A bill to amend title 10, United States Code, to expand the scope of affirmation of authority for cyber operations to include defense of critical infrastructure of the Department of Defense, and for other purposes.

This bill would narrowly expand the Department of Defense’s (DoD) statutory authority to conduct cyber operations. Specifically, it adds “defense of critical infrastructure of the Department of Defense” to the purposes that fall under the DoD’s affirmed authority to engage in cyber operations. It also creates a formal definition of what constitutes “critical infrastructure of the Department of Defense,” describing assets that are so vital to DoD functioning that a cyber attack disabling or destroying them would debilitate mission capability. In short, the bill broadens the scope of cyber activities that DoD can undertake to protect its most essential assets, while leaving existing authorities and framework in place.