124 STAT. 2669 PUBLIC LAW 111–259—OCT. 7, 2010 inserting after the item relating to section 506B, as added by section 305(c) of this Act, the following new item: ‘‘Sec. 506C. Vulnerability assessments of major systems.’’. (b) DEFINITION OF MAJOR SYSTEM.—Paragraph (3) of section 506A(e) of the National Security Act of 1947 (50 U.S.C. 415a– 1(e)) is amended by striking ‘‘(in current fiscal year dollars)’’ and inserting ‘‘(based on fiscal year 2010 constant dollars)’’. SEC. 322. INTELLIGENCE COMMUNITY BUSINESS SYSTEM TRANS- FORMATION. (a) INTELLIGENCE COMMUNITY BUSINESS SYSTEM TRANS- FORMATION.— (1) IN GENERAL.—Title V of the National Security Act of 1947 (50 U.S.C. 413 et seq.), as amended by section 321 of this Act, is further amended by inserting after section 506C, as added by section 321(a), the following new section: ‘‘INTELLIGENCE COMMUNITY BUSINESS SYSTEM TRANSFORMATION ‘‘SEC. 506D. (a) LIMITATION ON OBLIGATION OF FUNDS.—(1) Subject to paragraph (3), no funds appropriated to any element of the intelligence community may be obligated for an intelligence community business system transformation that will have a total cost in excess of $3,000,000 unless— ‘‘(A) the Director of the Office of Business Transformation of the Office of the Director of National Intelligence makes a certification described in paragraph (2) with respect to such intelligence community business system transformation; and ‘‘(B) such certification is approved by the board established under subsection (f). ‘‘(2) The certification described in this paragraph for an intel- ligence community business system transformation is a certification made by the Director of the Office of Business Transformation of the Office of the Director of National Intelligence that the intel- ligence community business system transformation— ‘‘(A) complies with the enterprise architecture under sub- section (b) and such other policies and standards that the Director of National Intelligence considers appropriate; or ‘‘(B) is necessary— ‘‘(i) to achieve a critical national security capability or address a critical requirement; or ‘‘(ii) to prevent a significant adverse effect on a project that is needed to achieve an essential capability, taking into consideration any alternative solutions for preventing such adverse effect. ‘‘(3) With respect to a fiscal year after fiscal year 2010, the amount referred to in paragraph (1) in the matter preceding subparagraph (A) shall be equal to the sum of— ‘‘(A) the amount in effect under such paragraph (1) for the preceding fiscal year (determined after application of this paragraph), plus ‘‘(B) such amount multiplied by the annual percentage increase in the consumer price index (all items; U.S. city aver- age) as of September of the previous fiscal year. ‘‘(b) ENTERPRISE ARCHITECTURE FOR INTELLIGENCE COMMUNITY BUSINESS SYSTEMS.—(1) The Director of National Intelligence shall, acting through the board established under subsection (f), develop Certification. 50 USC 415a–6.
