II

106TH CONGRESS

2D SESSION S. 2702

To require reports on the progress of the Federal Government in

implementing Presidential Decision Directive No. 63 (PDD–63).

IN THE SENATE OF THE UNITED STATES

JUNE 8, 2000

Mr. BENNETT (for himself and Mr. SCHUMER) introduced the following bill;

which was read twice and referred to the Committee on Armed Services

A BILL

To require reports on the progress of the Federal Government in implementing Presidential Decision Directive No.

63 (PDD–63).

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled,

3 SECTION 1. REPORTS ON FEDERAL GOVERNMENT

4 PROGRESS IN IMPLEMENTING PRESIDENTIAL

5 DECISION DIRECTIVE NO. 63 (PDD–63).

6 (a) FINDINGS.—Congress makes the following find7 ings:

8 (1) The protection of our Nation’s critical infra9 structure is of paramount importance to the security

10 of the United States.
2

•S 2702 IS

1 (2) The vulnerability of our Nation’s critical

2 sectors—such as financial services, transportation,

3 communications, and energy and water supply—has

4 increased dramatically in recent years as our econ5 omy and society have become ever more dependent

6 on interconnected computer systems.

7 (3) Threats to our Nation’s critical infrastruc8 ture will continue to grow as foreign governments,

9 terrorist groups, and cyber-criminals increasingly

10 focus on information warfare as a method of achiev11 ing their aims.

12 (4) Addressing the computer-based risks to our

13 Nation’s critical infrastructure requires extensive co14 ordination and cooperation within and between Fed15 eral agencies and the private sector.

16 (5) Presidential Decision Directive No. 63

17 (PDD–63) identifies 12 areas critical to the func18 tioning of the United States and requires certain

19 Federal agencies, and encourages private sector in20 dustries, to develop and comply with strategies in21 tended to enhance the Nation’s ability to protect its

22 critical infrastructure.

23 (6) PDD–63 requires lead Federal agencies to

24 work with their counterparts in the private sector to
3

•S 2702 IS

1 create early warning information sharing systems

2 and other cyber-security strategies.

3 (7) PDD–63 further requires that key Federal

4 agencies develop their own internal information as5 surance plans, and that these plans be fully oper6 ational not later than May 2003.

7 (b) REPORT REQUIREMENTS.—(1) Not later than

8 July 1, 2001, the President shall submit to Congress a

9 comprehensive report detailing the specific steps taken by

10 the Federal Government as of the date of the report to

11 develop infrastructure assurance strategies and the time12 table of the Federal Government for operationalizing and

13 fully implementing critical information systems defense by

14 May, 2003. The report shall include the following:

15 (A) A detailed summary of the progress of each

16 Federal agency in developing an internal information

17 assurance plan.

18 (B) The progress of Federal agencies in estab19 lishing partnerships with relevant private sector in20 dustries.

21 (C) The status of cyber-security and informa22 tion assurance capabilities in the private sector in23 dustries at the forefront of critical infrastructure

24 protection.
4

•S 2702 IS

1 (2)(A) Not later than 120 days after the date of the

2 enactment of this Act, the Secretary of Defense shall sub3 mit to Congress a detailed report on Department of De4 fense plans and programs to organize a coordinated de5 fense against attacks on critical infrastructure and critical

6 information-based systems in both the Federal Govern7 ment and the private sector. The report shall be provided

8 in both classified and unclassified formats.

9 (B) The report shall include the following:

10 (i) A description of the current role of the De11 partment of Defense in implementing Presidential

12 Decision Directive No. 63 (PDD–63).

13 (ii) A description of the manner in which the

14 Department is integrating its various capabilities

15 and assets (including the Army Land Information

16 Warfare Activity (LIWA), the Joint Task Force on

17 Computer Network Defense (JTF–CND), and the

18 National Communications System) into an indica19 tions and warning architecture.

20 (iii) A description of Department work with the

21 intelligence community to identify, detect, and

22 counter the threat of information warfare programs

23 by potentially hostile foreign national governments

24 and sub-national groups.
5

•S 2702 IS

1 (iv) A definition of the terms ‘‘nationally sig2 nificant cyber event’’ and ‘‘cyber reconstitution’’.

3 (v) A description of the organization of Depart4 ment to protect its foreign-based infrastructure and

5 networks.

6 (vi) An identification of the elements of a de7 fense against an information warfare attack, includ8 ing the integration of the Computer Network Attack

9 Capability of the United States Space Command

10 into the overall cyber-defense of the United States.

Æ