; (II) defense of the Department of Defense Information Network; and (III) support for other combatant commands, including targeting of adversary military assets. . 1641. Use of National Security Agency cybersecurity expertise to support acquisition of commercial cybersecurity products (a) Advisory mission The National Security Agency shall, as a mission in its role in securing the information systems of the Department of Defense, advise and assist the Department of Defense in its acquisition and adaptation of cybersecurity products and services from industry, especially the commercial cybersecurity sector. (b) Program to improve acquisition of cybersecurity products and services (1) Establishment Consistent with paragraph (1), the Director of the National Security Agency shall establish a permanent program consisting of market research, testing, and expertise transmission, or augments to existing programs, to improve the acquisition by the Department of cybersecurity products and services. (2) Requirements Under the program established pursuant to paragraph (1), the Director shall, independently and at the request of components of the Department— (A) test and evaluate commercially-available cybersecurity products and services using— (i) generally known cyber operations techniques; and (ii) tools and cyber operations techniques and advanced tools and techniques available to the National Security Agency; (B) develop and establish standard procedures, techniques, and threat-informed metrics to perform the testing and evaluation required by subparagraph (A); and (C) advise the Secretary of Defense on the merits and disadvantages of evaluated cybersecurity products, including with respect to— (i) any synergies between products; (ii) value; (iii) matters relating to operation and maintenance; and (iv) matters relating to customization requirements. (3) Limitations The program established under paragraph (1) shall not— (A) by used to accredit cybersecurity products and services for use by the Department