Improving reserve component network account continuity

(a) Policy update Not later than March 1, 2027, the Chief Information Officer of the Department of Defense shall, in coordination with the Chief Information Officers of the military departments, update Department of Defense-wide policy and guidance to establish the following minimum standards for personnel accounts of members of the reserve components on unclassified and classified networks: (1) Accounts shall be disabled after no less than 180 days of inactivity. (2) Accounts shall be deleted after no less than 270 days of inactivity. (b) Technical implementation Not later than July 1, 2027, the commanders responsible for information network operations of the Army, Navy, Marine Corps, Air Force, and Space Force shall implement all technical configurations and group policy objects required to enforce the standards established under subsection (a). (c) Audit Commencing not later than July 1, 2027, the Inspector General of the Department of Defense shall conduct a 365-day audit of the implementation of subsections (a) and (b), which shall assess— (1) the extent to which applicable policies and technical configurations have been updated and implemented as required; (2) the rate at which personnel of reserve components were required to reactivate or rebuild accounts on unclassified and classified networks following implementation; and (3) whether the policy and technical changes required under this section have demonstrably reduced account reactivation and rebuild burdens for personnel of the reserve components. (d) Transmittal of findings Not later than September 1, 2028, the Inspector General of the Department of Defense shall transmit to the Chief Information Officer of the Department of Defense and the Chief Information Officers of the military departments the findings of the Inspector General with respect to the audit conducted under subsection (c). (e) Briefing Not later than October 1, 2028, the Inspector General of the Department of Defense shall provide to the congressional defense committees a briefing on the findings of the Inspector General with respect to the audit conducted under subsection (c). (f) Definitions In this section: (1) The term classified network means any Department of Defense network authorized to process or transmit information classified at the Secret level. (2) The term reserve component has the meaning given that term in section 101(c) of title 10, United States Code.