6 U.S.C. § 1522 — Advanced internal defenses

(a) Advanced network-security tools. (1) The Secretary^* must include advanced network-security tools in the Department’s continuous efforts to diagnose and reduce cybersecurity risks. The tools must improve visibility into network activity, including through commercial and free or open-source tools, and detect and reduce intrusions and unusual activity. (2) The Director^* must develop, and the Secretary must implement, a plan ensuring each agency^* uses such tools. (b) Priorities. After consulting appropriate agencies, the Director and Secretary must (1) review and update Government-wide policies and programs so network-security monitoring tools are appropriately prioritized and used in agency networks, and (2) brief the appropriate congressional committees^* about that priority and use. (c) Metrics. Working with the Director, the Secretary must update the security metrics under 44 U.S.C. § 3554 to include intrusion and incident detection and response times. (d) Transparency. Consulting the Secretary, the Director must increase public transparency about agency cybersecurity, including by increasing metrics on Federal performance websites and, as practicable, showing metrics for department^* components, small agencies, and micro-agencies. (e) Omitted. (f) Exception. This section does not apply to the Department of Defense, a national security system^*, or an intelligence-community element.