118 STAT. 3666 PUBLIC LAW 108–458—DEC. 17, 2004 (E) employs an information access management approach that controls access to data rather than just systems and networks, without sacrificing security; (F) facilitates the sharing of information at and across all levels of security; (G) provides directory services, or the functional equivalent, for locating people and information; (H) incorporates protections for individuals’ privacy and civil liberties; and (I) incorporates strong mechanisms to enhance account- ability and facilitate oversight, including audits, authen- tication, and access controls. (c) PRELIMINARY REPORT.—Not later than 180 days after the date of the enactment of this Act, the program manager shall, in consultation with the Information Sharing Council— (1) submit to the President and Congress a description of the technological, legal, and policy issues presented by the creation of the ISE, and the way in which these issues will be addressed; (2) establish an initial capability to provide electronic direc- tory services, or the functional equivalent, to assist in locating in the Federal Government intelligence and terrorism informa- tion and people with relevant knowledge about intelligence and terrorism information; and (3) conduct a review of relevant current Federal agency capabilities, databases, and systems for sharing information. (d) GUIDELINES AND REQUIREMENTS.—As soon as possible, but in no event later than 270 days after the date of the enactment of this Act, the President shall— (1) leverage all ongoing efforts consistent with establishing the ISE and issue guidelines for acquiring, accessing, sharing, and using information, including guidelines to ensure that information is provided in its most shareable form, such as by using tearlines to separate out data from the sources and methods by which the data are obtained; (2) in consultation with the Privacy and Civil Liberties Oversight Board established under section 1061, issue guide- lines that— (A) protect privacy and civil liberties in the develop- ment and use of the ISE; and (B) shall be made public, unless nondisclosure is clearly necessary to protect national security; and (3) require the heads of Federal departments and agencies to promote a culture of information sharing by— (A) reducing disincentives to information sharing, including over-classification of information and unneces- sary requirements for originator approval, consistent with applicable laws and regulations; and (B) providing affirmative incentives for information sharing. (e) IMPLEMENTATION PLAN REPORT.—Not later than one year after the date of the enactment of this Act, the President shall, with the assistance of the program manager, submit to Congress a report containing an implementation plan for the ISE. The report shall include the following: (1) A description of the functions, capabilities, resources, and conceptual design of the ISE, including standards. President. Deadline. President. Electronic directory. VerDate 11-MAY-2000 13:54 Nov 10, 2005 Jkt 029194 PO 00000 Frm 00200 Fmt 6580 Sfmt 6581 C:\STATUTES\2004\29194PT4.001 APPS10 PsN: 29194PT4
�
