Roadmap for modernization of Top Secret and Special Access Program network architectures

(a) In general Not later than 180 days after the date of the enactment of this Act, section, the Secretary of Defense shall develop and submit to the congressional defense committees, and begin implementation of, a roadmap for the modernization of Department of Defense networks that process, store, or transmit information that is classified at the level of top secret or is designated as being within a special access program. (b) Elements The roadmap required under subsection (a) shall include the following elements: (1) An assessment of the current architecture, capacity, security posture, and technical limitations of such networks, including identification of major capability gaps, cybersecurity risks, infrastructure limitations, and technical debt. (2) Target or reference architectures for modernized environments for such networks, including enterprise-level and component-level networks, as appropriate. appropriate, with a preference for modern cloud-based platforms. (3) Milestones and timelines for transition from current environments to the target or reference architectures. (4) Plans to improve resilience, survivability, and operations of such networks in contested, degraded, or disconnected environments. (5) Plans to improve interoperability and data sharing across such networks and relevant mission partner environments, as appropriate. appropriate, with priority on real time cross domain, multi-level data sharing both up and down classifications. (6) An assessment of high-performance computing and distributed computing requirements, whether locally or in cloud environments, necessary to support real-time sensor data fusion, advanced analytics, and artificial intelligence capabilities. (7) An assessment of the extent to which such networks support the operational requirements of combatant commands, including the ability to enable integration with joint and mission partner environments. (8) Identification of governance, roles, and responsibilities for modernization of such networks across the Department. (9) Estimated resource requirements necessary to implement the roadmap. (10) Identify and establish baseline domain-specific requirements and capabilities across elements of the Department, platform-as-a-service providers, and cloud service providers. (c) Annual report Not later than one year after the date of the enactment of this Act, section, and annually thereafter there after for each of the next five years, the Secretary shall submit to the congressional defense committees a report on progress in implementing the roadmap required under subsection (a). (d) Report elements Each report submitted under subsection (c) shall include the following: (1) Progress made toward roadmap milestones and modernization goals. (2) Updates to the roadmap, as appropriate. (3) Major risks, delays, or challenges affecting implementation. (4) Budgetary resources requested and obligated for modernization of such networks. (5) Any recommendations that the Secretary considers appropriate for legislative or funding actions to implement the roadmap. (e) Form of roadmap and reports The roadmap required by subsection (a) and the reports required by subsection (c) shall be submitted in classified form, but may include an unclassified summary.