; and (2) by inserting after subsection (d) the following new subsection: (e) Incorporation of cybersecurity supply chain risk management tools and methods (1) The Secretary of Defense shall incorporate into covered projects cybersecurity supply chain risk management tools and solutions to provide continuous analysis, monitoring, and mitigation of cyber vulnerabilities. (2) In carrying out the requirements of paragraph (1), the Secretary of Defense shall consider, to the maximum extent practicable, the following: (A) The adoption of commercially available cybersecurity supply chain risk management tools and solutions. (B) The inclusion of existing databases on cyber vulnerabilities when selecting such tools and solutions. (C) The need for such tools and methods to provide continuous analysis, monitoring, and mitigation of cyber vulnerabilities in covered projects. (D) Beginning with fiscal year 2026, documentation for any new requirements for cybersecurity supply chain risk management in annual guidance for covered projects that is submitted along with the annual budget request of the President submitted pursuant to section 1105 of title 31. (3) In this subsection, the term covered project means a project connected to a Department of Defense Information Network for which funds are made available under this section. . 2810. Authority for Indo-Pacific posture unspecified minor military construction projects (a) Authority To support the posture of the Armed Forces in the United States Indo-Pacific Command area of operations, the Commander of the United States Indo-Pacific Command (in this section referred to as the Commander ) may carry out unspecified minor military construction projects not otherwise authorized by law with an approved cost less than $15,000,000. (b) Scope of project authority A project carried out under this section may include— (1) the design, construction, development, conversion, extension, renovation, or repair of a facility, whether to satisfy temporary or permanent requirements