House NDAA Markup Includes New Cyber Threat Entities, Cyber Purchasing Office, Testing of “Digital Twins”
The House Armed Services Committee’s markup of the Biden administration’s fiscal 2022 National Defense Authorization Act includes two new entities to improve public-private cyber information sharing and collaboration, and a number of other cybersecurity related measures.
- The Cyber Threat Information Collaboration Environment would be built in cooperation of private sector entities, including critical infrastructure stakeholders and companies, and have capabilities for monitoring, detecting, and mitigating cyber threats.
- The Cyber Threat Data Standards and Interoperability Council would be an interagency entity charged with establishing “data streams” and “data governance” for exchanging cyber threat intelligence among government agencies and between the public and private sectors.
- The Defense Information Systems Agency’s new program management office would buy “enterprise-wide” commercial cyber threat information products.
- New requirements for evaluating systems would focus on the development of “digital twins” as virtual test subjects of their survivability against non-kinetic threats and their lethality.
- All branches would be required to identify legacy systems and software for potential discontinuation.
Sources:
