,i #aac? ,,congress #b;d ,session ,h4 ,r4 #deje ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,april #bh1 #bjad ,ms4 ,tsongas 7= h]self1 ,mr4 ,kilm]1 ,mr4 ,l>s5 ( ,wa%+ton1 & ,mr4 ,connolly7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,arm$ ,s]vices1 & 9 addition to ! ,committee on ,ov]sight & ,gov]nm5t ,re=m1 = a p]iod to be subsequ5tly det]m9$ by ! ,speak]1 9 ea* case = consid]ation ( su* provisions z fall )9 ! jurisdiction ( ! committee conc]n$ ,a ,,bill ,to direct ! ,comptroll] ,g5]al ( ! ,unit$ ,/ates & ! ,*ief ,in=mation ,(fic] ( ! ,dep>tm5t ( ,def5se to assess ! cl\d security requirem5ts ( ! ,dep>tm5t ( ,def5se4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,,dod ,cl\d ,security ,act4 #b4 ,assessm5t ( ,dep>tm5t ( ,def5se cl\d security requirem5ts 7a7 ,comptroll] ,g5]al responsibilities ,! ,comptroll] ,g5]al ( ! ,unit$ ,/ates %all-- 7#a7 review & summ>ize ! be/ practices relat+ to cl\d security by review+ ! practices ( o!r ,f$]al dep>tm5ts & ag5cies & comm]cial cl\d provid]s2 7#b7 assess ! cl\d capacity ( ! ,dep>tm5t ( ,def5se & su* o!r dep>tm5ts & ag5cies by assess+ h[ & to :at ext5t ! ,dep>tm5t has adopt$ comm]cial cl\d2 & 7#c7 assess ! opportunities = ! ,dep>tm5t to utilize cl\d comput+ 9 lieu ( or 9 addition to conv5tional comput+4 7b7 ,*ief ,in=mation ,(fic] responsibilities ,! ,*ief ,in=mation ,(fic] ( ! ,dep>tm5t ( ,def5se %all-- 7#a7 det]m9e ! security requirem5ts t are necess>y = any cl\d s]vice to /ore ,dep>tm5t ( ,def5se in=mation1 includ+-- 7,a7 by individually detail+ security requirem5ts = ea* ,dep>tm5t ( ,def5se impact level & security classification level2 & 7,b7 by provid+ a ju/ification to ! ,committees on ,arm$ ,s]vices ( ! ,s5ate & ,h\se ( ,repres5tatives = any discrepancy betwe5 security requirem5ts = diff]5t provid] types2 7#b7 conduct a ?reat-bas$ assessm5t ( :e!r security controls resid5t 9 comm]cial cl\d s]vices & ! cl\d s]vices ( o!r ,f$]al dep>tm5ts & ag5cies meet ! security requirem5ts det]m9$ "u p>agraph 7#b71 includ+-- 7,a7 by det]m9+ :at s]vices c & _c be provid$ by comm]cial cl\d v5dors1 bas$ on su* security requirem5ts2 7,b7 by provid+ ju/ification = :y su* det]m9ations 7 made by cit+1 z appropriate1 indu/ry responses to reque/s = in=mation & capability /atem5t t confirm ! conclusions ( ! ,dep>tm5t ( ,def5se2 & 7,c7 by reque/+ t comm]cial v5dors submit _! plans = h[ !y c adapt _! sy/ems to ! unique & dynamic cyb] def5se requirem5ts ( ! ,dep>tm5t ( ,def5se2 7#c7 require any gov]nm5t-own$1 op]at$1 or unique sy/em t is or w be design$ to provide cl\d capabilities = ! ,dep>tm5t ( ,def5se to be c]tifi$ & accr$it$ ?r\gh ! same process1 & to ! same /&>ds1 t is us$ to c]tify & accr$it comm]cial s]vice provid]s2 & 7#d7 ensure t1 z "p ( any ,dep>tm5t ( ,def5se pilot demon/rations ) comm]cial cl\d v5dors-- 7,a7 an analysis is conduct$ (-- 7i7 requir+ ! ,def5se ,in=mation ,sy/ems ,ag5cy to "w ) comm]cial s]vice provid]s to ext5d ! ,dep>tm5t ( ,def5se ,in=mation ,network to comm]cial s]vice provid]s t are issu$ provisional au?ority to op]ate = ,dep>tm5t ( ,def5se impact levels #a & #b 9 ord] to lev]age ! comm]cial s]vice provid]s = secure connections to ! ,dep>tm5t ( ,def5se ,in=mation ,network2 7ii7 ! b5efits & *all5ges relat+ to h[ ! secure connections w\ld be enabl$ & deliv]$ z a s]vice by ! ,,disa cl\d brok] to ! comm]cial s]vice provid]s :o h a*iev$ provisional au?ority to op]ate = ,dep>tm5t ( ,def5se impact levels #a & #b2 7iii7 requir+ ! ,def5se ,in=mation ,sy/ems ,ag5cy to address ! ability ( comm]cial s]vice provid]s to provide s]vice = ,dep>tm5t ( ,def5se impact levels #c ?r\gh #e us+ logical sep>ation2 7iv7 ! ability ( comm]cial s]vice provid]s to provide innovative solutions to ! sep>ation ( cu/om] data & support+ res\rces t d n rely on physical sep>ation2 7v7 ! b5efits & *all5ges reg>d+ ! consid]ation ( su* solutions = equival5ce to physical sep>ation2 & 7vi7 ! b5efits & *all5ges ( hybrid solutions = provid+ cl\d s]vices2 & 7,b7 ! ,*ief ,in=mation ,(fic] provides to ! ,committees on ,arm$ ,s]vices ( ! ,s5ate & ,h\se ( ,repres5tatives a brief+ on ! matt]s ref]r$ to 9 subp>agraph 7,a7 by n lat] ?an #cj days aft] ! conclusion ( su* pilot demon/ration4