; and (ii) the extension of modernized boundary defense capabilities to all additional internet access points of the Department of Defense information network (DODIN). (B) By the end of fiscal year 2027, survey, pilot, and deploy modernized boundary defense capabilities to the access points and cross-domain capabilities of the Secret Internet Protocol Network. (C) By the end of fiscal year 2028, survey, pilot, and deploy modernized boundary defense capabilities to remaining classified networks and enclaves of the Department information network. (c) Briefing required Not later than 60 days after the date of the enactment of this Act, the Secretary shall provide the congressional defense committees a briefing on— (1) the findings of the Secretary with respect to the pilot and initial deployment under subsection (b)(2)(A)(i); and (2) the plans of the Secretary for the phased deployment to other internet access points and classified networks pursuant to subsection (b). 1713. Policy and guidance on memory-safe software programming (a) Policy and guidance Not later than 270 days after the date of the enactment of this Act, the Secretary of Defense shall develop a Department of Defense-wide policy and guidance in the form of a directive memorandum to implement the recommendations of the National Security Agency contained in the Software Memory Safety Cybersecurity Information Sheet published by the Agency in November, 2022, regarding memory-safe software programming languages and testing to identify memory-related vulnerabilities in software developed, acquired by, and used by the Department of Defense. (b) Requirements The policy required in subsection (a) shall— (1) establish the conditions and associated approval processes under which a component of the Department may— (A) contract for the development of custom software that includes open source and reused software written in programming languages that are not classified as memory-safe by the Agency