Independent study on the authorities and organizational structure of the principal cyber advisors

(a) Agreement (1) In general The Secretary of Defense shall seek to enter into an agreement with a federally funded research and development center or other independent entity to perform the services covered by this section. (2) Timing The Secretary shall seek to enter into the agreement described in paragraph (1) not later than March 1, 2027. (b) Independent study (1) In general Under an agreement between the Secretary and a center or entity under subsection (a), the center or entity shall conduct a study on the roles, responsibilities, authorities, organizational constructs, and resourcing of the Principal Cyber Advisors of the military departments. (2) Elements In conducting the study under paragraph (1), the center or entity shall conduct an assessment of, and develop recommendations on— (A) the extent to which the responsibilities of the Principal Cyber Advisors of the military departments are clearly delineated from, duplicative of, or ambiguous with respect to, those of the Chief Information Officers of the military departments and the commands or organizations within the Army, the Navy, the Marine Corps, the Air Force, and the Space Force responsible for network and security operations, including recommendations for any changes to statute, policy, or organizational guidance necessary to resolve identified ambiguities or overlaps; (B) the degree to which the authorities prescribed under section 392a(c) of title 10, United States Code, are sufficient to enable the Principal Cyber Advisors of the military departments to execute their statutory and implied responsibilities, including specific recommendations for legislative action to resolve ambiguities or overlaps with the authorities of related positions within the Army, the Navy, the Marine Corps, the Air Force, and the Space Force; (C) the extent to which the current organizational placement of each Principal Cyber Advisor enables effective integration of cyber considerations across departmental activities, including acquisition, operations, personnel, and policy, including recommendations on the optimal organizational construct for each position and the advisability of elevating the position to the level of Assistant Secretary or Under Secretary of the military department; and (D) the extent to which current staffing, funding, and administrative support under each organizational construct enables or hinders execution of statutory and implied responsibilities, including a comparative assessment of resourcing models across the military departments and specific recommendations on the appropriate staffing levels, personnel numbers, assigned tasks, and funding required to enable effective execution of those responsibilities. (c) Consultation In conducting the study required under subsection (b), the center or entity shall consult with— (1) the Principal Cyber Advisor to the Secretary of Defense; (2) the Principal Cyber Advisors of each of the military departments; (3) the Chief Information Officer of the Department of Defense; (4) the Chief Information Officers of each of the military departments; (5) the senior officer or civilian of each of the Army, the Navy, the Marine Corps, the Air Force, and the Space Force responsible for command, control, communications, and information technology; (6) the senior officer or civilian of each of the Army, the Navy, the Marine Corps, the Air Force, and the Space Force responsible for the operations and employment of cyber capabilities; (7) the senior officer or civilian of each of the Army, the Navy, the Marine Corps, the Air Force, and the Space Force responsible for military and civilian cyber workforce career field management; (8) the Director of the Defense Information Systems Agency and Commander of the Department of Defense Cyber Defense Command; and (9) such other officials and stakeholders as the entity considers appropriate. (d) Report and briefing (1) Report Not later than January 1, 2028, the center or entity that conducted the study under subsection (b) shall submit to the Secretary of Defense and the congressional defense committees a report on the findings of the center or entity with respect to study. (2) Briefing Not later than January 15, 2028, the Secretary of Defense shall provide to the congressional defense committees a briefing on the findings of the center or entity that conducted the study under subsection (b) with respect to such study, which may be incorporated into existing annual or budgetary briefings provided to the congressional defense committees.