Pub. L. 107-296, tit. X, sec. 1005

TECHNICAL AND CONFORMING AMENDMENTS.

EnactedYear: 2002Length: 432 wordsOfficial source
SEC. 1005. TECHNICAL AND CONFORMING AMENDMENTS. (a) Federal Computer System Security Training and Plan.— (1) Repeal.—Section 11332 of title 40, United States Code, is repealed. (2) Clerical amendment.—The table of sections at the beginning of chapter 113 of title 40, United States Code, as amended by striking the item relating to section 11332. (b) Floyd D. Spence National Defense Authorization Act for Fiscal Year 2001.—The Floyd D. Spence National Defense Authorization Act for Fiscal Year 2001 (Public Law 106-398) is amended by striking subtitle G of title X (44 U.S.C. 3531 note). (c) Paperwork Reduction Act.—(1) Section 3504(g) of title 44, United States Code, is amended— (A) by adding “and” at the end of paragraph (1); (B) in paragraph (2)— (i) by striking “sections 11331 and 11332(b) and (c) of title 40” and inserting “section 11331 of title 40 and subchapter II of this title”; and (ii) by striking the semicolon and inserting a period; and (C) by striking paragraph (3). (2) Section 3505 of such title is amended by adding at the end the following: “(c) Inventory of Information Systems.—(1) The head of each agency shall develop and maintain an inventory of the information systems (including national security systems) operated by or under the control of such agency; “(2) The identification of information systems in an inventory under this subsection shall include an identification of the interfaces between each such system and all other systems or networks, including those not operated by or under the control of the agency; “(3) Such inventory shall be— “(A) updated at least annually; “(B) made available to the Comptroller General; and “(C) used to support information resources management, including— 116 STAT. 2273 “(i) preparation and maintenance of the inventory of information resources under section 3506(b)(4); “(ii) information technology planning, budgeting, acquisition, and management under section 3506(h), subtitle III of title 40, and related laws and guidance; “(iii) monitoring, testing, and evaluation of information security controls under subchapter II; “(iv) preparation of the index of major information systems required under section 552(g) of title 5, United States Code; and “(v) preparation of information system inventories required for records management under chapters 21, 29, 31, and 33. “(4) The Director shall issue guidance for and oversee the implementation of the requirements of this subsection.”. (3) Section 3506(g) of such title is amended— (A) by adding “and” at the end of paragraph (1); (B) in paragraph (2)— (i) by striking “section 11332 of title 40” and inserting “subchapter II of this chapter”; and (ii) by striking “; and” and inserting a period; and (C) by striking paragraph (3).
Pub. L. 107-296, tit. X, sec. 1005: TECHNICAL AND CONFORMING AMENDMENTS. | Justis AI