; and (2) cybersecurity of Department of Defense information systems and information technology services, including how cybersecurity threat information is incorporated and the development of cyber practices, cyber testing, and mitigation of cybersecurity risks. (e) Review of current responsibilities (1) In general Not later than January 1, 2021, each Secretary of a military department shall review the military department's current governance model for cybersecurity with respect to current authorities and responsibilities. (2) Elements Each review under paragraph (1) shall include the following: (A) An assessment of whether additional changes beyond the designation of a Principal Cyber Advisor pursuant to subsection (a) are required. (B) Consideration of whether the current governance structure and assignment of authorities— (i) enable effective top-down governance; (ii) enable effective Chief Information Officer and Chief Information Security Officer action; (iii) are adequately consolidated so that the authority and responsibility for cybersecurity risk management is clear and at an appropriate level of seniority; (iv) provides authority to a single individual to certify compliance of Department information systems and information technology services with all current cybersecurity standards