S.Amdt. 670

SA 670. Mr. WARNER submitted an amendment intended to be proposed by
him to the bill S. 1790, to authorize appropriations for fiscal year
2020 for military activities of the Department of Defense, for military
construction, and for defense activities of the Department of Energy,
to prescribe military personnel strengths for such fiscal year, and for
other purposes; which was ordered to lie on the table; as follows:

At the end of subtitle C of title XVI, add the following:

SEC. ___. ASSESSMENT OF VALUE OF SPEED IN CYBER THREAT
DETECTION, ANALYSIS, AND REMEDIATION.

(a) Assessment Required.--The Chief Information Officer of
the Department of Defense, in coordination with the Director
of the Defense Information Systems Agency, shall assess the
following:
(1) The range of times required by adversaries to gain
access through a cyber attack on a Department of Defense
network, conduct reconnaissance on the network, acquired
privileged credentials for operating on the network, move
laterally in the network, and accomplish the goal of the
intrusion.
(2) Trends over time in the speed with which adversaries
accomplish the steps listed in paragraph (1).
(3) The range of times required by network defenders to
detect indications of the intrusion, analyze and characterize
the intrusion, and to remediate the intrusion.
(4) The value of speed in detection, analysis, and
remediation of intrusions to effectively contain and defeat
adversaries from achieving their objectives.
(5) The advisability of adopting response times as a metric
for assessing the performance of the capabilities of network
defenses and cybersecurity programs and operators and
institutionalizing relevant data collection and forensic
processes across the Department.
(b) Briefing.--Not later than 180 days after the date of
the enactment of this Act, the Chief Information Officer
shall brief the congressional defense committees on the
results of the assessment conducted under subsection (a) and
any actions that the Chief Information Officer intends to
take with respect to the outcome of the assessment.
______