S. 1071

National Defense Authorization Act for Fiscal Year 2026

Sponsor: John Cornyn

1 cosponsor
Follow this bill

Official summary

Written by the Congressional Research Service.

National Defense Authorization Act for Fiscal Year 2026

This bill sets forth policies and authorities for FY2026 for Department of Defense (DOD) programs and activities, military construction, and the national security programs of the Department of Energy (DOE). The bill also sets forth policies and authorities for the Department of State, the Coast Guard, and the Intelligence Community (IC).

Among other elements, the bill

  • authorizes the procurement of various items, including aircraft, ships, and missiles;
  • sets active duty and reserve component personnel strength levels;
  • sets policy regarding various aspects of military health care and military compensation;
  • sets policy regarding DOD acquisitions and acquisition management, including contracting authorities and domestic sourcing;
  • sets policy for various matters related to DOD interactions with foreign nations, including matters concerning Israel, Ukraine, and the Indo-Pacific;
  • sets policy for various matters related to DOD cyber operations, cybersecurity, and artificial intelligence;
  • authorizes specified military construction projects and extends the authorization of certain projects from previous fiscal years;
  • authorizes the National Nuclear Security Administration, Defense Nuclear Facilities Safety Board, Naval Petroleum Reserves, and Maritime Administration;
  • sets policy regarding the organization and workforce of the State Department;
  • sets acquisition and personnel policy for the Coast Guard; 
  • sets policy for merchant mariner credentials, vessel safety, and oil pollution response; and
  • sets policy for the IC regarding artificial intelligence and biotechnology.

For additional information on the National Defense Authorization Act (NDAA) see

  • In Focus IF10516, Defense Primer: Navigating the NDAA, and
  • In Focus IF10515, Defense Primer: The NDAA Process.

Text of the bill

Expand all

A Department of Defense Authorizations

I Procurement

A Authorization of Appropriations

B Army Programs

C Navy Programs

D Air Force Programs

E Defense-wide, Joint, and Multiservice Matters

II Research, Development, Test, and Evaluation

A Authorization of Appropriations

B Program Requirements, Restrictions, and Limitations

C Biotechnology Matters

D Plans, Reports, and Other Matters

III Operation and Maintenance

A Authorization of Appropriations

B Energy and Environment

C Logistics and Sustainment

D Matters Relating to Munitions

E Other Matters

IV Military Personnel Authorizations

A Active Forces

B Reserve Forces

C Authorization of Appropriations; Reports

V Military Personnel Policy

A Officer Policy

B Reserve Component Management

C General Service Authorities and Military Records

D Recruitment and Accession

E Member Training

F Member Education

G Military Justice and Other Legal Matters

H Career Transition

I Family Programs, Child Care, and Dependent Education

J Decorations and Awards, Reports, and Other Matters

VI Compensation and Other Personnel Benefits

A Basic Pay and Retired Pay

B Bonus, Incentive, and Separation Pays

C Allowances

D Leave

E Family and Survivor Benefits

F Defense Resale Matters

G Other Benefits, Administrative Matters, Reports, and Briefings

VII Health Care Provisions

A TRICARE and Other Health Benefits

B Health Care Administration

C Studies, Reports, and Other Matters

VIII Acquisition Policy, Acquisition Management, and Related Matters

A Acquisition Policy and Management

B Amendments to General Contracting Authorities, Procedures, and Limitations

C Provisions Relating to Workforce Development

D Provisions Relating to Supply Chains and Domestic Sourcing

E Prohibitions and Limitations on Procurement

F Industrial Base Matters

Sec. 866. Cybersecurity regulatory harmonization

(a) In general. Not later than June 1, 2026, the Secretary of Defense, in coordination with the Chief Information Officer of the Department of Defense, the Chief Information Officer of each military department, and representatives from the service acquisition executives of each military department, shall—

(1) harmonize the cybersecurity requirements applicable to the defense industrial base across the Department of Defense;

(2) reduce the number of such requirements that are unique to a specific contract or other agreement of the Department; and

(3) submit to the congressional defense committees a report on the actions taken to carry out the harmonization described in paragraph (1) and the reduction described in paragraph (2).

(b) Requirements. The harmonization required by subsection (a)(1) shall ensure that processes and governance structures exist and are sufficient to identify and eliminate duplicative and inconsistent cybersecurity requirements and cybersecurity requirements unique to single contracts, including—

(1) a process and governance structure for assessing whether future proposed cybersecurity contractual requirements for contracts or other agreements of the Department of Defense are duplicative of other applicable requirements of the Department of Defense that are published in the Federal Register;

(2) a process for coordinating, centralizing, approving, and publishing any proposed cybersecurity requirement not published in the Federal Register; and

(3) a mechanism included in the process described in paragraph (2) for ensuring the visibility to and input from internal and external stakeholders.

(c) Reports required

(1) In general. Not later than December 31, 2026, and annually thereafter for three years, the Chief Information Officer of the Department of Defense shall submit to the congressional defense committees a report describing the actions taken to implement subsections (a) and (b), including the status of the harmonization of contractual cybersecurity requirements and of reducing cybersecurity requirements unique to single contracts required by such sections.

(2) Elements. Each report required by paragraph (1) shall cover the most recently completed fiscal year prior to the submission of the report and include—

(A) a description of any changes made during the period covered by the report to the processes and governance structures described in subsection (b);

(B) a list of each contract or other agreement of the Department of Defense entered into during the period covered by the report for which the Department sought to include a cybersecurity requirement not published in the Federal Register;

(C) for each contract or other agreement included on the list required by subparagraph (B), whether the Secretary of Defense approved the inclusion of the cybersecurity requirement for which such contract or other agreement was included on such list and an explanation of the reasoning of the Secretary for approving or denying such inclusion; and

(D) such other matters as determined necessary by the Chief Information Officer of the Department of Defense.

G Other Matters

IX Department of Defense Organization and Management

A Office of the Secretary of Defense and Related Matters

B Other Department of Defense Organization and Management Matters

X General Provisions

A Financial Matters

B Counterdrug Activities

C Naval Vessels and Shipyards

D Counterterrorism

E Miscellaneous Authorities and Limitations

F Studies and Reports

G Other Matters

XI Civilian Personnel

XII Matters relating to foreign nations

A Assistance and training

B Foreign military sales and related processes

C Matters relating to the Middle East

D Matters relating to Israel

E Matters relating to Europe, Ukraine, and the Russian Federation

F Matters relating to the Indo-Pacific region

G Matters relating to Asia

H Other matters

XIV Other Authorizations

A Military Programs

B National Defense Stockpile

C Other Matters

XV Cyberspace-related Matters

A Cyber Operations

B Cybersecurity

C Information Technology and Data Management

D Artificial Intelligence

E Reports and Other Matters

XVI Space Activities, Strategic Programs, and Intelligence Matters

A Space Activities

B Defense Intelligence and Intelligence-Related Activities

C Nuclear Forces

D Missile Defense Programs

E Matters Relating to Unidentified Anomalous Phenomena

F Matters Relating to Electromagnetic Warfare

G Other Matters

XVII Other Defense Matters

XVIII Acquisition Reform

A Alignment of the Defense Acquisition System

B Requirements Process Reform

C Matters Relating to Commercial Products and Commercial Services

D Improvements to Acquisition Programs

E Modifications to Strengthen the Industrial Base

B Military Construction Authorizations

XXI Army Military Construction

XXII Navy Military Construction

XXIII Air Force Military Construction

XXIV Defense Agencies Military Construction

XXV International Programs

A North Atlantic Treaty Organization Security Investment Program

B Host Country In-Kind Contributions

XXVI Guard and Reserve Forces Facilities

XXVII Base Realignment and Closure Activities

XXVIII Military Construction General Provisions

A Military Construction Programs

B Military Housing Reforms

C Real Property and Facilities Administration

D Land Conveyances

E Modifications to Unspecified Minor Military Construction

F Other Matters

C Department of Energy National Security Authorizations and Other Authorizations

XXXI Department of Energy National Security Programs

A National Security Programs and Authorizations

B Program Authorizations, Restrictions, and Limitations

C Reports and Other Matters

XXXII Defense Nuclear Facilities Safety Board

XXXIV Naval Petroleum Reserves

XXXV Maritime Administration

D Funding Tables

XLI Procurement

XLII Research, Development, Test, and Evaluation

XLIII Operation and Maintenance

XLIV Military Personnel

XLV Other Authorizations

XLVI Military Construction

XLVII Department of Energy National Security Programs

E Department of State Authorization Act for Fiscal Year 2026

I Organization and operations

A Management and consular affairs

B Human resources

C Political affairs

D Other matters

II Workforce matters

III Information security and cyber diplomacy

IV Public diplomacy

V Diplomatic security

VI Miscellaneous

F Intelligence Authorization Act for Fiscal Year 2026

LXI Intelligence Activities

LXII Central Intelligence Agency Retirement and Disability System

LXIII Intelligence Community Matters

LXIV Intelligence Community Efficiency and Effectiveness

LXV Matters Relating to Elements of the Intelligence Community

A Central Intelligence Agency

B Elements of Department of Defense

C Federal Bureau of Investigation

LXVI Artificial Intelligence and Other Emerging Technologies

A Artificial Intelligence

B Biotechnology

C Other matters

LXVII Matters Relating to Foreign Countries

A Matters Relating to China

B Other Matters

LXVIII Reports and Other Matters

G Coast Guard Authorization Act of 2025

LXXI Coast Guard

A Authorization of appropriations

B Accountability

LXXII Organization, Authorities, Acquisition, and Personnel of the Coast Guard

A Authorities

B Acquisition

C Personnel

D Coast Guard Academy

E Reports and Policies

LXXIII Shipping and Navigation

A Merchant Mariner Credentials

B Vessel Safety

C Ports

D Matters Involving Uncrewed Systems

E Other Matters

LXXIV Oil Pollution Response

LXXV Sexual Assault and Sexual Harassment Response

A Accountability Implementation

B Misconduct

C Other matters

LXXVI Comptroller General Reports

LXXVII Amendments

H Other Matters

LXXXI Financial Services Matters

LXXXII Judiciary Matters

LXXXIII Foreign Affairs Matters

A Taiwan Non-Discrimination Act of 2025

B BUST Fentanyl Act

C Western Balkans democracy and prosperity

D Countering Wrongful Detention Act of 2025

E Other Matters

LXXXIV National Oceanic and Atmospheric Administration

A National Oceanic and Atmospheric Administration Commissioned Officer Corps

B South Pacific Tuna Treaty matters

C Other Matters

LXXXV Comprehensive Outbound Investment National Security Act of 2025

A General Matters

B Imposition of Sanctions

C Prohibition and notification on investments relating to covered national security transactions

D Securities and Related Matters

LXXXVI Securing the Airspace, Facilitating Emergency Response, and Safeguarding Key Infrastructure, Entertainment Venues, and Stadiums

LXXXVII DFC Modernization and Reauthorization Act of 2025

A Definitions and Less Developed Country Focus

B Management of Corporation

C Authorities Relating to the Provision of Support

D Other Matters

LXXXVIII Other Matters