38 U.S.C. § 8173

1. (a)Consistent with sections 11302 and 11319 of title 40—
   1. (1)the Chief Information Officer of the Department shall—
      1. (A)exercise authority over the management, governance, and oversight processes relating to existing or proposed information technology of the Financial Services Center of the Department, or such successor office; and
      2. (B)supervise the information technology employees and contractors of the Financial Services Center; and
   2. (2)the Director of the Financial Services Center of the Department, or the head of such successor office, may not enter into a contract or other agreement for information technology or information technology services unless the contract or other agreement has been reviewed and approved by the Chief Information Officer.
2. (b)The Chief Information Officer shall have oversight and operational authority over all information security practices of the Financial Services Center of the Department.