of the risk analysis methodologies and modeling and simulation capabilities developed and demonstrated pursuant to the pilot program, and an assessment of the potential for future growth of commercial technology in support of the homeland defense mission of the Department of Defense. (D) Such recommendations as the Secretary considers appropriate regarding the establishment of a program of record for the Department on further development and sustainment of risk analysis methodologies and advanced, large-scale modeling and simulation on critical infrastructure and cyber warfare. (E) Lessons learned from the use of novel risk analysis methodologies and large-scale modeling and simulation carried out under the pilot program regarding vulnerabilities, required capabilities, and reconfigured force structure, coordination practices, and policy. (F) Planned steps for implementing the lessons described in subparagraph (E). (d) Funding Of the amounts authorized to be appropriated for fiscal year 2019 by section 201 for research, development, test, and evaluation for the Army and available for Advanced Concepts and Simulation (Program Element (62308A)), $10,000,000 may be available for the pilot program. 1631. Security product integration framework (a) Findings Congress makes the following findings: (1) The Department of Defense requires a standard, enterprise-wide, security product integration framework (SPIF) that provides a machine-to-machine data exchange architecture and protocol to achieve interoperability and automated orchestration and coordinated action between and among cybersecurity services, devices, appliances, agents, applications, tools, and command and control centers. (2) Information security products and services need to be engineered to consume and act on information, direction, and cues from other security elements on a network through this framework. (3) A security product integration framework should ideally be non-proprietary or designed as a modular open system. (4) A security integration framework