Browse Arkansas Code titles and sections
10 U.S.C. § 2224 — Defense Information Assurance Program
Federal law — U.S. Code and appendices · legal_authorities
**(a) Defense Information Assurance Program.—** The Secretary of Defense shall carry out a program, to be known as the “Defense Information Assurance Program”, to protect and defend Department of Defense information, information systems, and information networks that are critical to the Department and the armed forces during day-to-day operations and operations in times of crisis.
**(b) Objectives of the Program.—** The objectives of the program shall be to provide continuously for the availability, integrity, authentication, confidentiality, nonrepudiation, and rapid restitution of information and information systems that are essential elements of the Defense Information Infrastructure.
**(c) Program Strategy.—** In carrying out the program, the Secretary shall develop a program strategy that encompasses those actions necessary to assure the readiness, reliability, continuity, and integrity of Defense information systems, networks, and infrastructure, including through compliance with subchapter II of chapter 35 of title 44, including through compliance with subchapter III of chapter 35 of title 44. The program strategy shall include the following:
(1) A vulnerability and threat assessment of elements of the defense and supporting nondefense information infrastructures that are essential to the operations of the Department and the armed forces.
(2) Development of essential information assurances technologies and programs.
(3) Organization of the Department, the armed forces, and supporting activities to defend against information warfare.
(4) Joint activities of the Department with other departments and agencies of the Government, State and local agencies, and elements of the national information infrastructure.
(5) The conduct of exercises, war games, simulatio
Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 2224
Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.
Original supplied file — preserved unchanged
Download original Markdown file
File SHA-256: e40360de775e09cbeeb7af42cc23c23a5aa07339bf5449dcaa8806d12a751577. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.
Authority boundary: historical or unconfirmed source not current law verified.
Open the recorded source website ↗
Record provenance
Stable record: federal_law:legal_authorities:record_usc_970630a231ab999156a9cc71
Source file: Laws/federal/codes/united-states-code/title-10/section-2224-defense-information-assurance-program--cdfc7f65fd.md
Pages: Not recorded – Not recorded
Passage SHA-256: eef2c516919a105f92ce287f6536f023e0a18df98a8b98544c4b22d174eccc26
Source location: Title 10, Chapter 131, § 2224; chapter-131-planning-and-coordination.md
Stored source content
**(a) Defense Information Assurance Program.—** The Secretary of Defense shall carry out a program, to be known as the “Defense Information Assurance Program”, to protect and defend Department of Defense information, information systems, and information networks that are critical to the Department and the armed forces during day-to-day operations and operations in times of crisis.
**(b) Objectives of the Program.—** The objectives of the program shall be to provide continuously for the availability, integrity, authentication, confidentiality, nonrepudiation, and rapid restitution of information and information systems that are essential elements of the Defense Information Infrastructure.
**(c) Program Strategy.—** In carrying out the program, the Secretary shall develop a program strategy that encompasses those actions necessary to assure the readiness, reliability, continuity, and integrity of Defense information systems, networks, and infrastructure, including through compliance with subchapter II of chapter 35 of title 44, including through compliance with subchapter III of chapter 35 of title 44. The program strategy shall include the following:
(1) A vulnerability and threat assessment of elements of the defense and supporting nondefense information infrastructures that are essential to the operations of the Department and the armed forces.
(2) Development of essential information assurances technologies and programs.
(3) Organization of the Department, the armed forces, and supporting activities to defend against information warfare.
(4) Joint activities of the Department with other departments and agencies of the Government, State and local agencies, and elements of the national information infrastructure.
(5) The conduct of exercises, war games, simulations, experiments, and other activities designed to prepare the Department to respond to information warfare threats.
(6) Development of proposed legislation that the Secretary considers necessary for implementing the program or for otherwise responding to the information warfare threat.
**(d) Coordination.—** In carrying out the program, the Secretary shall coordinate, as appropriate, with the head of any relevant Federal agency and with representatives of those national critical information infrastructure systems that are essential to the operations of the Department and the armed forces on information assurance measures necessary to the protection of these systems.
**(e)** Repealed. Pub. L. 108–136, div. A, title X, § 1031(a)(12), Nov. 24, 2003, 117 Stat. 1597.]
**(f) Information Assurance Test Bed.—** The Secretary shall develop an information assurance test bed within the Department of Defense to provide—
(1) an integrated organization structure to plan and facilitate the conduct of simulations, war games, exercises, experiments, and other activities to prepare and inform the Department regarding information warfare threats; and
(2) organization and planning means for the conduct by the Department of the integrated or joint exercises and experiments with elements of the national information systems infrastructure and other non-Department of Defense organizations that are responsible for the oversight and management of critical information systems and infrastructures on which the Department, the armed forces, and supporting activities depend for the conduct of daily operations and operations during crisis.
Cross-references
Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Additional Responsibilities of Chief Information Officer of Department of Defense.—** In addition to the responsibilities provided for in chapter 35 of title 44 and in [section 11315 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11315&num=0&edition=prelim), the Chief Information Officer of the Department of Defense shall—
(1) review and provide recommendations to the Secretary of Defense on Department of Defense budget requests for information technology and national security systems;
(2) ensure the interoperability of information technology and national security systems throughout the Department of Defense;
(3) ensure that information technology and national security systems standards that will apply throughout the Department of Defense are prescribed;
(4) provide for the elimination of duplicate information technology and national security systems within and between the military departments and Defense Agencies; and
(5) maintain a consolidated inventory of Department of Defense mission critical and mission essential information systems, identify interfaces between those systems and other information systems, and develop and maintain contingency plans for responding to a disruption in the operation of any of those information systems.
**(b) Additional Responsibilities of Chief Information Officer of Military Departments.—** In addition to the responsibilities provided for in chapter 35 of title 44 and in [section 11315 of title 40](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title40-section11315&num=0&edition=prelim), the Chief Information Officer of a military department, with respect to the military department concerned, shall—
(1) review budget requests for all information technology and nation
Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 2223
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
In this subtitle, the term “commercial product” means any of the following:
(1) A product, other than real property, that—
(A) is of a type customarily used by the general public or by nongovernmental entities for purposes other than governmental purposes; and
(B) has been sold, leased, or licensed, or offered for sale, lease, or license, to the general public.
(2) A product that—
(A) evolved from a product described in paragraph (1) through advances in technology or performance; and
(B) is not yet available in the commercial marketplace but will be available in the commercial marketplace in time to satisfy the delivery requirements under a Federal Government solicitation.
(3) A product that would satisfy the criteria in paragraph (1) or (2) were it not for—
(A) modifications of a type customarily available in the commercial marketplace; or
(B) minor modifications made to meet Federal Government requirements.
(4) Any combination of products meeting the requirements of paragraph (1), (2), or (3) that are of a type customarily combined and sold in combination to the general public.
(5) A product, or combination of products, referred to in paragraphs (1) through (4), even though the product, or combination of products, is transferred between or among separate divisions, subsidiaries, or affiliates of a contractor.
(6) A nondevelopmental item if the procuring agency determines, in accordance with conditions in the Federal Acquisition Regulation, that—
(A) the product was developed exclusively at private expense; and
(B) has been sold in substantial quantities, on a competitive basis, to multiple State and local governments or to multiple foreign governments.
Source: Supplied U.S. Code snapshot — release unconfirmed · 41 U.S.C. § 103
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Designation.—**
(1) The Secretary of Defense, in coordination with the Secretaries of the military departments, shall designate each science and technology reinvention laboratory as a Center for Science, Technology, and Engineering Partnership (in this section referred to as “Centers”) in the recognized core competencies of the designee.
(2) The Secretary of Defense shall establish a policy to encourage the Secretary of each military department to reengineer management and business processes and adopt best-business and personnel practices at the Centers of the Secretary concerned in connection with the capability requirements of the Centers, so as to serve as recognized leaders in such capabilities throughout the Department of Defense and in the national technology and industrial base.
(3) The Secretary of Defense, acting through the directors of the Centers, may conduct one or more pilot programs, consistent with applicable requirements of law, to test any practices referred to in paragraph (2) that the Directors determine could—
(A) improve the efficiency and effectiveness of operations at Centers;
(B) improve the support provided by the Centers for the elements of the Department of Defense who use the services of the Centers; and
(C) enhance capabilities by reducing the cost and improving the performance and efficiency of executing laboratory missions.
**(b) Public-private Partnerships.—**
(1) To achieve one or more objectives set forth in paragraph (2), the Secretary may authorize and establish incentives for the Director of a Center to enter into public-private cooperative arrangements (in this section referred to as a “public-private partnership”) to provide for any of the following:
(A) For employees of the Center, academia, private industr
Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 4124
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) In general** The Administrator shall establish a minority emergency preparedness demonstration program to research and promote the capacity of minority communities to provide data, information, and awareness education by providing grants to or executing contracts or cooperative agreements with eligible nonprofit organizations to establish and conduct such programs.
**(b) Activities supported** An eligible nonprofit organization may use a grant, contract, or cooperative agreement awarded under this section—
(1) to conduct research into the status of emergency preparedness and disaster response awareness in African American and Hispanic households located in urban, suburban, and rural communities, particularly in those States and regions most impacted by natural and manmade disasters and emergencies; and
(2) to develop and promote awareness of emergency preparedness education programs within minority communities, including development and preparation of culturally competent educational and awareness materials that can be used to disseminate information to minority organizations and institutions.
**(c) Eligible organizations** A nonprofit organization is eligible to be awarded a grant, contract, or cooperative agreement under this section with respect to a program if the organization is a nonprofit organization that is described in [section 501(c)(3) of title 26](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title26-section501/c/3&num=0&edition=prelim) and exempt from tax under section 501(a) of such title, whose primary mission is to provide services to communities predominately populated by minority citizens, and that can demonstrate a partnership with a minority-owned business enterprise or minority business located in a HUBZone (as defined in s
Source: Supplied U.S. Code snapshot — release unconfirmed · 42 U.S.C. § 5195c
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
### Statutory Notes
#### Prior Provisions
A prior section 2196, added Pub. L. 101–510, div. A, title II, § 247(a)(1), Nov. 5, 1990, 104 Stat. 1523; amended Pub. L. 102–25, title VII, § 701(i)(2), Apr. 6, 1991, 105 Stat. 116, defined “defense laboratory”, prior to repeal by Pub. L. 102–190, § 825(a)(1). See [section 2199 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title10-section2199&num=0&edition=prelim).
Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 2196
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
In this subtitle, the following definitions apply:
(1) **Commercial product.—** — The term “commercial product” has the meaning given that term in [section 103 of title 41](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section103&num=0&edition=prelim).
(2) **Executive agency.—** — The term “executive agency” has the meaning given that term in [section 133 of title 41](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section133&num=0&edition=prelim).
(3) **Information resources.—** — The term “information resources” has the meaning given that term in [section 3502 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3502&num=0&edition=prelim).
(4) **Information resources management.—** — The term “information resources management” has the meaning given that term in [section 3502 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3502&num=0&edition=prelim).
(5) **Information system.—** — The term “information system” has the meaning given that term in [section 3502 of title 44](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title44-section3502&num=0&edition=prelim).
(6) **Information technology.—** — The term “information technology”—
(A) with respect to an executive agency means any equipment or interconnected system or subsystem of equipment, used in the automatic acquisition, storage, analysis, evaluation, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information by the executive agency, if the equipment is used by the executive agency directly or is used by a contractor under a contract with the executive agency that requires the use—
(i) of that equipment;
Source: Supplied U.S. Code snapshot — release unconfirmed · 40 U.S.C. § 11101
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
The Secretary of State shall perform such duties as shall from time to time be enjoined on or intrusted to him by the President relative to correspondences, commissions, or instructions to or with public ministers or consuls from the United States, or to negotiations with public ministers from foreign states or princes, or to memorials or other applications from foreign public ministers or other foreigners, or to such other matters respecting foreign affairs as the President of the United States shall assign to the Department, and he shall conduct the business of the Department in such manner as the President shall direct.
Source: Supplied U.S. Code snapshot — release unconfirmed · 22 U.S.C. § 2656
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
### Statutory Notes
#### Prior Provisions
A prior section 2368, added Pub. L. 100–456, div. A, title VIII, § 823(a)(1), Sept. 29, 1988, 102 Stat. 2018; amended Pub. L. 101–189, div. A, title VIII, § 841(c)(1), Nov. 29, 1989, 103 Stat. 1514; Pub. L. 102–25, title VII, § 701(g)(1), Apr. 6, 1991, 105 Stat. 115, which authorized studies in fields of research and development essential to development of critical technologies, was repealed by Pub. L. 102–190, div. A, title VIII, § 821(c)(1), Dec. 5, 1991, 105 Stat. 1431.
Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 2368
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) In General.—** In this part (other than in sections 4292(e) and 4321), the term “major system” means a combination of elements that will function together to produce the capabilities required to fulfill a mission need. The elements may include hardware, equipment, software or any combination thereof, but excludes construction or other improvements to real property.
**(b) System Considered to Be a Major System.—** A system shall be considered a major system if—
(1) the conditions of subsection (c) or (d), as applicable, are satisfied; or
(2) the system is designated a “major system” by the head of the agency responsible for the system.
**(c) Department of Defense Systems.—**
(1) **In general.—** — For purposes of subsection (b), a system for which the Department of Defense is responsible shall be considered a major system if—
(A) the total expenditures for research, development, test, and evaluation for the system are estimated to be more than $275,000,000 (based on fiscal year 2024 constant dollars); or
(B) the eventual total expenditure for procurement for the system is estimated to be more than $1,300,000,000 (based on fiscal year 2024 constant dollars).
(2) **Adjustment authority.—** — Authority for the Secretary of Defense to adjust amounts and the base fiscal year in effect under this subsection is provided in [section 4202(b) of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title10-section4202/b&num=0&edition=prelim).
**(d) Civilian Agency Systems.—** For purposes of subsection (b), a system for which a civilian agency is responsible shall be considered a major system if total expenditures for the system are estimated to exceed the greater of—
(1) $2,000,000 (based on fiscal year 2024 constant dollars); or
(2) the do
Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 3041
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Program Required.—** The Secretary of Defense shall establish a program for information sharing protection and insider threat mitigation for the information systems of the Department of Defense to detect unauthorized access to, use of, or transmission of classified or controlled unclassified information.
**(b) Elements.—** The program established under subsection (a) shall include the following:
(1) Technology solutions for deployment within the Department of Defense that allow for centralized monitoring and detection of unauthorized activities, including—
(A) monitoring the use of external ports and read and write capability controls;
(B) disabling the removable media ports of computers physically or electronically;
(C) electronic auditing and reporting of unusual and unauthorized user activities;
(D) using data-loss prevention and data-rights management technology to prevent the unauthorized export of information from a network or to render such information unusable in the event of the unauthorized export of such information;
(E) a roles-based access certification system;
(F) cross-domain guards for transfers of information between different networks; and
(G) patch management for software and security updates.
(2) Policies and procedures to support such program, including special consideration for policies and procedures related to international and interagency partners and activities in support of ongoing operations in areas of hostilities.
(3) A governance structure and process that integrates information security and sharing technologies with the policies and procedures referred to in paragraph (2). Such structure and process shall include—
(A) coordination with the existing security clearance and suitability review process;
(B)
Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 2225
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.