§392 Executive agents for cyber test and training ranges

Summary

The Secretary of Defense must pick two senior officials, with advice from the Principal Cyber Advisor: one to run cyber and IT test ranges and one to run cyber and IT training ranges. The Secretary must give them clear duties and powers. They must make a plan every two years for test and training resources. That plan must list all testing and training ranges and facilities (government and non‑government), set priorities and standards, look for ways to share and save money, add or merge ranges as needed, raise the skills of the test workforce, and work with other agencies and industry. The plan must also define how ranges connect and work together, support secure integrated testing and science and technology work, and allow linking with other ranges. The executive agents must certify all DoD cyber range investments. They and the Chief Information Officer must choose a machine‑readable, open‑source language for sharing cyber event and threat data for the Joint Information Environment. The Secretary must make sure all parts of the Department give these executive agents the support they need and must act under Directive 5101.1. Definitions: designated cyber and information technology range — includes the National Cyber Range, the Joint Information Operations Range, the Defense Information Assurance Range, and the C4 Assessments Division of J6 of the Joint Staff. Directive 5101.1 — means Department of Defense Directive 5101.1, or any successor directive on executive agent responsibilities. executive agent — means the DoD Executive Agent as defined in Directive 5101.1.