; or (2) is in the possession of or under controls or restrictions imposed by the Federal Bureau of Investigation, or a national counterintelligence or intelligence organization, the Secretary shall determine, jointly with the Director of the Federal Bureau of Investigation or the Director of National Intelligence, as appropriate, the most expeditious process, means, and conditions for carrying out the activities otherwise required by paragraph (1). (b) Recommendations Not later than 90 days after the date of the enactment of this Act, the Secretary shall submit to the congressional defense committees such recommendations as the Secretary may have for legislative or administrative action to address such barriers as may be inhibiting the implementation of this section. 1638. Accreditation standards and processes for cybersecurity and information technology products and services (a) Assessment The Chief Information Officer of the Department of Defense shall conduct an enterprise assessment of accreditation of standards and processes for cybersecurity and information technology products and services. (b) Report (1) In general Not later than April 1, 2020, the Chief Information Officer shall submit to the congressional defense committees a report on the assessment conducted under subsection (a). (2) Contents The report submitted under paragraph (1) shall include the following: (A) The findings of the Chief Information Officer with respect to the assessment conducted under subsection (a). (B) A description of the modifications proposed or enacted to accreditation standards and processes arising out of the assessment. (C) A description of how the Department will increasingly automate accreditation processes, pursue agile development, incorporate machine learning, and foster reciprocity across authorizing officials. 1639. Extension of authorities for Cyberspace Solarium Commission Section 1652(k) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 ( Public Law 115–232 ) is amended— (1) in