ACCREDITATION STANDARDS AND PROCESSES FOR CYBERSECURITY AND INFORMATION TECHNOLOGY PRODUCTS AND SERVICES.

SEC. 1654. ACCREDITATION STANDARDS AND PROCESSES FOR CYBERSECURITY AND INFORMATION TECHNOLOGY PRODUCTS AND SERVICES. (a) Assessment.—Consistent with the responsibilities and duties outlined in section 142 of title 10, United States Code, the Chief Information Officer of the Department of Defense shall conduct an enterprise assessment of accreditation standards and processes for cybersecurity and information technology products and services. (b) Report.— (1) In general.—Not later than April 1, 2020, the Chief Information Officer shall submit to the congressional defense committees a report on the assessment conducted under subsection (a). (2) Contents.—The report submitted under paragraph (1) shall include the following: (A) The findings of the Chief Information Officer with respect to the assessment conducted under subsection (a). (B) A description of the modifications proposed or implemented to accreditation standards and processes arising out of the assessment. (C) A description of how the Department will increasingly automate accreditation processes, pursue agile development, incorporate machine learning, and foster reciprocity across authorizing officials.