Section 1 Short title
This Act may be cited as the “Enhance Partner Cyber Capabilities Act”.
Enhance Partner Cyber Capabilities Act
A BILL
To direct the President to develop a strategy for the offensive use of cyber capabilities, and for other purposes.
Sec. 2 Findings
The North Atlantic Treaty Organization (commonly known as “NATO”) remains a critical alliance for the United States and a cost-effective, flexible means of providing security to the most important allies of the United States.
The regime of Russian President Vladimir Putin is actively working to erode democratic systems of NATO member states, including the United States.
According to the report of the Office of the Director of National Intelligence dated January 6, 2017, on the Russian Federation’s hack of the United States presidential election: “Russian efforts to influence the 2016 presidential election represent the most recent expression of Moscow’s longstanding desire to undermine the US-led liberal democratic order.”.
As recently as May 4, 2017, the press reported a massive cyber hack of French President Emmanuel Macron’s campaign, likely attributable to Russian actors.
It is in the core interests of the United States to enhance the offensive and defensive cyber capabilities of NATO member states to deter and defend against Russian cyber and influence operations.
Enhanced offensive cyber capabilities would enable the United States to demonstrate strength and deter the Russian Federation from threatening NATO, while reassuring allies, without a provocative buildup of conventional military forces.
Sec. 3 Sense of Congress on cyber strategy of the Department of Defense
It is the sense of Congress that—
the Secretary of Defense should update the cyber strategy of the Department of Defense (as that strategy is described in the Department of Defense document titled “The Department of Defense Cyber Strategy” dated April 15, 2015);
in updating the cyber strategy of the Department, the Secretary should—
specifically develop an offensive cyber strategy that includes plans for the offensive use of cyber capabilities, including computer network exploitation and computer network attacks, to thwart air, land, or sea attacks by the regime of Russian President Vladimir Putin and other adversaries;
provide guidance on integrating offensive tools into the cyber arsenal of the Department; and
assist NATO partners, through the NATO Cooperative Cyber Center of Excellence and other entities, in developing offensive cyber capabilities.
Sec. 4 Strategy for offensive use of cyber capabilities
Strategy required— The President shall develop a written strategy for the offensive use of cyber capabilites by departments and agencies of the Federal Government.
Elements— The strategy developed under subsection (a) shall include, at minimum—
a description of enhancements that are needed to improve the offensive cyber capabilities of the United States and partner nations, including NATO member states; and
a statement of principles concerning the appropriate deployment of offensive cyber capabilities.
Submission to Congress—
In general— Not later than 180 days after the date of the enactment of this Act, the President shall submit to the congressional defense committees (as that term is defined in section 101(a)(16) of title 10, United States Code) the strategy developed under subsection (a).
Form of submission— The strategy submitted under paragraph (1) may be submitted in classified form.
Sec. 5 International cooperation
Authority to provide technical assistance— The President, acting through the Secretary of Defense and with the concurrence of the Secretary of State, is authorized to provide technical assistance to NATO member states to assist such states in developing and enhancing offensive cyber capabilities.
Technical experts— In providing technical assistance under subsection (a), the President, acting through the NATO Cooperative Cyber Center of Excellence, may detail technical experts in the field of cyber operations to NATO member states.
Rule of construction— Nothing in this section shall be construed to preclude or limit the authorities of the President or the Secretary of Defense to provide cyber-related assistance to foreign countries, including the authority of the Secretary to provide such assistance under section 333 of title 10, United States Code.