1. Short title This Act may be cited as the Insider Threat Assessment Act or ITAA . 2. GAO study on protecting classified information from insider threats within the Department of Defense (a) Study The Comptroller General of the United States shall conduct a study to assess the ability of the Secretary of Defense to mitigate insider threats to classified information and systems in which classified information is stored within the Department of Defense, including— (1) the extent to which the Secretary takes timely action to address each security deficiency identified in each annual report submitted pursuant to the policy of the Director of National Intelligence titled the National Insider Threat Policy and Minimum Standards for Executive Branch Insider Threat Programs to the head of an executive agency by a designated senior official regarding the process or status of an insider threat program; (2) the extent to which the Secretary uses information system security controls (including audits, limited access controls, and configuration management) for systems in which classified information is stored; (3) the extent to which the Secretary uses controls to limit the ability of individuals who are eligible for access to classified information in accordance with Executive Order 12968 (60 Fed. Reg. 40245; relating to access to classified information), or any successor thereto, and Executive Order 10865 (25 Fed. Reg. 1583; relating to safeguarding classified information within industry), or any successor thereto, from removing such classified information from a system or facility in which such classified information is stored; and (4) any other related matters that the Comptroller General deems appropriate. (b) Preliminary briefing; final report Not later than 180 days after the date of the enactment of this Act, the Comptroller General shall— (1) provide to the Committee on Armed Services of the House of Representatives a briefing regarding the preliminary findings of the study conducted under subsection (a)