§2684b Strengthening the Chief Information Officer of the Department of State

Summary

The Chief Information Officer (CIO) of the Department must be asked before approving or denying any large new unclassified information technology spending, including software bought or run by other parts of the Department. The goal is to achieve eight things, including using department-wide software when possible, getting better buying power, cutting duplicate security approvals, making systems work together, improving IT staff training, lowering costs from old systems, keeping security consistent, and improving user training and cybersecurity. Within 180 days after December 22, 2023, the CIO must make a strategy and a 5-year plan, working with relevant bureaus, to reach those goals. The CIO must give the strategy to the appropriate congressional committees no later than one year after December 22, 2023, and then meet with those committees at least once a year for five years about progress. Also within 180 days after December 22, 2023, the CIO must make policies to improve customer service, timely delivery of IT, and support for bureau IT officers. The CIO must run a client satisfaction survey of bureau IT officers within one year after December 22, 2023, and then every year for five years, asking about service, delivery, maintenance, training, and other topics. A summary of each survey must go to the appropriate congressional committees, the Senate Committee on Homeland Security and Governmental Affairs, and the House Committee on Oversight and Accountability within 60 days after each survey. A “significant expenditure” means any total spending over $250,000 in one fiscal year for a new unclassified software or IT capability. Nothing here changes the roles or authorities of OMB, the National Cyber Director, DHS, CISA, or the CIO’s duties under titles 40 or 44 or other laws.