INTEGRATION OF DEPARTMENT OF DEFENSE USER ACTIVITY MONITORING AND CYBERSECURITY.

SEC. 1735. [10 U.S.C. 2224 note] INTEGRATION OF DEPARTMENT OF DEFENSE USER ACTIVITY MONITORING AND CYBERSECURITY. (a) Integration of Plans, Capabilities, and Systems.—The Secretary of Defense shall integrate the plans, capabilities, and systems for user activity monitoring, and the plans, capabilities, and systems for endpoint cybersecurity and the collection of metadata on network activity for cybersecurity to enable mutual support and information sharing. (b) Requirements.—In carrying out subsection (a), the Secretary shall— (1) consider using the Big Data Platform instances that host cybersecurity metadata for storage and analysis of all user activity monitoring data collected across the Department of Defense Information Network at all security classification levels; (2) develop policies and procedures governing access to user activity monitoring data or data derived from user activity monitoring by cybersecurity operators; and (3) develop processes and capabilities for using metadata on host and network activity for user activity monitoring in support of the insider threat mission. (c) Congressional Briefing.—Not later than October 1, 2021, the Secretary shall provide a briefing to the congressional defense committees on actions taken to carry out this section.