National Defense Data Resilience Act

The National Defense Data Resilience Act requires the Department of Defense to classify its data into three categories based on the severity of potential impacts from loss or destruction. Under this bill, the Defense Secretary must establish specific timelines for recovering critical data within 180 days and other data types within 270 days, while also developing a comprehensive strategy to meet these goals. The legislation mandates the implementation of secure backup systems, continuous monitoring for threats, and regular simulated cyberattack exercises to ensure the military can restore essential functions quickly. Additionally, the act restricts the adoption of new data recovery technologies unless they meet strict security standards and are included in an official inventory of approved tools.