Pub. L. 107-347, tit. III, sec. 305
TECHNICAL AND CONFORMING AMENDMENTS.
SEC. 305. TECHNICAL AND CONFORMING AMENDMENTS. (a) Computer Security Act.—Section 11332 of title 40, United States Code, and the item relating to that section in the table of sections for chapter 113 of such title, are repealed. (b) Floyd D. Spence National Defense Authorization Act for Fiscal Year 2001.—The Floyd D. Spence National Defense Authorization Act for Fiscal Year 2001 (Public Law 106–398) is amended by striking section 1062 (44 U.S.C. 3531 note). (c) Paperwork Reduction Act.—(1) (A) by adding “and” at the end of paragraph (1); (B) in paragraph (2)— (i) by striking “sections 11331 and 11332(b) and (c) of title 40” and inserting “section 11331 of title 40 and subchapter II of this chapter”; and (ii) by striking –; and” and inserting a period; and (C) by striking paragraph (3).116 STAT. 2961 (2) Section 3505 of such title is amended by adding at the end— “(c) Inventory of Major Information Systems.—(1) The head of each agency shall develop and maintain an inventory of major information systems (including major national security systems) operated by or under the control of such agency. “(2) The identification of information systems in an inventory under this subsection shall include an identification of the interfaces between each such system and all other systems or networks, including those not operated by or under the control of the agency. “(3) Such inventory shall be— “(A) updated at least annually; “(B) made available to the Comptroller General; and “(C) used to support information resources management, including— “(i) preparation and maintenance of the inventory of information resources under section 3506(b)(4); “(ii) information technology planning, budgeting, acquisition, and management under section 3506(h), subtitle III of title 40, and related laws and guidance; “(iii) monitoring, testing, and evaluation of information security controls under subchapter II; “(iv) preparation of the index of major information systems required under section 552(g) of title 5, United States Code; and “(v) preparation of information system inventories required for records management under chapters 21, 29, 31, and 33. “(4) The Director shall issue guidance for and oversee the implementation of the requirements of this subsection.”. (3) Section 3506(g) of such title is amended— (A) by adding “and” at the end of paragraph (1); (B) in paragraph (2)— (i) by striking “section 11332 of title 40” and inserting “subchapter II of this chapter”; and (ii) by striking “; and” and inserting a period; and (C) by striking paragraph (3).