50 U.S.C. § 3243 — Periodic reports on technology strategy of

Page 776 TITLE 50—WAR AND NATIONAL DEFENSE § 3243 (b) Elements Each report under subsection (a) shall include, with respect to the period covered by the report, the following: (1) A description of each cyber vulnerability procured through a foreign commercial pro- vider, including— (A) a description of the vulnerability; (B) the date of the procurement; (C) whether the procurement consisted of only that vulnerability or included other vulnerabilities; (D) the cost of the procurement; (E) the identity of the commercial pro- vider and, if the commercial provider was not the original supplier of the vulner- ability, a description of the original sup- plier; (F) the country of origin of the vulner- ability; and (G) an assessment of the ability of the in- telligence community to use the vulner- ability, including whether such use will be operational or for research and development, and the approximate timeline for such use. (2) An assessment of foreign commercial pro- viders that— (A) pose a significant threat to the na- tional security of the United States; or (B) have provided cyber vulnerabilities to any foreign government that— (i) has used the cyber vulnerabilities to target United States persons, the United States Government, journalists, or dis- sidents; or (ii) has an established pattern or prac- tice of violating human rights or sup- pressing dissent. (3) An assessment of whether the intel- ligence community has conducted business with the foreign commercial providers identi- fied under paragraph (2) during the 5-year pe- riod preceding the date of the report. (c) Form Each report under subsection (a) may be sub- mitted in classified form. (d) Definitions In this section: (1) Commercial provider The term ‘‘commercial provider’’ means any person that sells, or acts as a broker, for a cyber vulnerability. (2) Cyber vulnerability The term ‘‘cyber vulnerability’’ means any tool, exploit, vulnerability, or code that is in- tended to compromise a device, network, or system, including such a tool, exploit, vulner- ability, or code procured by the intelligence community for purposes of research and devel- opment. (July 26, 1947, ch. 343, title XI, § 1112, as added Pub. L. 117–103, div. X, title VIII, § 822(a), Mar. 15, 2022, 136 Stat. 1020.) Statutory Notes and Related Subsidiaries FIRST REPORT Pub. L. 117–103, div. X, title VIII, § 822(b), Mar. 15, 2022, 136 Stat. 1021, provided that: ‘‘Not later than 90 days after the date of the enactment of this Act [Mar. 15, 2022], the Director of the Central Intelligence Agen- cy and the Director of the National Security Agency shall jointly submit the first report required under sec- tion 1112 of the National Security Act of 1947 [50 U.S.C. 3242], as added by subsection (a).’’ § 3243. Periodic reports on technology strategy of intelligence community (a) Reports On a basis that is not less frequent than once every 4 years, the Director of National Intel- ligence, in coordination with the Director of the Office of Science and Technology Policy, the Secretary of Commerce, and the heads of such other agencies as the Director considers appro- priate, shall submit to the congressional intel- ligence committees a comprehensive report on the technology strategy of the intelligence com- munity, which shall be designed to support the maintenance of the leadership of the United States in critical and emerging technologies es- sential to the national security of the United States. (b) Elements Each report submitted under subsection (a) shall include the following: (1) An assessment of technologies critical to the national security of the United States, particularly those technologies with respect to which foreign countries that are adversarial to the United States have or are poised to match or surpass the technology leadership of the United States. (2) A review of current technology policies of the intelligence community, including long- term goals. (3) An identification of sectors and supply chains the Director determines to be of the greatest strategic importance to national se- curity. (4) An identification of opportunities to pro- tect the leadership of the United States, and the allies and partners of the United States, in critical technologies, including through tar- geted export controls, investment screening, and counterintelligence activities. (5) An identification of research and develop- ment areas the Director determines critical to the national security of the United States, in- cluding areas in which the private sector does not focus. (6) Recommendations for growing talent in key critical and emerging technologies and en- hancing the ability of the intelligence commu- nity to recruit and retain individuals with critical skills relating to such technologies. (7) An identification of opportunities to im- prove the leadership of the United States in critical technologies, including opportunities to develop international partnerships to rein- force domestic policy actions, develop new markets, engage in collaborative research, and maintain an international environment that reflects the values of the United States and protects the interests of the United States. (8) A technology annex to establish an ap- proach for the identification, prioritization, development, and fielding of emerging tech- nologies critical to the mission of the intel- ligence community. Page 777 TITLE 50—WAR AND NATIONAL DEFENSE § 3244 (9) Such other information as the Director determines may be necessary to inform Con- gress on matters relating to the technology strategy of the intelligence community and related implications for the national security of the United States. (c) Form of annex Each annex submitted under subsection (b)(8) may be submitted in classified form. (July 26, 1947, ch. 343, title XI, § 1113, as added Pub. L. 117–103, div. X, title VIII, § 823(a), Mar. 15, 2022, 136 Stat. 1021.) Statutory Notes and Related Subsidiaries FIRST REPORT Pub. L. 117–103, div. X, title VIII, § 823(b), Mar. 15, 2022, 136 Stat. 1022, provided that: ‘‘Not later than 1 year after the date of the enactment of this Act [Mar. 15, 2022], the Director of National Intelligence shall submit to the congressional intelligence committees the first report required under section 1113 of the Na- tional Security Act of 1947 [50 U.S.C. 3243], as added by subsection (a).’’ [For definition of ‘‘congressional intelligence com- mittees’’ as used in section 823(b) of div. X of Pub. L. 117–103, set out above, see section 2 of div. X of Pub. L. 117–103, set out as a note under section 3003 of this title.] § 3244. Annual report on reporting requirements (a) Annual report required Not later than March 1 of each fiscal year, the Director of National Intelligence shall submit to the congressional intelligence committees, the Committee on Appropriations of the Senate, and the Committee on Appropriations of the House of Representatives a report detailing all con- gressionally mandated reporting requirements applicable to the Office of the Director of Na- tional Intelligence for the upcoming fiscal year. (b) Contents Each report submitted pursuant to subsection (a) shall include, for the fiscal year covered by the report and for each congressionally man- dated reporting requirement detailed in the re- port: (1) A description of the reporting require- ment. (2) A citation to the provision of law (or other source of congressional directive) impos- ing the reporting requirement. (3) Whether the reporting requirement is re- curring, conditional, or subject to a termi- nation provision. (4) Whether the Director recommends repeal- ing or modifying the requirement. (c) Form Each report submitted pursuant to subsection (a) may be submitted in classified form. (July 26, 1947, ch. 343, title XI, § 1114, as added Pub. L. 118–31, div. G, title III, § 7314(a), Dec. 22, 2023, 137 Stat. 1031; amended Pub. L. 118–159, div. F, title LXIX, § 6902(a)(5), Dec. 23, 2024, 138 Stat. 2517.) Editorial Notes AMENDMENTS 2024—Subsec. (a). Pub. L. 118–159 inserted ‘‘the’’ be- fore ‘‘Office of the Director’’. CHAPTER 45—MISCELLANEOUS INTELLIGENCE COMMUNITY AUTHORITIES SUBCHAPTER I—BUDGET AND OVERSIGHT Sec. 3301. Multiyear national intelligence program. 3302. Identification of constituent components of base intelligence budget. 3303. Construction of intelligence community fa- cilities; Presidential authorization. 3304. Limitation on construction of facilities to be used primarily by intelligence community. 3305. Exhibits for inclusion with budget justifica- tion books. 3306. Availability to public of certain intelligence funding information. 3307. Communications with the Committees on Armed Services of the Senate and the House of Representatives. 3308. Information access by the Comptroller Gen- eral of the United States. 3308a. Provision of certain information to Govern- ment Accountability Office by National Re- connaissance Office. 3309. Notification of establishment of advisory committee. 3310. Annual report on United States security ar- rangements and commitments with other nations. 3311. Submittal to Congress by heads of elements of intelligence community of plans for or- derly shutdown in event of absence of ap- propriations. 3312. Repealed. 3313. Notification of memoranda of understanding. 3314. Report on national security systems. 3315. Repealed. 3316. Submission of intelligence community poli- cies. 3316a. Reports on intelligence community participa- tion in vulnerabilities equities process of Federal Government. 3316b. Continuity of operations plans for certain ele- ments of the intelligence community in the case of a national emergency. 3316c. Development of definitions for certain terms relating to intelligence. SUBCHAPTER II—PERSONNEL AND ADMINISTRATIVE AUTHORITIES 3321. National Intelligence Reserve Corps. 3322. Additional education and training require- ments. 3323. Eligibility for incentive awards. 3324. Prohibition on using journalists as agents or assets. 3325. Reaffirmation of longstanding prohibition against drug trafficking by employees of the intelligence community. 3326. Limitation of expenditure of funds appro- priated for Department of Defense intel- ligence programs. 3327. Limitation on transfer of funds between CIA and Department of Defense; congressional notification required. 3328. Study or plan of surrender; use of appropria- tions. 3329. Intelligence community contracting. 3330. Reports to the intelligence community on penetrations of networks and information systems of certain contractors. 3331. Management of intelligence community per- sonnel. 3332. Guidance and reporting requirement regard- ing the interactions between the intel- ligence community and entertainment in- dustry. 3333. Joint facilities certification. 3334. Intelligence community public-private talent exchange.