Pub. L. 105-262, tit. VIII, sec. 8116

Sec. 8116. (a) Ensuring Year 2000 Compliance of Information Technology and National Security Systems.— None of the funds appropriated or otherwise made available by this Act may (except as provided in subsection (b)) be obligated or expended on the development or modernization of any information technology or national security system of the Department of Defense in use by the Department of Defense (whether or not the system is a mission critical system) if the date-related data processing capability of that system does not meet certification level 1a, 1b, or 2 (as prescribed in the April 1997 publication of the Department of Defense entitled “Year 2000 Management Plan”). (b) Exception for Certain Information Technology and National Security Systems— The limitation in subsection (a) does not apply to an obligation or expenditure for an information technology or national security system that is reported to the Office of the Secretary of Defense by October 1, 1998, in accordance with the preparation instructions for the May 1998 Department of Defense quarterly report on the status of year 2000 compliance, if— (1) the obligation or expenditure is directly related to ensuring that the reported system achieves year 2000 compliance; (2) the system is being developed and fielded to replace, before January 1, 2000, a noncompliant system or a system to be terminated in accordance with the May 1998 Department of Defense quarterly report on the status of year 2000 compliance; or (3) the obligation or expenditure is required for a particular change that is specifically required by law or that is specifically directed by the Secretary of Defense. (c) Unallocated Reductions of Funds Not To Apply to Mission Critical Systems— Funds appropriated or otherwise made available by this Act for mission critical systems are not subject to any unallocated reduction of funds made by or otherwise applicable to funds appropriated or otherwise made available by this Act. (d) Current Services Operations Not Affected— Subsection (a) does not prohibit the obligation or expenditure of funds for current services operations of information technology and national security systems. (e) Waiver Authority— The Secretary of Defense may waive subsection (a) on a case-by-case basis with respect to an information technology or national security system if the Secretary provides the congressional defense committees with written notice of the waiver, including the reasons for the waiver and a timeline for the testing and certification of the system as year 2000 compliant. (f) Required Report— (1) Not later than December 1, 1998, the Secretary of Defense shall submit to the congressional defense committees a report describing— (A) an executable strategy to be used throughout the Department of Defense to test information technology and national security systems for year 2000 compliance (to include functional capability tests and military exercises); (B) the plans of the Department of Defense for ensuring that adequate resources (such as testing facilities, tools, and112 STAT. 2329 personnel) are available to ensure that all mission critical systems achieve year 2000 compliance; and (C) the criteria and process to be used to certify a system as year 2000 compliant. (2) The report shall also include— (A) an updated list of all mission critical systems; and (B) guidelines for developing contingency plans for the functioning of each information technology or national security system in the event of a year 2000 problem in any such system. (g) Capability Contingency Plans.— Not later than December 30, 1998, the Secretary of Defense shall have in place contingency plans to ensure continuity of operations for every critical mission or function of the Department of Defense that is dependent on an information technology or national security system. (h) Inspector General Evaluation.— The Inspector General of the Department of Defense shall selectively audit information technology and national security systems certified as year 2000 compliant to evaluate the ability of systems to successfully operate during the actual year 2000, including the ability of the systems to access and transmit information from point of origin to point of termination. (i) Definition.— For purposes of this section: (1) The term “information technology” has the meaning given that term in section 5002 of the Clinger-Cohen Act of 1996 (40 U.S.C. 1401). (2) The term “national security system” has the meaning given that term in section 5142 of such Act (40 U.S.C. 1452). (3) The term “development or modernization” has the meaning given that term in paragraph E of section 180203 of the Department of Defense Financial Management Regulation (DOD 7000.14–R), but does not include any matter covered by subparagraph 3 of that paragraph. (4) The term “current services” has the meaning given that term in paragraph C of section 180203 of the Department of Defense Financial Management Regulation (DOD 7000.14–R). (5) The term “mission critical system” means an information technology or national security system that is designated as mission critical in the May 1998 Department of Defense quarterly report on the status of year 2000 compliance.