; and (2) if the government is unable or unwilling to take action, the United States reserves the right to act unilaterally (with the consent of that government if possible, but without such consent if necessary). (g) Authority of Secretary of Defense (1) In general The Secretary of Defense has the authority to develop, prepare, coordinate, and, when appropriately authorized to do so, conduct military cyber operations in response to cyber attacks and malicious cyber activities described in subsection (a) that are carried out against the United States or United States persons by a foreign power. (2) Delegation of additional authorities The Secretary may delegate to the Commander of the United States Cyber Command such authorities of the Secretaries of the military departments, including authorities relating to manning, training, and equipping, that the Secretary considers appropriate. (3) Use of delegated authorities The use by the Commander of the United States Cyber Command of any authority delegated to the Commander pursuant to this subsection shall be subject to the authority, direction, and control of the Secretary. (4) Rule of construction Nothing in this subsection shall be construed to limit the authority of the President or Congress to authorize the use of military force. (h) Foreign power defined In this section, the term foreign power has the meaning given that term in section 101 of the Foreign Intelligence Surveillance Act of 1978 ( 50 U.S.C. 1801 ). 1622. Cyber posture review (a) Requirement for comprehensive review In order to clarify United States cyber deterrence policy and strategy for the near term, the Secretary of Defense shall conduct a comprehensive review of the cyber posture of the United States for the next 5 to 10 years. The Secretary shall conduct the review in consultation with the Director of National Intelligence, the Attorney General, the Secretary of the Department of Homeland Security, and the Secretary of State. (b) Elements of review The cyber posture review shall include the