Page:United States Statutes at Large Volume 114 Part 3.djvu/253

 PUBLIC LAW 106-398—APPENDIX 114 STAT. 1654A-211 (A) include definitions of the terms "mission critical information system" and "mission essential information system"; (B) prohibit the award of any contract for the acquisition of a mission critical or mission essential information technology system until— (i) the system has been registered with the Chief Information Officer of the Department of Defense; (ii) the Chief Information Officer has received all information on the system that is required under the directive to be provided to that official; and (iii) the Chief Information Officer has determined that there is in place for the system an appropriate information assurance strategy; and (C) require that, in the case of each system registered pursuant to subparagraph (B)(i), the information required under subparagraph (B)(ii) to be submitted as part of the registration shall be updated on not less than a quarterly basis. (c) MILESTONE APPROVAL FOR MAJOR AUTOMATED INFORMATION SYSTEMS. —The revised directive required by subsection (b) shall prohibit Milestone I approval, Milestone II approval, or Milestone III approval (or the equivalent) of a major automated information system within the Department of Defense until the Chief Information Officer has determined that— (1) the system is being developed in accordance with the requirements of division E of the Clinger-Cohen Act of 1996 (40 U.S.C. 1401 et seq.); (2) appropriate actions have been taken with respect to the system in the areas of business process reengineering, analysis of alternatives, economic analysis, and performance measures; and (3) the system has been registered as described in subsection (b)(2)(B). (d) NOTICE OF REDESIGNATION OF SYSTEMS.— (1) Whenever during fiscal year 2001, 2002, or 2003 the Chief Information Officer designates a system previously designated as a major automated information system to be in a designation category other than a major automated information system, the Chief Information Officer shall notify the congressional defense committees of that designation. The notice shall be provided not later than 30 days after the date of that designation. Any such notice shall include the rationale for the decision to make the designation and a description of the program management oversight that will be implemented for the system so designated. (2) Not later than 60 days after the date of the enactment of this Act, the Chief Information Officer shall submit to the congressional defense committees a report specifying each information system of the Department of Defense previously designated as a major automated information system that is currently designated in a designation category other than a major automated information system including designation as a "special interest major technology initiative". The report shall include for each such system the information specified in the third sentence of paragraph (1). (e) ANNUAL IMPLEMENTATION REPORT.— (1) The Secretary of Defense shall submit to the congressional defense committees, not later than April 1 of each of fiscal years 2001, 2002, and 2003,

�