Annual report on weapon systems data accessibility and security

(a) In general Not later than April 30, 2026, and annually thereafter until September 30, 2030, the Secretary of Defense, in coordination with the Secretary of the Army, Secretary of the Navy, and Secretary of the Air Force, shall submit to the congressional defense committees a report analyzing the weapons platforms of the Department of Defense that lack onboard, real-time cybersecurity capabilities. (b) Elements Each annual report submitted under subsection (a) shall include, for each weapons platform analyzed in such report, the following: (1) An explanation of why onboard, real-time cybersecurity capabilities have not yet been integrated into such weapons platform. (2) An estimate of the cost to implement onboard, real-time cybersecurity capabilities into such weapons platform to enable monitoring and detection of cyber intrusions. (3) A timeline, correlated with the cost estimate required under paragraph (2), to implement onboard, real-time cybersecurity capabilities across the entire inventory of the Department of Defense of such weapons platform. (c) Onboard, real-time cybersecurity capabilities defined In this section, onboard, real-time cybersecurity capabilities means technologies integrated into a weapons platform that mitigate cyber risks to operation, including serial bus monitoring capabilities or runtime application self-protection capabilities.

(a) In general Not later than April 30, 2026, and annually thereafter until September 30, 2030, the Secretary of Defense, in coordination with the Secretary of the Army, Secretary of the Navy, and Secretary of the Air Force, shall submit to the congressional defense committees a report analyzing the weapons platforms of the Department of Defense that lack onboard, real-time cybersecurity capabilities. (b) Elements Each annual report submitted under subsection (a) shall include, for each weapons platform analyzed in such report, the following: (1) An explanation of why onboard, real-time cybersecurity capabilities have not yet been integrated into such weapons platform. (2) An estimate of the cost to implement onboard, real-time cybersecurity capabilities into such weapons platform to enable monitoring and detection of cyber intrusions. (3) A timeline, correlated with the cost estimate required under paragraph (2), to implement onboard, real-time cybersecurity capabilities across the entire inventory of the Department of Defense of such weapons platform. (c) Onboard, real-time cybersecurity capabilities defined In this section, onboard, real-time cybersecurity capabilities means technologies integrated into a weapons platform that mitigate cyber risks to operation, including serial bus monitoring capabilities or runtime application self-protection capabilities.