,i #aacth ,,congress #b;d ,session ,h4 ,r4 #dejj ,,in ,,the ,,house ,,of ,,representatives ,april #bh1 #bjad ,mr4 ,kilmer 7for himself1 ,ms4 ,tsongas1 and ,mr4 ,connolly7 introduced the following bill2 which was referred to the ,committee on ,armed ,services ,a ,,bill ,to improve the management of cyber and information technology ranges and facilities of the ,department of ,defense1 and for other purposes4 #a4 ,cyber and information technology ranges 7a7 ,management of cyber ranges and facilities ,subsection 7b7 of section #icb of the ,national ,defense ,authorization ,act for ,fiscal ,year #bjad 7,public ,law #aac-ff7 is amended-- 7#a7 by adding at the end the following new paragraphs3 7#c7 ,list of cyber and information technology ranges and facilities 7,a7 ,in general ,the ,principal ,cyber ,advisor designated under subsection 7c77#a7 shall establish a comprehensive list of the cyber and information technology ranges and facilities of the ,department of ,defense4 7,b7 ,terminology ,in establishing the list under subparagraph 7,a71 the ,principal ,cyber ,advisor shall denote whether each cyber and information technology range and facility is-- 7i7 a cyber range1 as defined by the ,principal ,cyber ,advisor pursuant to subsection 7c77#b77;,c72 or 7ii7 an ,,it range1 as defined by the ,principal ,cyber ,advisor pursuant to such subsection4 7,c7 ,submission ,not later than one year after the date of the enactment of the ,national ,defense ,authorization ,act for ,fiscal ,year #bjae1 the ,principal ,cyber ,advisor shall submit to the congressional defense committees the list established under subparagraph 7,a74 7#d7 ,management of systems ,the ,principal ,cyber ,advisor shall determine1 on a case by case basis1 whether a cyber and information technology range and facility listed under paragraph 7#c77;,a7 should be centrally managed under paragraph 7#e7 to increase efficiency1 provide capability or capacity to more elements of the ,department of ,defense1 or both4 7#e7 ,coordinating entity 7,a7 ,establishment ,not later than #bgj days after the date of the enactment of the ,national ,defense ,authorization ,act for ,fiscal ,year #bjae1 the ,secretary of ,defense shall establish an entity1 or designate an element of the ,department of ,defense1 to coordinate cyber and information technology ranges and facilities that the ,principal ,cyber ,advisor determines should be centrally managed under paragraph 7#d74 7,b7 ,duties ,with respect to the cyber and information technology ranges and facilities designated under paragraph 7#d71 the head of the entity established or designated under subparagraph 7,a7 shall be responsible for the following3 7i7 ,managing the cyber and information technology ranges and facilities1 including coordinating the scheduling of ranges and facilities4 7ii7 ,identifying and providing guidance to the ,secretary with respect to opportunities for integration among the cyber and information technology ranges and facilities regarding testing1 training1 and developing functions4 7iii7 ,assisting the military departments1 the ,national ,guard1 and the elements of the ,department gain access to the cyber and information technology ranges and facilities4 7,c7 ,reports ,the head of the entity established or designated under subparagraph 7,a7 shall submit to the congressional defense committees-- 7i7 an annual report on the opportunities for cost reduction and improvements to the integration and coordination of the cyber and information technology ranges and facilities2 and 7ii7 by not later than one year after the date of the enactment of the ,national ,defense ,authorization ,act for ,fiscal ,year #bjae1 an initial report on the status1 integration efforts1 and usage of cyber and information technology ranges and facilities4 7#f7 ,cyber and information technology ranges and facilities defined ,in this subsection1 the term cyber and information technology ranges and facilities means cyber ranges1 test facilities1 test beds1 and other means of the ,department of ,defense for testing1 training1 and developing software1 personnel1 and tools for accommodating the mission of the ,department4 2 and 7#b7 in the heading1 by inserting and information technology after ,cyber4 7b7 ,common terms 7#a7 ,in general ,subsection 7c77#b7 of such section is amended by adding at the end the following new subparagraph3 7,c7 ,establishing and maintaining a list of terms and definitions with respect to commonly used terms relating to cyber matters to improve the coordination and cooperation among the military departments and among other departments and agencies of the ,federal ,government4 4 7#b7 ,establishment ,in carrying out section #icb7;c77#b77;,c7 of the ,national ,defense ,authorization ,act for ,fiscal ,year #bjad 7,public ,law #aac-ff71 as added by paragraph 7#a71 the ,principal ,cyber ,advisor shall-- 7,a7 establish the list of terms and definitions by not later than #bgj days after the date of the enactment of this ,act2 and 7,b7 use as a basis for such list ,joint ,publication #a-jb1 ,department of ,defense ,dictionary of ,military and ,associated ,terms 7as amended through #ca ,january #bjaa74 7c7 ,pilot program 7#a7 ,in general ,the head of the entity established or designated under section #icb7;b77#e77;,a7 of the ,national ,defense ,authorization ,act for ,fiscal ,year #bjad 7,public ,law #aac-ff71 as added by subsection 7a71 shall carry out one or more pilot programs to demonstrate commercially available1 cloud-based cyber training1 exercise1 and test environments 7both unclassified and classified7 that are available to meet the mission of the ,department of ,defense while providing the defense laboratories1 the ,national ,guard1 academia1 and the private sector access to such training1 exercise1 and test environments4 7#b7 ,evaluation ,the pilot programs under paragraph 7#a7 shall evaluate the costs and benefits with respect to the following matters3 7,a7 ,persistent capability4 7,b7 ,remote access4 7,c7 ,capability to transfer information across classification levels4 7,d7 ,reuse of environments4 7,e7 ,routine integration of new technologies4 7,f7 ,use of commercially available cloud-based solutions that are compliant with the ,federal ,risk and ,authorization ,management ,program4 7,g7 ,pay-per-use utility pricing model4 7,h7 ,any other matters the head determines appropriate4 7#c7 ,eligible entities ,the head shall select1 using competitive procedures1 defense laboratories and federally funded research and development centers to carry out pilot programs under paragraph 7#a74 7#d7 ,follow-on activities ,based on the information learned under the pilot programs under paragraph 7#a71 the ,secretary of ,defense may carry out any of the following activities3 7,a7 ,transition a pilot program to be carried out by the ,secretary for operations1 maintenance1 and continued use by cyber organizations of the ,department4 7,b7 ,provide persistent year-round accessibility of the environment for continued training during non-exercise periods4 7,c7 ,provide a certification quality environment for initial and recurring training of all cyber teams4 7,d7 ,replicate the capability of a pilot program to provide similar high-end training and exercise opportunities for non-,department cyber professionals1 including in coordination with the ,secretary of ,homeland ,security4 7,e7 ,sustain the research and development effort under a pilot program to continue updating network environments1 targets and defended assets1 and integration of new cyber tools4 7,f7 ,sustain technology infusion under a pilot program to apply and evaluate advanced concepts and solutions to problems that affect multiple mission spaces of the ,department4 7,g7 ,create a library of virtual cyber templates that are ready to be used on short notice without the capital expenditures that would otherwise be required4