This is not an official government website.
Copyright © 2026 PLEJ LC. All rights reserved.
Adds a legal definition of "critical infrastructure of the Department of Defense" and expands the stated authority for Department of Defense cyber operations to explicitly include defending that DOD critical infrastructure. The change clarifies that assets whose loss would cripple the Department’s mission can be treated as within the Department’s cyber defense authority.
The bill strengthens and clarifies DOD cyber defense authority to better protect military systems and readiness, but concentrates operational power within DOD—raising risks of civilian spillover, reduced oversight, and added costs for taxpayers.
Military personnel and federal employees: DOD assets designated as "critical infrastructure" would have explicit statutory authority for cyber defense, improving protection of systems that support military missions.
Government contractors and federal employees: Clarifying the statutory definition of DOD critical infrastructure streamlines decision-making for cyber operators and reduces legal ambiguity for defensive actions.
Taxpayers and military personnel: Better protection of DOD critical systems reduces the risk of mission disruption, helping avoid higher long-term costs and preserving defense readiness.
Utilities, energy companies, and urban communities: Expanded authority for cyber operations against threats to DOD infrastructure could increase the risk of unintended escalation or incidents that affect civilian systems.
Taxpayers and federal employees: Granting DOD broader cyber powers may reduce external oversight and legal transparency, potentially limiting public accountability for offensive or defensive cyber actions.
Taxpayers and government contractors: Implementing expanded defenses could impose additional costs for system hardening, monitoring, and contractor support that would be borne by the defense budget and taxpayers.
Introduced July 31, 2025 by Marion Michael Rounds · Last progress July 31, 2025