10 U.S.C. § 428 — Defense industrial security

(a) Responsibility for Defense Industrial Security The Secretary of Defense is responsible for protecting classified information that is disclosed to Department of Defense contractors. (b) Consistency With Executive Orders and Directives The Secretary must carry out that responsibility in a way that matches Executive Order 12829, or whatever order later replaces it. The Secretary must also follow the policies of the National Industrial Security Program, or any program that replaces it. (c) Performance of Industrial Security Functions for Other Agencies The Secretary may also perform industrial security work for other federal agencies. This can happen if another agency asks for help, or if the Department of Defense is named the lead agency for the National Industrial Security Program. (d) Regulations and Policy Guidance The Secretary must write, and update over time, whatever regulations and policy guidance are needed to protect classified information given to Department of Defense contractors. (e) Dedication of Resources The Secretary must make sure there are enough resources to staff, train, and support the personnel needed to fully protect that classified information.