Pub. L. 104-201, div. A, tit. X, subtit. F, sec. 1062
INFORMATION SYSTEMS SECURITY PROGRAM.
SEC. 1062. INFORMATION SYSTEMS SECURITY PROGRAM. (a) Allocation.— Of the amounts appropriated for the Department of Defense for the Defense Information Infrastructure for each of fiscal years 1999 through 2002, the Secretary of Defense shall allocate to the information systems security program (program element 0303140K) amounts as follows: (1) For fiscal year 1999, 2.5 percent. (2) For fiscal year 2000, 3.0 percent. (3) For fiscal year 2001, 3.5 percent. (4) For fiscal year 2002, 4.0 percent. (b) Relationship to Other Amounts.— Amounts allocated under subsection (a) are in addition to amounts appropriated to the National Security Agency and the Defense Advanced Research Projects Agency for development of information security systems, acquisition of information security systems, and operation of information security systems. (c) Report.— Not later than November 15, 1997, the Secretary of Defense shall submit to the congressional defense committees and the congressional intelligence committees a report on information security activities of the Department of Defense. The report shall describe— (1) the objectives of the Secretary with respect to information security and the strategy of the Secretary (including the strategy with respect to funding) during fiscal years 1999 through 2002 to achieve those objectives; (2) how the Secretary intends to manage and allocate the funds required by subsection (a) to be allocated to the information systems security program; and (3) if the Secretary determines that a funding plan for the information systems security program for fiscal years 1999 through 2002 other than that specified in subsection (a) is appropriate, the alternative funding plan proposed by the Secretary. (d) Defense Information Infrastructure.— For purposes of this section, the Defense Information Infrastructure is the web of communications networks, computers, software, databases, applications, data security services, and other capabilities that meets the information processing and transport needs of Department of Defense users.