40 U.S.C. § 11103: Applicability to national security systems

involves intelligence activities; involves cryptologic activities related to national security; involves command and control of military forces; involves equipment that is an integral part of a weapon or weapons system; or subject to paragraph (2), is critical to the direct fulfillment of military or intelligence missions. Paragraph (1)(E) does not include a system to be used for routine administrative and business applications (including payroll, finance, logistics, and personnel management applications). Except as provided in subsection (c), chapter 113 of this title does not apply to national security systems. Sections 11313, 11315, and 11316 of this title apply to national security systems. The heads of executive agencies shall apply sections 11302 and 11312 of this title to national security systems to the extent practicable. Subject to subparagraph (B), the heads of executive agencies shall apply section 11303 of this title to national security systems to the extent practicable. National security systems are subject to section 11303(b)(5) of this title , except for subparagraph (B)(iv). Notwithstanding subsection (c)(2) of section 11103 of title 40 , United States Code, a national security system described in subsection (a)(1)(D) of such section shall not be subject to the requirements of paragraphs (2) through (5) of section 11312(b) of such title unless the milestone decision authority determines in writing that application of such requirements is appropriate and in the best interests of the Department of Defense. In this section, the term ‘milestone decision authority’ has the meaning given the term in section 4251(d)(5) of title 10 , United States Code.”