiency, and effectiveness of Government programs, including the reduction of information collection burdens on the public and the improvement of service delivery to the public;
(4) improve the quality and use of Federal information to strengthen decisionmaking, accountability, and openness in Government and society;
(5) minimize the cost to the Federal Government of the creation, collection, maintenance, use, dissemination, and disposition of information;
(6) strengthen the partnership between the Federal Government and State, local, and tribal governments by minimizing the burden and maximizing the utility of information created, collected, maintained, used, disseminated, and retained by or for the Federal Government;
(7) provide for the dissemination of public information on a timely basis, on equitable terms, and in a manner that promotes the utility of the information to the public and makes effective use of information technology;
(8) ensure that the creation, collection, maintenance, use, dissemination, and disposition of information by or for the Federal Government is consistent w
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3501
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Small business concerns**
(1) **In general** — For the purposes of this chapter, a small-business concern, including but not limited to enterprises that are engaged in the business of production of food and fiber, ranching and raising of livestock, aquaculture, and all other farming and agricultural related industries, shall be deemed to be one which is independently owned and operated and which is not dominant in its field of operation.
(2) **Establishment of size standards**
(A) *In general* — In addition to the criteria specified in paragraph (1) and subject to the requirements specified under subparagraph (C), the Administrator may specify detailed definitions or standards by which a business concern may be determined to be a small business concern for the purposes of this chapter or any other Act.
(B) *Additional criteria* — The standards described in paragraph (1) may utilize number of employees, dollar volume of business, net worth, net income, a combination thereof, or other appropriate factors.
(C) *Requirements* — Unless specifically authorized by statute, no Federal department (including the Administration when acting pursuant to subparagraph (A)) or agency may prescribe a size standard for categorizing a business concern as a small business concern, unless such proposed size standard—
(i) is proposed after an opportunity for public notice and comment;
(ii) provides for determining—
(I) the size of a manufacturing concern as measured by the manufacturing concern’s average employment based upon employment during each of the manufacturing concern’s pay periods for the preceding 24 months;
(II) the size of a business concern providing services on the basis of the annual average gross receipts of the business concern over
Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 632
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a)**
(1) The Director shall oversee the use of information resources to improve the efficiency and effectiveness of governmental operations to serve agency missions, including burden reduction and service delivery to the public. In performing such oversight, the Director shall—
(A) develop, coordinate and oversee the implementation of Federal information resources management policies, principles, standards, and guidelines; and
(B) provide direction and oversee—
(i) the review and approval of the collection of information and the reduction of the information collection burden;
(ii) agency dissemination of and public access to information;
(iii) statistical activities;
(iv) records management activities;
(v) privacy, confidentiality, security, disclosure, and sharing of information; and
(vi) the acquisition and use of information technology, including alternative information technologies that provide for electronic submission, maintenance, or disclosure of information as a substitute for paper and for the use and acceptance of electronic signatures.
(2) The authority of the Director under this subchapter shall be exercised consistent with applicable law.
**(b)** With respect to general information resources management policy, the Director shall—
(1) develop and oversee the implementation of uniform information resources management policies, principles, standards, and guidelines;
(2) foster greater sharing, dissemination, and access to public information, including through—
(A) the use of comprehensive data inventories and the Federal data catalogue under section 3511; and
(B) the development and utilization of common standards for information collection, storage, processing and communication, including standards for securi
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3504
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Activities** The Center shall—
(1) receive, aggregate, analyze, and secure, using processes consistent with the processes developed pursuant to the Cybersecurity Information Sharing Act of 2015 ([6 U.S.C. 1501](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title6-section1501&num=0&edition=prelim) et seq.) reports from covered entities related to a covered cyber incident to assess the effectiveness of security controls, identify tactics, techniques, and procedures adversaries use to overcome those controls and other cybersecurity purposes, including to assess potential impact of cyber incidents on public health and safety and to enhance situational awareness of cyber threats across critical infrastructure sectors;
(2) coordinate and share information with appropriate Federal departments and agencies to identify and track ransom payments, including those utilizing virtual currencies;
(3) leverage information gathered about cyber incidents to—
(A) enhance the quality and effectiveness of information sharing and coordination efforts with appropriate entities, including agencies, sector coordinating councils, Information Sharing and Analysis Organizations, State, local, Tribal, and territorial governments, technology providers, critical infrastructure owners and operators, cybersecurity and cyber incident response firms, and security researchers; and
(B) provide appropriate entities, including sector coordinating councils, Information Sharing and Analysis Organizations, State, local, Tribal, and territorial governments, technology providers, cybersecurity and cyber incident response firms, and security researchers, with timely, actionable, and anonymized reports of cyber incident campaigns and trends, including, to the maximum extent practicable
Source: Supplied U.S. Code snapshot — release unconfirmed · 6 U.S.C. § 101
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Additional Responsibilities of Chief Information Officer of Department of Defense.—** In addition to the responsibilities provided for in chapter 35 of title 44 and in [section 11315 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11315&num=0&edition=prelim), the Chief Information Officer of the Department of Defense shall—
(1) review and provide recommendations to the Secretary of Defense on Department of Defense budget requests for information technology and national security systems;
(2) ensure the interoperability of information technology and national security systems throughout the Department of Defense;
(3) ensure that information technology and national security systems standards that will apply throughout the Department of Defense are prescribed;
(4) provide for the elimination of duplicate information technology and national security systems within and between the military departments and Defense Agencies; and
(5) maintain a consolidated inventory of Department of Defense mission critical and mission essential information systems, identify interfaces between those systems and other information systems, and develop and maintain contingency plans for responding to a disruption in the operation of any of those information systems.
**(b) Additional Responsibilities of Chief Information Officer of Military Departments.—** In addition to the responsibilities provided for in chapter 35 of title 44 and in [section 11315 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11315&num=0&edition=prelim), the Chief Information Officer of a military department, with respect to the military department concerned, shall—
(1) review budget requests for all information technology and nation
Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 2223
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a)**
(1) There shall be in the Department not more than seven Assistant Secretaries.
(2) Except as provided in paragraph (3), each Assistant Secretary appointed under paragraph (1) shall be appointed by the President, by and with the advice and consent of the Senate.
(3) The following Assistant Secretaries may be appointed without the advice and consent of the Senate:
(A) The Assistant Secretary for Management.
(B) The Assistant Secretary for Human Resources and Administration.
(C) The Assistant Secretary for Public and Intergovernmental Affairs.
(D) The Assistant Secretary for Operations, Security, and Preparedness.
**(b)** The Secretary shall assign to the Assistant Secretaries responsibility for the administration of such functions and duties as the Secretary considers appropriate, including the following functions:
(1) Budgetary and financial functions.
(2) Personnel management and labor relations functions.
(3) Planning, studies, and evaluations.
(4) Management, productivity, and logistic support functions.
(5) Information management functions as required by [section 3506 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3506&num=0&edition=prelim).
(6) Capital facilities and real property program functions.
(7) Equal opportunity functions.
(8) Functions regarding the investigation of complaints of employment discrimination within the Department.
(9) Functions regarding intergovernmental, public, and consumer information and affairs.
(10) Procurement functions.
(11) Operations, preparedness, security, and law enforcement functions.
(12) The functions set forth in [section 323(c) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title38-section323/c&num=0&edition=prelim).
Source: Supplied U.S. Code snapshot — release unconfirmed · 38 U.S.C. § 308
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Standards and Guidelines.—**
(1) **Authority to prescribe.—** — Except as provided under paragraph (2), the Secretary of Commerce shall, on the basis of standards and guidelines developed by the National Institute of Standards and Technology pursuant to paragraphs (2) and (3) of section 20(a) of the National Institute of Standards and Technology Act ([15 U.S.C. 278g–3(a)](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section278g–3/a&num=0&edition=prelim)), prescribe standards and guidelines pertaining to Federal information systems.
(2) **National security systems.—** — Standards and guidelines for national security systems shall be developed, prescribed, enforced, and overseen as otherwise authorized by law and as directed by the President.
**(b) Mandatory Requirements.—**
(1) **Authority to make mandatory.—** — Except as provided under paragraph (2), the Secretary of Commerce shall make standards prescribed under subsection (a)(1) compulsory and binding to the extent determined necessary by the Secretary to improve the efficiency of operation or security of Federal information systems.
(2) **Required mandatory standards.—**
(A) *In general.—* — Standards prescribed under subsection (a)(1) shall include information security standards that—
(i) provide minimum information security requirements as determined under section 20(b) of the National Institute of Standards and Technology Act ([15 U.S.C. 278g–3(b)](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section278g–3/b&num=0&edition=prelim)); and
(ii) are otherwise necessary to improve the security of Federal information and information systems.
(B) *Requirement.—* — Information security standards described in subparagraph (A) shall be compulsory and
Source: Supplied U.S. Code snapshot — release unconfirmed · 40 U.S.C. § 11331
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.