Browse Arkansas Code titles and sections
10 U.S.C. § 2225 — Untitled legal text
Federal law — U.S. Code and appendices · legal_authorities
Page 1812
TITLE 10—ARMED FORCES
§ 2224a
1 See References in Text note below.
fense committees [Committees on Armed Services and
Appropriations of the Senate and the House of Rep-
resentatives] a report on the strategy required by sub-
section (a). The report shall include the following:
‘‘(1) A description of the current status of the strat-
egy required by subsection (a) and of the implementa-
tion of the strategy, including a description of the
role of the strategy in the risk management by the
Department regarding the supply chain and in oper-
ational planning for cyber security.
‘‘(2) A description of the risks, if any, that the De-
partment will accept in the strategy due to limita-
tions on funds or other applicable constraints.’’
INSTITUTE FOR DEFENSE COMPUTER SECURITY AND
INFORMATION PROTECTION
Pub. L. 106–398, § 1 [[div. A], title IX, § 921], Oct. 30,
2000, 114 Stat. 1654, 1654A–233, provided that:
‘‘(a) ESTABLISHMENT.—The Secretary of Defense shall
establish an Institute for Defense Computer Security
and Information Protection.
‘‘(b) MISSION.—The Secretary shall require the insti-
tute—
‘‘(1) to conduct research and technology develop-
ment that is relevant to foreseeable computer and
network security requirements and information as-
surance requirements of the Department of Defense
with a principal focus on areas not being carried out
by other organizations in the private or public sector;
and
‘‘(2) to facilitate the exchange of information re-
garding cyberthreats, technology, tools, and other
relevant issues.
‘‘(c) CONTRACTOR
OPERATION.—The Secretary shall
enter into a contract with a not-for-profit entity, or a
consortium of not-for-profit entities, to organize and
operate the institute. The Secretary shall use competi-
tive procedu
Source: Supplied 2024 U.S. Code historical extraction · 10 U.S.C. § 2225
Stored review status: historical_2024_not_currentness_verified. A text match is a research starting point; applicability is not established.
Original supplied file — preserved unchanged
Download original Markdown file
File SHA-256: 1cf7f3fd185d7aa7b7885fd97014a282463f0bfd589b348cb6a1541a282d7a0b. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.
Authority boundary: historical or unconfirmed source not current law verified.
Open the recorded source website ↗
Record provenance
Stable record: federal_law:legal_authorities:usc2024-3626263d01b7e5109dca5d3d
Source file: Laws/federal/codes/united-states-code-2024/title-10/section-2225-untitled-legal-text--25c29bee4f.md
Pages: Not recorded – Not recorded
Passage SHA-256: 2d6516cd32471c2ce2d1dadd6df8807cee55cd946d3827b5e5381a0e0eca6932
Source location: USCODE-2024-title10-subtitleA-partIV-chap131-sec2225.pdf
Stored source content
Page 1812
TITLE 10—ARMED FORCES
§ 2224a
1 See References in Text note below.
fense committees [Committees on Armed Services and
Appropriations of the Senate and the House of Rep-
resentatives] a report on the strategy required by sub-
section (a). The report shall include the following:
‘‘(1) A description of the current status of the strat-
egy required by subsection (a) and of the implementa-
tion of the strategy, including a description of the
role of the strategy in the risk management by the
Department regarding the supply chain and in oper-
ational planning for cyber security.
‘‘(2) A description of the risks, if any, that the De-
partment will accept in the strategy due to limita-
tions on funds or other applicable constraints.’’
INSTITUTE FOR DEFENSE COMPUTER SECURITY AND
INFORMATION PROTECTION
Pub. L. 106–398, § 1 [[div. A], title IX, § 921], Oct. 30,
2000, 114 Stat. 1654, 1654A–233, provided that:
‘‘(a) ESTABLISHMENT.—The Secretary of Defense shall
establish an Institute for Defense Computer Security
and Information Protection.
‘‘(b) MISSION.—The Secretary shall require the insti-
tute—
‘‘(1) to conduct research and technology develop-
ment that is relevant to foreseeable computer and
network security requirements and information as-
surance requirements of the Department of Defense
with a principal focus on areas not being carried out
by other organizations in the private or public sector;
and
‘‘(2) to facilitate the exchange of information re-
garding cyberthreats, technology, tools, and other
relevant issues.
‘‘(c) CONTRACTOR
OPERATION.—The Secretary shall
enter into a contract with a not-for-profit entity, or a
consortium of not-for-profit entities, to organize and
operate the institute. The Secretary shall use competi-
tive procedures for the selection of the contractor to
the extent determined necessary by the Secretary.
‘‘(d) FUNDING.—Of the amount authorized to be appro-
priated by section 301(5) [114 Stat. 1654A–52], $5,000,000
shall be available for the Institute for Defense Com-
puter Security and Information Protection.
‘‘(e) REPORT.—Not later than April 1, 2001, the Sec-
retary shall submit to the congressional defense com-
mittees [Committees on Armed Services and Appro-
priations of the Senate and the House of Representa-
tives] the Secretary’s plan for implementing this sec-
tion.’’
§ 2224a. Information security: continued applica-
bility of expiring Governmentwide require-
ments to the Department of Defense
(a) IN GENERAL.—The provisions of subchapter
II 1 of chapter 35 of title 44 shall continue to
apply through September 30, 2004, with respect
to the Department of Defense, notwithstanding
the expiration of authority under section 3536 1
of such title.
(b) RESPONSIBILITIES.—In administering the
provisions of subchapter II 1 of chapter 35 of title
44 with respect to the Department of Defense
after the expiration of authority under section
3536 1 of such title, the Secretary of Defense
shall perform the duties set forth in that sub-
chapter for the Director of the Office of Manage-
ment and Budget.
(Added
Pub.
L.
107–314,
div.
A,
title
X,
§ 1052(b)(1), Dec. 2, 2002, 116 Stat. 2648.)
Editorial Notes
REFERENCES IN TEXT
Provisions relating to the expiration of authority of
subchapter II of chapter 35 of title 44, referred to in
text, did not appear in section 3536 of title 44 subse-
quent to the general revision of subchapter II by Pub.
L. 107–296, title X, § 1001(b)(1), Nov. 25, 2002, 116 Stat.
2259. Subchapter II, as revised by Pub. L. 107–296, was
repealed and a new subchapter II enacted by Pub. L.
113–283, § 2(a), Dec. 18, 2014, 128 Stat. 3073.
[§ 2225. Repealed. Pub. L. 114–328, div. A, title
VIII, § 833(b)(2)(A), Dec. 23, 2016, 130 Stat.
2284]
Section, added Pub. L. 106–398, § 1 [[div. A], title VIII,
§ 812(a)(1)], Oct. 30, 2000, 114 Stat. 1654, 1654A–212; amend-
ed Pub. L. 108–178, § 4(b)(2), Dec. 15, 2003, 117 Stat. 2640;
Pub. L. 109–364, div. A, title X, § 1071(a)(2), Oct. 17, 2006,
120 Stat. 2398; Pub. L. 111–350, § 5(b)(6), Jan. 4, 2011, 124
Stat. 3842, related to tracking and management of in-
formation technology purchases.
Statutory Notes and Related Subsidiaries
TIME FOR IMPLEMENTATION; APPLICABILITY
Pub. L. 106–398, § 1 [[div. A], title VIII, § 812(b)], Oct.
30, 2000, 114 Stat. 1654, 1654A–214, which provided that
the Secretary of Defense was to collect data as required
under section 2225 of this title for all contractual ac-
tions covered by such section entered into on or after
Oct. 30, 2000, was repealed by Pub. L. 114–328, div. A,
title VIII, § 833(b)(2)(C)(i), Dec. 23, 2016, 130 Stat. 2284.
GAO REPORT
Pub. L. 106–398, § 1 [[div. A], title VIII, § 812(c)], Oct.
30, 2000, 114 Stat. 1654, 1654A–214, which directed the
Comptroller General to submit to committees of Con-
gress a report on the collection of data under this sec-
tion not later than 15 months after Oct. 30, 2000, was re-
pealed
by
Pub.
L.
114–328,
div.
A,
title
VIII,
§ 833(b)(2)(C)(i), Dec. 23, 2016, 130 Stat. 2284.
[§ 2226. Renumbered § 4602]
[§ 2227. Renumbered § 4601]
§ 2228. Office of Corrosion Policy and Oversight
(a) OFFICE AND DIRECTOR.—(1) There is an Of-
fice of Corrosion Policy and Oversight within
the Office of the Under Secretary of Defense for
Acquisition and Sustainment.
(2) The Office shall be headed by a Director of
Corrosion Policy and Oversight, who shall be as-
signed to such position by the Under Secretary
from among civilian employees of the Depart-
ment of Defense with the qualifications de-
scribed in paragraph (3). The Director is respon-
sible in the Department of Defense to the Sec-
retary of Defense (after the Under Secretary of
Defense for Acquisition and Sustainment) for
the prevention and mitigation of corrosion of
the military equipment and infrastructure of
the Department of Defense.
(3) In order to qualify to be assigned to the po-
sition of Director, an individual shall—
(A) have management expertise in, and pro-
fessional experience with, corrosion project
and policy implementation, including an un-
derstanding of the effects of corrosion policies
on infrastructure; research, development, test,
and evaluation; and maintenance; and
(B) have an understanding of Department of
Defense budget formulation and execution,
policy formulation, and planning and program
requirements.
(4) The Secretary of Defense shall designate
the position of Director as a critical acquisition
position under section 1731 of this title.
Cross-references
Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Program Required.—** The Secretary of Defense shall establish a program for information sharing protection and insider threat mitigation for the information systems of the Department of Defense to detect unauthorized access to, use of, or transmission of classified or controlled unclassified information.
**(b) Elements.—** The program established under subsection (a) shall include the following:
(1) Technology solutions for deployment within the Department of Defense that allow for centralized monitoring and detection of unauthorized activities, including—
(A) monitoring the use of external ports and read and write capability controls;
(B) disabling the removable media ports of computers physically or electronically;
(C) electronic auditing and reporting of unusual and unauthorized user activities;
(D) using data-loss prevention and data-rights management technology to prevent the unauthorized export of information from a network or to render such information unusable in the event of the unauthorized export of such information;
(E) a roles-based access certification system;
(F) cross-domain guards for transfers of information between different networks; and
(G) patch management for software and security updates.
(2) Policies and procedures to support such program, including special consideration for policies and procedures related to international and interagency partners and activities in support of ongoing operations in areas of hostilities.
(3) A governance structure and process that integrates information security and sharing technologies with the policies and procedures referred to in paragraph (2). Such structure and process shall include—
(A) coordination with the existing security clearance and suitability review process;
(B)
Source: Supplied U.S. Code snapshot — release unconfirmed · 10 U.S.C. § 2225
Stored review status: release_metadata_unconfirmed. Same stored citation; legal effect and authority still require review.