Section 1 Curricula on software acquisitions and cybersecurity software or hardware acquisitions for covered individuals
Curricula— The President of the Defense Acquisition University shall develop training curricula related to software acquisitions and cybersecurity software or hardware acquisitions and offer such curricula to covered individuals to increase digital literacy related to such acquisitions by developing the ability of such covered individuals to use technology to identify, critically evaluate, and synthesize data and information related to such acquisitions.
Elements— Curricula developed pursuant to subsection (a) shall provide information on—
cybersecurity, information technology systems, computer networks, cloud computing, artificial intelligence, machine learning, and quantum technologies;
cybersecurity threats and capabilities;
operational efforts of United States Cyber Command to combat cyber threats;
mission requirements and current capabilites and systems of United States Cyber Command;
activities that encompass the full range of threat reduction, vulnerability reduction, deterrence, incident response, resiliency, and recovery policies and activities, including activities relating to computer network operations, information assurance, military missions, and intelligence missions to the extent such activities relate to the security and stability of cyberspace; and
industry best practices relating to software acquisitions and cybersecurity software or hardware acquisitions.
Plan— Not later than 180 days after the date of the enactment of this Act, the Secretary of Defense, in consultation with the President of the Defense Acquisition University, shall submit to Congress a comprehensive plan to implement the curricula developed under subsection (a). Such plan shall include a list of resources required for and costs associated with such implementation, including—
curriculum development;
hiring instructors to teach the curriculum;
facilities; or
website development.
Implementation— Not later than one year after the date on which the plan described in subsection (c) is submitted to Congress, the President of the Defense Acquisition University shall offer the curricula developed under subsection (a) to covered individuals.
Report— Not later than one year after the date on which the plan described in subsection (c) is submitted to Congress, the Secretary of Defense, in consultation with the President of the Defense Acquisition University, shall submit to Congress a report assessing the costs and benefits of requiring all covered individuals to complete the curricula developed under subsection (a).
Covered individuals defined— In this section, the term covered individuals means—
a contracting officer of the Department of Defense with responsibilities related to software acquisitions or cybersecurity software or hardware acquisitions; or
a individual serving in a position designated under section 1721(b) of title 10, United States Code, who is regularly consulted for software acquisitions or cybersecurity software or hardware acquisitions.