10 U.S.C. § 392 — Executive agents for cyber test and training ranges

(a) Executive Agent: Working with the Principal Cyber Advisor, the Secretary of Defense must name one senior Department official as executive agent for cyber and information technology test ranges, and another senior official as executive agent for cyber and information technology training ranges. (b) Roles, Responsibilities, and Authorities: (1) Establishment: The Secretary must set the roles, responsibilities, and authorities of these two executive agents, which must include developing a biennial integrated plan for cyber and information technology test and training resources. (2) That biennial plan must cover: (A) building and keeping a complete list of cyber and IT ranges, test facilities, test beds, and other ways of testing, training, and developing software, personnel, and tools for the Department's mission — including resources from both government and non-government sources; (B) organizing and managing the designated cyber and IT test ranges, which includes setting priorities for them, enforcing standards set by U.S. Cyber Command and the training and research/development/testing communities, offering guidance on ways to integrate the ranges' test, training, and development functions, finding ways to cut costs and improve coordination, adding or consolidating ranges over time as strategy and resources evolve, finding ways to keep improving the cyber test workforce's skills through training and personnel policy, and coordinating with other agencies and industry partners; (C) defining a cyber range architecture that can add or consolidate ranges as needs evolve, coordinates with outside partners, allows secure closed-loop testing of cyber and electronic-warfare capabilities, supports science, technology, experimentation, testing, and training, and connects with other existing cyber and kinetic (physical) ranges; (D) certifying all Department of Defense cyber range investments; and (E) doing any other assessments the Secretary considers appropriate. (3) The two executive agents, together with the Department's Chief Information Officer, must jointly choose one open-source, machine-readable standard language for representing and sharing cyber event and threat data, for use across the Joint Information Environment and its test and training ranges. (c) Support Within Department of Defense: The Secretary must make sure the military departments, Defense Agencies, and other Department components give the executive agents the support and resources they need to do their jobs. (d) Compliance With Existing Directive: The Secretary must carry out this section consistent with Department of Defense Directive 5101.1. (e) Definitions: (1) "Designated cyber and information technology range" includes the National Cyber Range, the Joint Information Operations Range, the Defense Information Assurance Range, and the C4 Assessments Division of the Joint Staff's J6 office. (2) "Directive 5101.1" means that Defense Department directive, or whatever directive replaces it regarding executive-agent duties. (3) "Executive agent" has the same meaning as "DoD Executive Agent" in Directive 5101.1.