10 U.S.C. § 130g
The Secretary of Defense shall develop, prepare, and coordinate; make ready all armed forces for purposes of; and, when appropriately authorized to do so, conduct, a military cyber operation in response to malicious cyber activity carried out against the United States or a United States person by a foreign power (as such terms are defined in section 101 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801)).
(Added Pub. L. 114–92, div. A, title XVI, § 1642(a), , 129 Stat. 1116.)