[Congressional Record Volume 164, Number 94 (Thursday, June 7, 2018)]
[Senate]
[Pages S3303-S3304]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]

  SA 2376. Mr. PERDUE submitted an amendment intended to be proposed by 
him to the bill H.R. 5515, to authorize appropriations for fiscal year 
2019 for military activities of the Department of Defense, for military 
construction, and for defense activities of the Department of Energy, 
to prescribe military personnel strengths for such fiscal year, and for 
other purposes; which was ordered to lie on the table; as follows:

       At the appropriate place in title XVI, insert the 
     following:

     SEC. __. UNITED STATES CYBER STRATEGY.

       (a) Strategy Required.--
       (1) In general.--Not later than January 1, 2019, the 
     President shall submit to the appropriate congressional 
     committees a comprehensive, interagency national strategy for 
     cyberspace.
       (2) Elements.--The comprehensive, interagency national 
     strategy required by paragraph (1) shall include the 
     following elements:
       (A) A government-wide and accepted glossary of definitions 
     and terms for cyberspace and cyber-related activities.
       (B) Criteria for the types of malicious cyber activities 
     that the United States Government will seek to deter and will 
     respond to.
       (C) Processes, mechanisms, and authorities for attribution 
     of malicious cyber activities.
       (D) Menu of options for deterrence denial and response to 
     malicious cyber activities using the range of national power 
     to conduct.
       (E) Tasks, roles, and responsibilities of the following 
     entities in regards to cyberspace:
       (i) Department of Homeland Security for domestic cyber 
     security concerns and defense of critical infrastructure.
       (ii) Department of Defense for military cyber activities 
     and offensive cyber operations.
       (iii) Department of State for cyber diplomacy and promotion 
     of United States values on fair use of cyberspace and related 
     activities.
       (iv) Any other agency deemed appropriate by the President 
     to be a primary stakeholder for a cyber activity or related 
     policy.
       (F) Specific tasks, roles, and responsibilities of the 
     above entities in regards to specific cyber event scenarios 
     that are determined to impact United States national 
     security, which should include--
       (i) a cyber attack that damages or degrades the use of 
     critical infrastructure within United States territory;
       (ii) a cyber attack that influences economic systems to any 
     degree determined detrimental to national security;
       (iii) a cyber attack targeting United States military 
     abroad that degrades their capability to respond to crises or 
     to conduct military operations; and
       (iv) cyber espionage that steals a significant amount of 
     data deemed to be a threat to United States national 
     security.
       (G) Use of, coordination with, or liaison to international 
     partners, nongovernmental organizations, or commercial 
     entities that support United States policy goals in 
     cyberspace.
       (H) Synchronization processes for the use of interagency 
     tools for cyberspace operations, including the role of the 
     National Security Council in coordinating interagency tools.
       (I) The establishment of a permanent interagency commission 
     to continually implement, study, and revise the cyber 
     strategy for the whole of Government to meet emerging threats 
     and trends.
       (J) The appointment of an individual from within the body 
     established in subclause (I) as the leader for interagency 
     cyber strategy and execution of said strategy.

[[Page S3304]]

       (K) The development of a semiannual or biennial war game 
     involving all Federal agencies to determine best practices 
     for domestic and global responses to cyber events.
       (L) Cyber operations plans for possible cyber events to 
     supplement current operations plans of the unified combatant 
     command.
       (M) Mechanisms for continuous information sharing among 
     Government agencies relating to the range of cyber 
     operations.
       (N) Such other matters as the President considers 
     appropriate.
       (b) Assessment.--Not later than one year after the date of 
     the submission of the strategy required by subsection (a), 
     and annually after that, the President shall submit to the 
     appropriate committees of Congress an assessment of the 
     strategy, including--
       (1) the status of implementation of the strategy;
       (2) notes and minutes from any meeting of the permanent 
     interagency commission;
       (3) brief and results of semiannual or biennial war games 
     prescribed in subsection (a)(2)(J); and
       (4) any changes to the strategy since such submission.
       (c) Form.--The strategy and assessment required by this 
     section shall each be submitted in classified form, but may 
     include a classified annex.
       (d) Appropriate Congressional Committees.--The term 
     ``appropriate congressional committees'' means--
       (1) the congressional defense committees;
       (2) the Committee on Foreign Relations, the Committee on 
     Homeland Security and Governmental Affairs, and the Committee 
     on the Judiciary of the Senate; and
       (3) the Committee on Foreign Affairs, the Committee on 
     Homeland Security, and the Committee on the Judiciary of the 
     House of Representatives.
                                 ______