NOTIFICATION OF FOREIGN THREATS TO INFORMATION TECHNOLOGY SYSTEMS IMPACTING NATIONAL SECURITY.

SEC. 1078. [10 U.S.C. 2224 note] NOTIFICATION OF FOREIGN THREATS TO INFORMATION TECHNOLOGY SYSTEMS IMPACTING NATIONAL SECURITY. (a) Notification Required.— (1) In general.—Not later than 30 days after the Secretary of Defense determines, through the use of open source information or the use of existing authorities (including section 806 of the National Defense Authorization Act for Fiscal Year 2011 (Public Law 111-383; 124 Stat. 4260; 10 U.S.C. 2304 note)), that there is evidence of a national security threat described in paragraph (2), the Secretary shall submit to the congressional defense committees a notification of such threat. (2) National security threat.—A national security threat described in this paragraph is a threat to an information technology or telecommunications component or network by an agent of a foreign power in which the compromise of such technology, component, or network poses a significant risk to the programs and operations of the Department of Defense, as determined by the Secretary of Defense. (3) Form.—A notification under this subsection shall be submitted in classified form. (b) Action Plan Required.—In the event that a notification is submitted pursuant to subsection (a), the Secretary shall work with the head of any department or agency affected by the national security threat to develop a plan of action for responding to the concerns leading to the notification. (c) Agent of a Foreign Power.—In this section, the term “agent of a foreign power” has the meaning given such term in section 101(b) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801(b)).