S.Amdt. 2376

SA 2376. Mr. PERDUE submitted an amendment intended to be proposed by
him to the bill H.R. 5515, to authorize appropriations for fiscal year
2019 for military activities of the Department of Defense, for military
construction, and for defense activities of the Department of Energy,
to prescribe military personnel strengths for such fiscal year, and for
other purposes; which was ordered to lie on the table; as follows:

At the appropriate place in title XVI, insert the
following:

SEC. __. UNITED STATES CYBER STRATEGY.

(a) Strategy Required.--
(1) In general.--Not later than January 1, 2019, the
President shall submit to the appropriate congressional
committees a comprehensive, interagency national strategy for
cyberspace.
(2) Elements.--The comprehensive, interagency national
strategy required by paragraph (1) shall include the
following elements:
(A) A government-wide and accepted glossary of definitions
and terms for cyberspace and cyber-related activities.
(B) Criteria for the types of malicious cyber activities
that the United States Government will seek to deter and will
respond to.
(C) Processes, mechanisms, and authorities for attribution
of malicious cyber activities.
(D) Menu of options for deterrence denial and response to
malicious cyber activities using the range of national power
to conduct.
(E) Tasks, roles, and responsibilities of the following
entities in regards to cyberspace:
(i) Department of Homeland Security for domestic cyber
security concerns and defense of critical infrastructure.
(ii) Department of Defense for military cyber activities
and offensive cyber operations.
(iii) Department of State for cyber diplomacy and promotion
of United States values on fair use of cyberspace and related
activities.
(iv) Any other agency deemed appropriate by the President
to be a primary stakeholder for a cyber activity or related
policy.
(F) Specific tasks, roles, and responsibilities of the
above entities in regards to specific cyber event scenarios
that are determined to impact United States national
security, which should include--
(i) a cyber attack that damages or degrades the use of
critical infrastructure within United States territory;
(ii) a cyber attack that influences economic systems to any
degree determined detrimental to national security;
(iii) a cyber attack targeting United States military
abroad that degrades their capability to respond to crises or
to conduct military operations; and
(iv) cyber espionage that steals a significant amount of
data deemed to be a threat to United States national
security.
(G) Use of, coordination with, or liaison to international
partners, nongovernmental organizations, or commercial
entities that support United States policy goals in
cyberspace.
(H) Synchronization processes for the use of interagency
tools for cyberspace operations, including the role of the
National Security Council in coordinating interagency tools.
(I) The establishment of a permanent interagency commission
to continually implement, study, and revise the cyber
strategy for the whole of Government to meet emerging threats
and trends.
(J) The appointment of an individual from within the body
established in subclause (I) as the leader for interagency
cyber strategy and execution of said strategy.

[[Page S3304]]

(K) The development of a semiannual or biennial war game
involving all Federal agencies to determine best practices
for domestic and global responses to cyber events.
(L) Cyber operations plans for possible cyber events to
supplement current operations plans of the unified combatant
command.
(M) Mechanisms for continuous information sharing among
Government agencies relating to the range of cyber
operations.
(N) Such other matters as the President considers
appropriate.
(b) Assessment.--Not later than one year after the date of
the submission of the strategy required by subsection (a),
and annually after that, the President shall submit to the
appropriate committees of Congress an assessment of the
strategy, including--
(1) the status of implementation of the strategy;
(2) notes and minutes from any meeting of the permanent
interagency commission;
(3) brief and results of semiannual or biennial war games
prescribed in subsection (a)(2)(J); and
(4) any changes to the strategy since such submission.
(c) Form.--The strategy and assessment required by this
section shall each be submitted in classified form, but may
include a classified annex.
(d) Appropriate Congressional Committees.--The term
``appropriate congressional committees'' means--
(1) the congressional defense committees;
(2) the Committee on Foreign Relations, the Committee on
Homeland Security and Governmental Affairs, and the Committee
on the Judiciary of the Senate; and
(3) the Committee on Foreign Affairs, the Committee on
Homeland Security, and the Committee on the Judiciary of the
House of Representatives.
______