Effective date; review of systems currently in use

(a) In general This Act shall take effect on the date that is 180 days after the date of the enactment of this Act. (b) Review of systems currently in use (1) In general Not later than 180 days after the effective date set forth in subsection (a), the Secretary shall conduct a review of all systems described in section 3(a)(2) that are in use by the Department as of such effective date. (2) Attestation Upon completion of the review required under paragraph (1), the Secretary shall submit to the appropriate committees of Congress a written attestation identifying, for each reviewed system, whether the system is compliant with the requirements of sections 3, 6, and 7. (3) Noncompliant systems For any system that the Secretary cannot attest is in compliance with sections 3, 6, and 7, the Secretary shall immediately cease all use of such system and, concurrent with the attestation required under paragraph (2), submit to appropriate committees of Congress a remediation plan that includes— (A) a description of the specific requirement or requirements with which the system does not comply; (B) an operational or national security justification, if any, for continued use of the system pending remediation; and (C) a timeline for bringing the system into compliance or, if compliance is not practicable, for the responsible retirement or modification of the system.