§ 2914.
Military construction projects for energy resilience, energy security, and energy conservation
(a)
Project Authorization Required.—
The Secretary of Defense may carry out such military construction projects for energy resilience, energy security, and energy conservation as are authorized by law, using funds appropriated or otherwise made available for that purpose.
(b)
Submission of Project Proposals.—
(1)
As part of the Department of Defense Form 1391 submitted to the appropriate committees of Congress for a military construction project covered by subsection (a), the Secretary of Defense shall include the following information:
(B)
The location of the project.
(C)
A brief description of the scope of work.
(D)
The original project cost estimate and the current working cost estimate, if different.
(E)
Such other information as the Secretary considers appropriate.
(2)
In the case of a military construction project for energy conservation, the Secretary also shall include the following information:
(A)
The original expected savings-to-investment ratio and simple payback estimates and measurement and verification cost estimate.
(B)
The most current expected savings-to-investment ratio and simple payback estimates and measurement and verification plan and costs.
(C)
A brief description of the measurement and verification plan and planned funding source.
(3)
In the case of a military construction project for energy resilience or energy security, the Secretary also shall include the rationale for how the project would enhance mission assurance, support mission critical functions, and address known vulnerabilities.
(e)
Incorporation of Cybersecurity Supply Chain Risk Management Tools and Methods.—
(1)
The Secretary of Defense shall incorporate into covered projects cybersecurity supply chain risk management tools and solutions to provide continuous analysis, monitoring, and mitigation of cyber vulnerabilities.
(2)
In carrying out the requirements of paragraph (1), the Secretary of Defense shall consider, to the maximum extent practicable, the following:
(A)
The adoption of commercially available cybersecurity supply chain risk management tools and solutions.
(B)
The inclusion of existing databases on cyber vulnerabilities when selecting such tools and solutions.
(C)
The need for such tools and methods to provide continuous analysis, monitoring, and mitigation of cyber vulnerabilities in covered projects.
(D)
Beginning with fiscal year 2026, documentation for any new requirements for cybersecurity supply chain risk management in annual guidance for covered projects that is submitted along with the annual budget request of the President submitted pursuant to
section 1105 of title 31.
(3)
In this subsection, the term “covered project” means a project connected to a Department of Defense Information Network for which funds are made available under this section.
(f)
Application to Military Construction Projects.—
This section shall apply to military construction projects covered by subsection (a) for which a Department of Defense Form 1391 is submitted to the appropriate committees of Congress in connection with the budget of the Department of Defense for fiscal year 2023 and thereafter.
(Added [Pub. L. 109–364, div. B, title XXVIII, § 2851(a)(1)], Oct. 17, 2006, [120 Stat. 2493]; amended [Pub. L. 114–328, div. B, title XXVIII, § 2805(a)(1)], (b)(1)(A), (2), Dec. 23, 2016, [130 Stat. 2713], 2714; [Pub. L. 115–91, div. B, title XXVIII], §§ 2801(e)(1), 2831(c)(1), Dec. 12, 2017, [131 Stat. 1845], 1857; [Pub. L. 115–232, div. A, title X, § 1081(a)(29)], Aug. 13, 2018, [132 Stat. 1985]; [Pub. L. 116–283, div. B, title XXVIII], §§ 2805(a), 2823(b), Jan. 1, 2021, [134 Stat. 4321], 4333; [Pub. L. 117–81, div. B, title XXVIII, § 2804], Dec. 27, 2021, [135 Stat. 2188]; [Pub. L. 118–31, div. B, title XXVIII, § 2809], Dec. 22, 2023, [137 Stat. 746].)