REPORT ON FBI INFORMATION MANAGEMENT AND TECHNOLOGY.

SEC. 11025. REPORT ON FBI INFORMATION MANAGEMENT AND TECHNOLOGY. (a) In General.—Not later than 9 months after the date of enactment of this Act, the Director of the Federal Bureau of Investigation, with appropriate comments from other components of the Department of Justice, shall submit to Congress a report on the information management and technology programs of the Federal 116 STAT. 1832Bureau of Investigation including recommendations for any legislation that may be necessary to enhance the effectiveness of those programs. (b) Contents of Report.—The report submitted under subsection (a) shall provide— (1) an analysis and evaluation of whether authority for waiver of any provision of procurement law (including any regulation implementing such a law) is necessary to expeditiously and cost-effectively acquire information technology to meet the unique needs of the Federal Bureau of Investigation to improve its investigative operations in order to respond better to national law enforcement, intelligence, and counterintelligence requirements; (2) the results of the studies and audits conducted by the Strategic Management Council and the Inspector General of the Department of Justice to evaluate the information management and technology programs of the Federal Bureau of Investigation, including systems, policies, procedures, practices, and operations; and (3) a plan for improving the information management and technology programs of the Federal Bureau of Investigation. (c) Results.—The results provided under subsection (b)(2) shall include an evaluation of— (1) information technology procedures and practices regarding procurement, training, and systems maintenance; (2) record keeping policies, procedures, and practices of the Federal Bureau of Investigation, focusing particularly on how information is inputted, stored, managed, utilized, and shared within the Federal Bureau of Investigation; (3) how information in a given database is related or compared to, or integrated with, information in other technology databases within the Federal Bureau of Investigation; (4) the effectiveness of the existing information technology infrastructure of the Federal Bureau of Investigation in supporting and accomplishing the overall mission of the Federal Bureau of Investigation; (5) the management of information technology projects of the Federal Bureau of Investigation, focusing on how the Federal Bureau of Investigation— (A) selects its information technology projects; (B) ensures that projects under development deliver benefits; and (C) ensures that completed projects deliver the expected results; and (6) the security and access control techniques for classified and sensitive but unclassified information systems in the Federal Bureau of Investigation. (d) Contents of Plan.—The plan provided under subsection (b)(3) shall include consideration of, among other things— (1) to what extent appropriate key technology management positions in the Federal Bureau of Investigation should be filled by personnel with experience in the commercial sector; (2) how access to the most sensitive information can be audited in such a manner that suspicious activity is subject to near contemporaneous security review; 116 STAT. 1833 (3) how critical information systems can employ a public key infrastructure to validate both users and recipients of messages or records; (4) how security features can be tested to meet national information systems security standards; (5) which employees in the Federal Bureau of Investigation should receive instruction in records and information management policies and procedures relevant to their positions and how frequently they should receive that instruction; (6) whether and to what extent a reserve should be established for research and development to guide strategic information management and technology investment decisions; (7) whether administrative requirements for software purchases under $2,000,000 are necessary and could be eliminated; (8) whether the Federal Bureau of Investigation should contract with an expert technology partner to provide technical support for the information technology procurement for the Federal Bureau of Investigation; (9) whether procedures should be implemented to permit procurement of products and services through contracts of other agencies, as necessary; and (10) whether a systems integration and test center should be established, with the participation of field personnel, to test each series of information systems upgrades or application changes before their operational deployment to confirm that they meet proper requirements.