Wednesday, September 16, 2026Independent tracking of the National Defense Authorization Act

The hub for the National Defense Authorization Act — status, history, and analysis

FY2027 NDAA

Title XV — Cyberspace-related Matters

TL;DR

Title XV of the FY2027 NDAA (Cyberspace-related Matters) contains 14 sections. Open any section for a TL;DR, the statutory text, and linked funding tables.

14 sections · 0 funding tables

Sec. 1501
Data recovery requirements and strategy

Chapter 19 of title 10, United States Code, is amended by inserting after section 391b the following new section:391c.Data recovery requirements(a)Mandatory…

acquisition-reform, cyber
Sec. 1502
Department of Defense AI incident and vulnerability reporting program

Chapter 131 of title 10, United States Code, is amended by inserting after section 2224a the following new section:2224b.Artificial intelligence incident and…

acquisition-reform, space-force, cyber
Sec. 1503
Review and realignment of Department of Defense cybersecurity responsibilities

Review and realignment(1)Review requiredThe Secretary of Defense shall conduct a comprehensive review of the roles, responsibilities, relationships…

cyber
Sec. 1504
Inclusion of critical infrastructure and operational technology security in combatant command planning and readiness exercises

The Secretary of Defense shall direct the commanders of the combatant commands, consistent with the authorities provided under sections 164 and 167b of title…

cyber
Sec. 1505
Pilot program for autonomous mission integration of unmanned surface vehicles

The Secretary of the Navy, in consultation with the Under Secretary of Defense for Research and Engineering, shall establish a pilot program, to be known as…

cyber
Sec. 1506
Civilian cybersecurity reserve corps pilot program

The Secretary of Defense shall carry out a pilot program to further evaluate the feasibility and advisability of creating and maintaining a civilian…

ota, acquisition-reform, cyber
Sec. 1507
Federal contractor vulnerability disclosure policy

Recommendations(1)In generalNot later than 180 days after the date of the enactment of this Act, the Director of the Office of Management and Budget, in…

acquisition-reform, cyber
Sec. 1521
Software planning, programming, budgeting, and execution reform

Chapter 131 of title 10, United States Code, is amended by inserting after section 2220 the following new section:2221.Availability of appropriations accounts…

right-to-repair, cyber
Sec. 1522
Requirement for guidance and prohibition on use of artificial intelligence of certain artificial intelligence companies

Section 1532 of the National Defense Authorization Act for Fiscal Year 2026 (10 U.S.C. 2224 note) is amended in subsection (a)—(1)by amending paragraph (2) to…

cyber
Sec. 1523
Artificial Intelligence Model Rapid Deployment Framework

The Secretary of Defense, acting through the Chief Digital and Artificial Intelligence Officer of the Department of Defense, shall establish a framework for…

acquisition-reform, cyber
Sec. 1524
Update of policy on autonomous and artificial intelligence-enabled systems

Not later than 1 year after the date of the enactment of this Act, the Secretary of Defense shall update policies and guidance of the Department of Defense…

acquisition-reform, right-to-repair, cyber
Sec. 1525
Expansion of AI-enabled maintenance intelligence platforms across Air Education and Training Command

Not later than 90 days after the date of the enactment of this Act, and subject to the availability of appropriations, the Secretary of the Air Force shall…

acquisition-reform, right-to-repair, cyber
Sec. 1541
Roadmap for modernization of Top Secret and Special Access Program network architectures

Not later than 180 days after the date of the enactment of this Act, the Secretary of Defense shall develop and submit to the congressional defense…

acquisition-reform, cyber
Sec. 1542
Semiannual reports on Cyber Operational Readiness Assessment program

Not later than 180 days after the date of the enactment of this Act, and not less frequently than once every 180 days thereafter, the Secretary of Defense…

foci, acquisition-reform, cyber

← All Titles