; and (2) collaborate with vendors offering commercial analytics and applications, including support to refactoring commercial capabilities to the Government platform where industry can still own the intellectual property embedded in the analytics and applications. (e) Briefing required Not later than 180 days after the date of the enactment of this Act and not less frequently than once every 180 days thereafter until the activities required by subsection (a)(1) are completed, the Secretary shall provide the congressional defense committees a briefing on the activities of the Secretary in carrying out subsection (b). 1632. Zero-based review of Department of Defense cyber and information technology personnel (a) Review required Not later than January 1, 2021, each head of a covered department, component, or agency shall— (1) complete a zero-based review of the cyber and information technology personnel of the head's covered department, component, or agency; and (2) provide the Principal Cyber Advisor, the Chief Information Officer of the Department of Defense, and the Under Secretary of Defense for Personnel and Readiness the findings of the head with respect to the head's covered department, component, or agency. (b) Covered departments, components, and agencies For purposes of this section, a covered department, component, or agency is— (1) an independent Department of Defense component or agency; (2) the Office of the Secretary of Defense; (3) a component of the Joint Staff; (4) a military department or an armed force; or (5) a reserve component of the Armed Forces. (c) Scope of review As part of a review conducted pursuant to subsection (a)(1), the head of a covered department, component, or agency shall, with respect to the covered department, component, or agency of the head— (1) assess military, civilian, and contractor positions and personnel performing cyber and information technology missions