S 2226 Introduced in Senate
FY 2024 NDAA
Last week Sen Reed (D,RI) introduced S 2226, the National Defense Authorization Act for Fiscal Year 2024. This is the Senate version of the annual ‘must past’ defense authorization bill. The Senate Appropriations Committee published their report on the bill. Most cyber issues in the bill relate specifically to military missions, but there are cybersecurity provisions that may have wider impact, both in the bill and in the Report.
Cybersecurity Related Provisions in the Bill
The following sections in the bill address cybersecurity related activities in DOD:
§522. Selected Reserve and Ready Reserve order to active duty to respond to a significant cyber incident.
§1116. Civilian Cybersecurity Reserve pilot project [similar to S 903].
§1615. Cyber incident reporting.
§1620. Strategy on cybersecurity resiliency of Department of Defense space enterprise.
The following sections address international cybersecurity coordination efforts:
§1248. Plan for enhanced security cooperation with Japan.
§1252. Military cybersecurity cooperation with Taiwan.
§1299E. Cooperation with allies and partners in Middle East on development of integrated regional cybersecurity architecture.
§1614. Development of regional cybersecurity strategies.
Cybersecurity Related Provisions in the Report
The following discussions in the Committee Report address cybersecurity issues of potentially wider impact:
Cybersecurity of firmware in information and operational technology (pg 321),
Department of Defense Cyber and Digital Services Academy (pg 322),
Department of Defense partnerships with academic institutions to build the cyber workforce (pg 322),
National Security Agency cybersecurity workforce pilot program (pg 325),
Mitigating cybersecurity supply chain risk within the Energy Resilience and Conservation Program (pg 367),
Moving Forward
The Senate is scheduled to begin consideration of the bill today. A large number of amendments have been proposed, but it is too early to determine which amendments will actually be considered in the Senate. I will be looking at those amendments in separate posts.
The House passed their version of the legislation last week. This bill is substantially different from that version, and it will be further amended in the Senate this week (and possibly next). A conference committee will be formed to iron out the multiple differences between the two bills, producing a consensus version that hopefully could pass in both bodies sometime after the summer recess (and hopefully before the end of the calendar year).