Plan for increasing utility of user activity monitoring capabilities

(a) In general Not later than June 1, 2026, the Secretary of Defense shall submit to the congressional defense committees a plan for increasing the use of user activity monitoring capabilities on Department of Defense unclassified networks and systems. (b) Elements The plan required by subsection (a) shall include— (1) identification of additional networks or systems to be covered by user activity monitoring; (2) opportunities to integrate user activity monitoring into other cybersecurity or personnel vetting information systems to enhance the availability of data, as well as increase performance for such systems; (3) proposed timelines, milestones, and anticipated costs for expansion to the additional networks identified pursuant to paragraph (1); (4) identification of resources to continue expansion or integration with other cybersecurity or personnel vetting information systems; (5) an assessment of commercially available tools that could be integrated to improve performance of user activity monitoring capabilities; (6) a description of what data is needed to determine measures of performance and effectiveness; and (7) an assessment of the feasibility of integrating a dashboard capability for user activity monitoring performance data through the Advancing Analytics tool.

(a) In general Not later than June 1, 2026, the Secretary of Defense shall submit to the congressional defense committees a plan for increasing the use of user activity monitoring capabilities on Department of Defense unclassified networks and systems. (b) Elements The plan required by subsection (a) shall include— (1) identification of additional networks or systems to be covered by user activity monitoring; (2) opportunities to integrate user activity monitoring into other cybersecurity or personnel vetting information systems to enhance the availability of data, as well as increase performance for such systems; (3) proposed timelines, milestones, and anticipated costs for expansion to the additional networks identified pursuant to paragraph (1); (4) identification of resources to continue expansion or integration with other cybersecurity or personnel vetting information systems; (5) an assessment of commercially available tools that could be integrated to improve performance of user activity monitoring capabilities; (6) a description of what data is needed to determine measures of performance and effectiveness; and (7) an assessment of the feasibility of integrating a dashboard capability for user activity monitoring performance data through the Advancing Analytics tool.