may be required to improve the cybersecurity of the defense industrial base. (C) Implementation timelines and identification of costs. (D) Such recommendations as the Secretary may have for legislative action to improve the cybersecurity of the defense industrial base. (f) Quarterly briefings (1) In general Not less frequently than once each quarter until February 1, 2022, the Secretary of Defense shall brief the congressional defense committees on the status of development and implementation of the framework required by subsection (a). (2) Coordination with other briefings Each briefing under paragraph (1) shall be conducted in conjunction with a quarterly briefing under section 484(a) of title 10, United States Code. (3) Elements Each briefing under paragraph (1) shall include the following: (A) The current status of the development and implementation of the framework required by subsection (a). (B) A description of the efforts undertaken by the Secretary to evaluate the matters for consideration set forth in subsection (c). (C) The current status of any pilot programs the Secretary is carrying out to develop the framework. 1635. Role of Chief Information Officer in improving enterprise-wide cybersecurity (a) In general In carrying out the responsibilities established in section 142 of title 10, United States Code, the Chief Information Officer of the Department of Defense shall, to the maximum extent practicable, ensure that the cybersecurity programs and capabilities of the Department— (1) fit into an enterprise-wide cybersecurity architecture