Limitation on funds for travel pending briefing on process for best-in-class cyber data products and services

(a) Limitation Of the funds authorized to be appropriated by this Act or otherwise made available for fiscal year 2026 for operation and maintenance, Defense-wide, and available for travel expenses for the Office of the Chief Information Officer of the Department of Defense, not more than 90 percent may be obligated or expended until the date on which the Secretary of Defense provides the briefing required under subsection (b). (b) Briefing required The Secretary shall, acting through the Chief Information Officer of the Department of Defense and in coordination with the Chief Information Officers from each of the military departments and the Director of the Defense Information Systems Agency, provide a brief to the congressional defense committees on— (1) how the Department of Defense plans to establish an open and competitive process through authorities granted in section 1521 of the National Defense Authorization Act for Fiscal Year 2022 (Public Law 117–81; 10 U.S.C. 2224 note) to procure best in class cybersecurity solutions, including endpoint, identity, and threat-hunting solutions; and (2) the benefits associated with the use of multiple different cybersecurity providers to support operational resilience of Department networks. (c) Implementation status The brief required under subsection (b) shall include— (1) the status of the designation of an executive agent for Department of Defense-wide procurement of cyber data products and services as required by subsection (a) of section 1521 of the National Defense Authorization Act for Fiscal Year 2022 (Public Law 117–81; 10 U.S.C. 2224 note); (2) the establishment and operational status of the program management office required by such subsection; (3) progress made in developing Department-wide requirements for cyber data products and services; and (4) a detailed timeline for full implementation of the requirements specified in section 1521 of such Act (Public Law 117–81; 10 U.S.C. 2224 note). (d) Acquisition strategy The brief required by subsection (b) shall include a comprehensive acquisition strategy that— (1) outlines how the Department will leverage enterprise-wide procurement to achieve cost efficiencies compared to component-level procurements; (2) identifies metrics for measuring the effectiveness and value of enterprise-wide cyber solutions; (3) details plans to ensure accessibility of procured solutions across all military departments and components of the Department; and (4) describes how the Department will maintain vendor diversity and competition throughout the acquisition lifecycle. (e) Budget implications The brief required under subsection (b) shall include— (1) estimated funding requirements for the implementation of enterprise-wide procurement of cyber data products and services for fiscal years 2026 through 2030; and (2) a description of how enterprise-wide procurement will result in cost savings compared to current acquisition approaches.

(a) Limitation Of the funds authorized to be appropriated by this Act or otherwise made available for fiscal year 2026 for operation and maintenance, Defense-wide, and available for travel expenses for the Office of the Chief Information Officer of the Department of Defense, not more than 90 percent may be obligated or expended until the date on which the Secretary of Defense provides the briefing required under subsection (b). (b) Briefing required The Secretary shall, acting through the Chief Information Officer of the Department of Defense and in coordination with the Chief Information Officers from each of the military departments and the Director of the Defense Information Systems Agency, provide a brief to the congressional defense committees on— (1) how the Department of Defense plans to establish an open and competitive process through authorities granted in section 1521 of the National Defense Authorization Act for Fiscal Year 2022 (Public Law 117–81; 10 U.S.C. 2224 note) to procure best in class cybersecurity solutions, including endpoint, identity, and threat-hunting solutions; and (2) the benefits associated with the use of multiple different cybersecurity providers to support operational resilience of Department networks. (c) Implementation status The brief required under subsection (b) shall include— (1) the status of the designation of an executive agent for Department of Defense-wide procurement of cyber data products and services as required by subsection (a) of section 1521 of the National Defense Authorization Act for Fiscal Year 2022 (Public Law 117–81; 10 U.S.C. 2224 note); (2) the establishment and operational status of the program management office required by such subsection; (3) progress made in developing Department-wide requirements for cyber data products and services; and (4) a detailed timeline for full implementation of the requirements specified in section 1521 of such Act (Public Law 117–81; 10 U.S.C. 2224 note). (d) Acquisition strategy The brief required by subsection (b) shall include a comprehensive acquisition strategy that— (1) outlines how the Department will leverage enterprise-wide procurement to achieve cost efficiencies compared to component-level procurements; (2) identifies metrics for measuring the effectiveness and value of enterprise-wide cyber solutions; (3) details plans to ensure accessibility of procured solutions across all military departments and components of the Department; and (4) describes how the Department will maintain vendor diversity and competition throughout the acquisition lifecycle. (e) Budget implications The brief required under subsection (b) shall include— (1) estimated funding requirements for the implementation of enterprise-wide procurement of cyber data products and services for fiscal years 2026 through 2030; and (2) a description of how enterprise-wide procurement will result in cost savings compared to current acquisition approaches.