‘‘(2) the applicable enabling aspects of the stepping stone approach 
to exploration under section 70504 of this title. 
‘‘(c) REQUIREMENTS.—In conducting the Program, the Administrator 
shall— 
‘‘(1) to the extent practicable, use a competitive process to select re-
search and development projects; 
‘‘(2) to the extent practicable and appropriate, use small satellites 
and the Administration’s suborbital and ground-based platforms to 
demonstrate space technology concepts and developments; and 
‘‘(3) as appropriate, partner with other Federal agencies, univer-
sities, private industry, and foreign countries. 
‘‘(d) SMALL BUSINESS PROGRAMS.—The Administrator shall organize 
and manage the Administration’s Small Business Innovation Research Pro-
gram and Small Business Technology Transfer Program within the Pro-
gram. 
‘‘(e) NONDUPLICATION CERTIFICATION.—The Administrator shall submit 
a budget for each fiscal year, as transmitted to Congress under section 
1105(a) of title 31, that avoids duplication of projects, programs, or mis-
sions conducted by the Program with other projects, programs, or missions 
conducted by another office or directorate of the Administration. 
‘‘(f) COLLABORATION, COORDINATION, AND ALIGNMENT.—The Adminis-
trator shall— 
‘‘(1) ensure that the Administration’s projects, programs, and activi-
ties in support of technology research and development of advanced 
space technologies are fully coordinated and aligned; 
‘‘(2) ensure that the results of the projects, programs, and activities 
under paragraph (1) are shared and leveraged within the Administra-
tion; and 
‘‘(3) ensure that the organizational responsibility for research and 
development activities in support of human space exploration not initi-
ated as of March 21, 2017, is established on the basis of a sound ra-
tionale. 
‘‘(g) ANNUAL REPORT.—The Administrator shall include in the Adminis-
tration’s annual budget request for each fiscal year the rationale for assign-
ing organizational responsibility for, in the year prior to the budget fiscal 
year, each initiated project, program, and mission focused on research and 
development of advanced technologies for human space exploration. 
VerDate Sep 11 2014 
01:41 Jul 13, 2018
Jkt 079200
PO 00000
Frm 00049
Fmt 6652
Sfmt 6221
E:\BILLS\H6342.IH
H6342
lotter on DSKBCFDHB2PROD with BILLS
‘‘SUBCHAPTER V—MAXIMIZING EFFICIENCY 
‘‘PART A—ADMINISTRATION INFORMATION TECHNOLOGY AND 
CYBERSECURITY 
‘‘§ 71751. Information technology governance 
‘‘The Administrator shall, in a manner that reflects the unique nature of 
the Administration’s mission and expertise— 
‘‘(1) ensure the Administration Chief Information Officer, Mission 
Directorates, and Centers have appropriate roles in the management, 
governance, and oversight processes related to information technology 
operations and investments and information security programs for the 
protection of Administration systems; 
‘‘(2) ensure the Administration Chief Information Officer has the ap-
propriate resources and insight to oversee Administration information 
technology and information security operations and investments; 
‘‘(3) provide an information technology program management frame-
work to increase the efficiency and effectiveness of information tech-
nology investments, including relying on metrics for identifying and re-
ducing potential duplication, waste, and cost; 
‘‘(4) improve the operational linkage between the Administration 
Chief Information Officer and each Administration mission directorate, 
center, and mission support office to ensure both Administration and 
mission needs are considered in Administration-wide information tech-
nology and information security management and oversight; 
‘‘(5) review the portfolio of information technology investments and 
spending, including information technology-related investments included 
as part of activities within Administration mission directorates that 
may not be considered information technology, to ensure investments 
are recognized and reported appropriately based on guidance from the 
Office of Management and Budget; 
‘‘(6) consider appropriate revisions to the charters of information 
technology boards and councils that inform information technology in-
vestment and operation decisions; and 
‘‘(7) consider whether the Administration Chief Information Officer 
should have a seat on any boards or councils described in paragraph 
(6). 
‘‘§ 71752. Information technology strategic plan 
‘‘(a) IN GENERAL.—Subject to subsection (b), the Administrator shall de-
velop an information technology strategic plan to guide Administration in-
formation technology management and strategic objectives. 
‘‘(b) REQUIREMENTS.—In developing the strategic plan, the Adminis-
trator shall ensure that the strategic plan addresses— 
VerDate Sep 11 2014 
01:41 Jul 13, 2018
Jkt 079200
PO 00000
Frm 00050
Fmt 6652
Sfmt 6221
E:\BILLS\H6342.IH
H6342
lotter on DSKBCFDHB2PROD with BILLS
‘‘(1) the deadline under section 306(a) of title 5; and 
‘‘(2) the requirements under section 3506 of title 44. 
‘‘(c) CONTENTS.—The strategic plan shall address, in a manner that re-
flects the unique nature of the Administration’s mission and expertise— 
‘‘(1) near and long-term goals and objectives for leveraging informa-
tion technology; 
‘‘(2) a plan for how the Administration will submit to Congress a 
list of information technology projects, including completion dates and 
risk level in accordance with guidance from the Office of Management 
and Budget; 
‘‘(3) an implementation overview for an Administration-wide ap-
proach to information technology investments and operations, including 
reducing barriers to cross-center collaboration; 
‘‘(4) coordination by the Administration Chief Information Officer 
with centers and mission directorates to ensure that information tech-
nology policies are effectively and efficiently implemented across the 
Administration; 
‘‘(5) a plan to increase the efficiency and effectiveness of information 
technology investments, including a description of how unnecessarily 
duplicative, wasteful, legacy, or outdated information technology across 
the Administration will be identified and eliminated, and a schedule for 
the identification and elimination of such information technology; 
‘‘(6) a plan for improving the information security of Administration 
information and Administration information systems, including improv-
ing security control assessments and role-based security training of em-
ployees; and 
‘‘(7) submission by the Administration to Congress of information 
regarding high risk projects and cybersecurity risks. 
‘‘(d) CONGRESSIONAL OVERSIGHT.—The Administrator shall submit to 
the appropriate committees of Congress the strategic plan under subsection 
(a) and any updates to the strategic plan. 
‘‘§ 71753. Information security plan for cybersecurity 
‘‘(a) IN GENERAL.—Not later than 1 year after March 21, 2017, the Ad-
ministrator shall implement the information security plan developed under 
subsection (b) and take such further actions as the Administrator considers 
necessary to improve the information security system in accordance with 
this section. 
‘‘(b) INFORMATION SECURITY PLAN.—Subject to subsections (c) and (d), 
the Administrator shall develop an Administration-wide information security 
plan to enhance information security for Administration information and in-
formation infrastructure. 
VerDate Sep 11 2014 
01:41 Jul 13, 2018
Jkt 079200
PO 00000
Frm 00051
Fmt 6652
Sfmt 6221
E:\BILLS\H6342.IH
H6342
lotter on DSKBCFDHB2PROD with BILLS
‘‘(c) REQUIREMENTS.—In developing the plan under subsection (b), the 
Administrator shall ensure that the plan— 
‘‘(1) reflects the unique nature of the Administration’s mission and 
expertise; 
‘‘(2) is informed by policies, standards, guidelines, and directives on 
information security required for Federal agencies; 
‘‘(3) is consistent with the standards and guidelines under section 
11331 of title 40; and 
‘‘(4) meets applicable National Institute of Standards and Tech-
nology information security standards and guidelines. 
‘‘(d) CONTENTS.—The plan shall address— 
‘‘(1) an overview of the requirements of the information security sys-
tem; 
‘‘(2) an Administration-wide risk management framework for infor-
mation security; 
‘‘(3) a description of the information security system management 
controls and common controls that are necessary to ensure compliance 
with information security-related requirements; 
‘‘(4) an identification and assignment of roles, responsibilities, and 
management commitment for information security at the Administra-
tion; 
‘‘(5) coordination among organizational entities, including between 
each center, facility, mission directorate, and mission support office, 
and among Administration entities responsible for different aspects of 
information security; 
‘‘(6) the need to protect the information security of mission-critical 
systems and activities and high-impact and moderate-impact informa-
tion systems; and 
‘‘(7) a schedule of frequent reviews and updates, as necessary, of the 
plan. 
‘‘PART B—COLLABORATION AMONG MISSION DIRECTORATES 
AND OTHER MATTERS 
‘‘§ 71761. Collaboration among mission directorates 
‘‘The Administrator shall encourage an interdisciplinary approach among 
all Administration mission directorates and divisions, whenever appropriate, 
for projects or missions— 
‘‘(1) to improve coordination, and encourage collaboration and early 
planning on scope; 
‘‘(2) to determine areas of overlap or alignment; 
‘‘(3) to find ways to leverage across divisional perspectives to maxi-
mize outcomes; and 
VerDate Sep 11 2014 
01:41 Jul 13, 2018
Jkt 079200
PO 00000
Frm 00052
Fmt 6652
Sfmt 6221
E:\BILLS\H6342.IH
H6342
lotter on DSKBCFDHB2PROD with BILLS