,,ib  ,union ,cal5d> ,no4 #adf  #aaf?   
,,congress  #a/ ,session  ,h4 ,r4 #ccbj 
,report ,no4 #aaf-ahh  ,,9 ,,! ,,h\se   
,,( ,,repres5tatives  ,june #ah1 #bjai  
,mr4 ,k+ ( ,new ,york 7= himself1 ,mr4  
,?ompson ( ,mississippi1 ,miss ,rice (  
,new ,york1 ,mr4 ,correa1 ,mr4 ,rog]s ( 
,alabama1 ,mr4 ,rose ( ,new ,york1 &    
,mr4 ,payne7 introduc$ ! foll[+ bill2   
:i* 0 ref]r$ to ! ,committee on ,homel& 
,security  ,augu/ #bg1 #bjai ,additional
 sponsors3 ,mr4 ,mc,caul & ,mr4 ,hag$orn
  ,augu/ #bg1 #bjai ,report$ ) an       
am5dm5t1 committ$ to ! ,committee ( !   
,:ole ,h\se on ! ,/ate ( ! ,union1 &    
ord]$ to be pr9t$ ,/rike out all aft] ! 
enact+ clause & ins]t ! "p pr9t$ 9      
italic ,= text ( introduc$ bill1 see    
copy ( bill z introduc$ on ,june #ah1   
#bjai  ,a ,,bill  ,to am5d ! ,homel&    
,security ,act ( #bjjb to au?orize !    
,secret>y ( ,homel& ,security to        
implem5t c]ta9 requirem5ts = in=mation  
relat+ to supply *a9 risk1 & = o!r      
purposes4  #a4 ,%ort title ,?is ,act may

 be cit$ z ! ,secur+ ! ,homel& ,security
 ,supply ,*a9 ,act ( #bjai4  #b4        
,dep>tm5t ( ,homel& ,security           
requirem5ts = in=mation relat+ to supply
 *a9 risk  7a7 ,9 g5]al ,subtitle ,d (  
title ,,viii ( ! ,homel& ,security ,act 
( #bjjb 7#f ,u4,s4,c4 #cia et seq47 is  
am5d$ by add+ at ! end ! foll[+ new     
section3  #hcf4 ,requirem5ts = in=mation
 relat+ to supply *a9 risk  7a7         
,au?ority ,subject to subsection 7b71 ! 
,secret>y may-- 7#a7 c>ry out a cov]$   
procurem5t action2  7#b7 limit1 not)/&+ 
any o!r provision ( law1 9 :ole or 9 "p1
 ! disclosure ( in=mation1 includ+      
classifi$ in=mation1 relat+ to ! basis =
 c>ry+ out su* an action2 &  7#c7       
exclude1 9 :ole or 9 "p1 a s\rce c>ri$  
out 9 ! c\rse ( su* an action applicable
 to a cov]$ procurem5t ( ! ,dep>tm5t4   
7b7 ,det]m9ation & notification ,except 
z au?oriz$ by subsection 7c7 to address 
an urg5t national security int]e/1 !    
,secret>y may ex]cise ! au?ority provid$
 9 subsection 7a7 only aft]-- 7#a7      

obta9+ a jo9t recomm5dation1 9          
unclassifi$ or classifi$ =m1 f ! ,*ief  
,acquisition ,(fic] & ! ,*ief ,in=mation
 ,(fic] ( ! ,dep>tm5t1 includ+ a review 
( any risk assessm5t made available by  
an appropriate p]son or entity1 includ+ 
! national risk managem5t c5t] at !     
,cyb]security & ,infra/ructure ,security
 ,ag5cy1 t !re is a significant supply  
*a9 risk 9 a cov]$ procurem5t2  7#b7    
notify+ any s\rce nam$ 9 ! jo9t         
recomm5dation describ$ 9 p>agraph 7#a7  
advis+-- 7,a7 t a recomm5dation has be5 
obta9$2  7,b7 to ! ext5t consi/5t ) !   
national security & law en=cem5t        
int]e/s1 ! basis = su* recomm5dation2   
7,c7 t1 )9 #cj days aft] receipt (      
notice1 su* s\rce may submit in=mation &
 argum5t 9 opposition to su*            
recomm5dation2 &  7,d7 ( ! proc$ures    
gov]n+ ! consid]ation ( su* submission &
 ! possible ex]cise ( ! au?ority provid$
 9 subsection 7a72  7#c7 notify+ !      
relevant compon5ts ( ! ,dep>tm5t t su*  
risk assessm5t has demon/rat$           

significant supply *a9 risk to a cov]$  
procurem5t2  7#d7 mak+ a det]m9ation 9  
writ+1 9 unclassifi$ or classifi$ =m1 t 
aft] consid]+ any in=mation submitt$ by 
a s\rce "u p>agraph 7#b71 & 9           
consultation ) ! ,*ief ,in=mation ,(fic]
 ( ! ,dep>tm5t1 t-- 7,a7 use ( au?ority 
"u subsection 7a77#a7 is necess>y to    
protect national security by r$uc+      
supply *a9 risk2  7,b7 less intrusive   
measures are n reasonably available to  
r$uce su* risk2  7,c7 a decision to     
limit disclosure ( in=mation "u         
subsection 7a77#b7 is necess>y to       
protect national security int]e/2 &     
7,d7 ! use ( su* au?orities w apply to a
 s+le cov]$ procurem5t or a class (     
cov]$ procurem5ts1 & o!rwise specifies !
 scope ( su* det]m9ation2  7#e7 provid+ 
to ! ,committee on ,homel& ,security ( !
 ,h\se ( ,repres5tatives & ! ,committee 
on ,homel& ,security & ,gov]nm5tal      
,affairs ( ! ,s5ate a classifi$ or      
unclassifi$ notice ( ! det]m9ation made 
"u p>agraph 7#d7 t includes--  7,a7 !   

jo9t recomm5dation describ$ 9 p>agraph  
7#a72  7,b7 a summ>y ( any risk         
assessm5t review$ 9 support ( su* jo9t  
recomm5dation2 &  7,c7 a summ>y ( !     
basis = su* det]m9ation1 includ+ a      
discussion ( less intrusive measures t 7
 consid]$ & :y su* measures 7 n         
reasonably available to r$uce supply *a9
 risk2  7#f7 notify+ ! ,director ( !    
,(fice ( ,managem5t & ,budget1 & ! heads
 ( o!r ,f$]al ag5cies z appropriate1 9 a
 mann] & to ! ext5t consi/5t ) !        
requirem5ts ( national security2 &  7#g7
 tak+ /eps to ma9ta9 ! confid5tiality ( 
any notifications "u ?is subsection4    
7c7 ,proc$ures ,to address urg5t        
national security int]e/s ,9 any case 9 
:i* ! ,secret>y det]m9es t national     
security int]e/s require ! imm$iate     
ex]cise ( ! au?orities "u subsection    
7a71 ! ,secret>y--  7#a7 may1 to ! ext5t
 necess>y to address any su* national   
security int]e/1 & subject to !         
conditions specifi$ 9 p>agraph 7#b7--   
7,a7 tempor>ily delay ! notice requir$  

by subsection 7b77#b72  7,b7 make !     
det]m9ation requir$ by subsection       
7b77#d71 reg>dless ( :e!r ! notice      
requir$ by subsection 7b77#b7 has be5   
provid$ or :e!r ! notifi$ s\rce at issue
 has submitt$ any in=mation 9 response  
to su* notice2  7,c7 tempor>ily delay ! 
notice requir$ by subsections 7b77#d7 & 
7b77#e72 &  7,d7 ex]cise ! au?ority     
provid$ 9 subsection 7a7 9 accordance ) 
su* det]m9ation2 &  7#b7 %all take      
actions necess>y to comply ) all        
requirem5ts ( subsection 7b7 z soon z   
practicable aft] address+ ! urg5t       
national security int]e/ t is ! subject 
( p>agraph 7#a71 includ+--  7,a7 provid+
 ! notice requir$ by subsection 7b77#b72
  7,b7 promptly consid]+ any in=mation  
submitt$ by ! s\rce at issue 9 response 
to su* notice1 & mak+ any appropriate   
modifications to ! det]m9ation requir$  
by subsection 7b77#d7 bas$ on su*       
in=mation2 &  7,c7 provid+ ! notice     
requir$ by subsections 7b77#e7 &        
7b77#f71 includ+ a description ( su*    

urg5t national security1 & any          
modifications to su* det]m9ation made 9 
accordance ) subp>agraph 7,b74  7d7     
,annual review ( det]m9ations ,!        
,secret>y %all annually review all      
det]m9ations made "u subsection 7b74    
7e7 ,delegation ,! ,secret>y may n      
delegate ! au?ority provid$ 9 subsection
 7a7 or ! responsibility id5tifi$ 9     
subsection 7d7 to an (ficial bel[ !     
,deputy ,secret>y4  7f7 ,limitation (   
review ,not)/&+ any o!r provision ( law1
 no action tak5 by ! ,secret>y "u       
subsection 7a7 may be subject to review 
9 a bid prote/ be=e ! ,gov]nm5t         
,acc\ntability ,(fice or 9 any ,f$]al   
c\rt4  7g7 ,consultation ,9 develop+    
proc$ures & guidel9es = ! implem5tation 
( ! au?orities describ$ 9 ?is section1 !
 ,secret>y %all review ! proc$ures &    
guidel9es utiliz$ by ! ,dep>tm5t (      
,def5se to c>ry out simil> au?orities4  
7h7 ,def9itions ,9 ?is section3  7#a7   
,cov]$ article ,! t]m cov]$ article     
means3 7,a7 ,in=mation te*nology1       

includ+ cl\d comput+ s]vices ( all      
types4  7,b7 ,telecommunications        
equipm5t4  7,c7 ,telecommunications     
s]vices4  7,d7 ,! process+ ( in=mation  
on a ,f$]al or non-,f$]al in=mation     
sy/em1 subject to ! requirem5ts ( !     
,controll$ ,unclassifi$ ,in=mation      
program ( ! ,dep>tm5t4  7,e7 ,h>dw>e1   
sy/ems1 devices1 s(tw>e1 or s]vices t   
include emb$d$ or incid5tal in=mation   
te*nology4  7#b7 ,cov]$ procurem5t ,!   
t]m cov]$ procurem5t means-- 7,a7 a     
s\rce selection = a cov]$ article       
involv+ ei!r a p]=mance specification1 z
 provid$ 9 subsection 7a77#c77;,b7 (    
section #ccjf ( title #da1 ,unit$ ,/ates
 ,code1 or an evaluation factor1 z      
provid$ 9 subsection 7c77#a77;,a7 ( su* 
section1 relat+ to supply *a9 risk1 or )
 respect to :i* supply *a9 risk         
consid]ations are includ$ 9 !           
,dep>tm5t's det]m9ation ( :e!r a s\rce  
is a responsible s\rce z def9$ 9 section
 #aac ( su* title2  7,b7 ! consid]ation 
( proposals = & issuance ( a task or    

deliv]y ord] = a cov]$ article1 z       
provid$ 9 section #dajf7;d77#c7 ( title 
#da1 ,unit$ ,/ates ,code1 ) respect to  
:i* ! task or deliv]y ord] contract     
includes a contract clause e/abli%+ a   
requirem5t relat+ to supply *a9 risk2   
7,c7 any contract action involv+ a      
contract = a cov]$ article ) respect to 
:i* su* contract includes a clause      
e/abli%+ requirem5ts relat+ to supply   
*a9 risk2 or  7,d7 any procurem5t made  
via ,gov]nm5t ,pur*ase ,c>e = a cov]$   
article :5 supply *a9 risk has be5      
id5tifi$ z a conc]n4  7#c7 ,cov]$       
procurem5t action ,! t]m cov]$          
procurem5t action means any ( ! foll[+  
actions1 if su* action takes place 9 !  
c\rse ( conduct+ a cov]$ procurem5t3    
7,a7 ,! exclusion ( a s\rce t fails to  
meet qualification requirem5ts e/abli%$ 
pursuant to section #ccaa ( title #da1  
,unit$ ,/ates ,code1 = ! purpose ( r$uc+
 supply *a9 risk 9 ! acquisition or use 
( a cov]$ article4  7,b7 ,! exclusion ( 
a s\rce t fails to a*ieve an acceptable 

rat+ ) reg>d to an evaluation factor    
provid+ = ! consid]ation ( supply *a9   
risk 9 ! evaluation ( proposals = ! aw>d
 ( a contract or ! issuance ( a task or 
deliv]y ord]4  7,c7 ,! det]m9ation t a  
s\rce is n a responsible s\rce bas$ on  
consid]ations ( supply *a9 risk4  7,d7  
,! decision to )hold cons5t = a         
contractor to subcontract ) a p>ticul>  
s\rce or to direct a contractor to      
exclude a p>ticul> s\rce f consid]ation 
= a subcontract4  7#d7 ,in=mation sy/em 
,! t]m in=mation sy/em has ! mean+ giv5 
su* t]m 9 section #cejb ( title #dd1    
,unit$ ,/ates ,code4  7#e7 ,in=mation   
te*nology ,! t]m in=mation te*nology has
 ! mean+ giv5 su* t]m 9 section #aaaja (
 title #dj1 ,unit$ ,/ates ,code4  7#f7  
,responsible s\rce ,! t]m responsible   
s\rce has ! mean+ giv5 su* t]m 9 section
 #aac ( title #da1 ,unit$ ,/ates ,code4 
7#g7 ,supply *a9 risk ,! t]m supply *a9 
risk means ! risk t a malici\s actor may
 sabotage1 malici\sly introduce an      
unwant$ function1 extract or modify     

data1 or o!rwise manipulate ! design1   
integrity1 manufactur+1 production1     
di/ribution1 in/allation1 op]ation1 or  
ma9t5ance ( a cov]$ article s z to      
surveil1 d5y1 disrupt1 or o!rwise       
manipulate ! function1 use1 or op]ation 
( ! in=mation te*nology or in=mation    
/or$ or transmitt$ on ! cov]$ articles4 
7#h7 ,telecommunications equipm5t ,! t]m
 telecommunications equipm5t has ! mean+
 giv5 su* t]m 9 section #c7eb7 ( !      
,communications ,act ( #aicd 7#dg       
,u4,s4,c4 #aec7eb774  7#i7              
,telecommunications s]vice ,! t]m       
telecommunications s]vice has ! mean+   
giv5 su* t]m 9 section #c7ec7 ( !       
,communications ,act ( #aicd 7#dg       
,u4,s4,c4 #aec7ec774  7i7 ,effective    
date ,! requirem5ts ( ?is section %all  
take effect on ! date t is #ij days aft]
 ! date ( ! enactm5t ( ?is ,act & %all  
apply to-- 7#a7 contracts aw>d$ on or   
aft] su* date2 &  7#b7 task & deliv]y   
ord]s issu$ on or aft] su* date pursuant
 to contracts aw>d$ be=e1 on1 or aft]   

su* date4  4  7b7 ,rulemak+ ,section    
#eec ( title #e1 ,unit$ ,/ates ,code1 & 
section #agjg ( title #da1 ,unit$ ,/ates
 ,code1 %all n apply to ! ,secret>y (   
,homel& ,security :5 c>ry+ out !        
au?orities & responsibilities "u section
 #hcf ( ! ,homel& ,security ,act (      
#bjjb1 z add$ by subsection 7a74  7c7   
,cl]ical am5dm5t ,! table ( cont5ts 9   
section #a7;b7 ( ! ,homel& ,security    
,act ( #bjjb is am5d$ by ins]t+ aft] !  
item relat+ to section #hce ! foll[+ new
 item3  ,sec4 #hcf4 ,requirem5ts =      
in=mation relat+ to supply *a9 risk4  4 
#c4 ,report on ?reats pos$ by =eign     
/ate-own$ entities to ,,dhs in=mation   
te*nology & communications sy/ems ,n    
lat] ?an #ahj days aft] ! date ( !      
enactm5t ( ?is ,act1 ! ,"u ,secret>y =  
,managem5t ( ! ,dep>tm5t ( ,homel&      
,security1 9 coord9ation ) ! national   
risk managem5t c5t] ( ! ,cyb]security & 
,infra/ructure ,security ,ag5cy ( !     
,dep>tm5t1 %all submit to ! ,committee  
on ,homel& ,security ( ! ,h\se (        

,repres5tatives & ! ,committee on       
,homel& ,security & ,gov]nm5tal ,affairs
 ( ! ,s5ate a report on cyb]security    
?reats pos$ by t]rori/ actors & =eign   
/ate-own$ entities to ! in=mation       
te*nology & communications sy/ems (     
,dep>tm5t ( ,homel& ,security1 includ+  
in=mation relat+ to ! foll[+3  7#a7 ,!  
use ( =eign /ate-own$ entities'         
in=mation & communications te*nology by 
! ,dep>tm5t ( ,homel& ,security1 li/$ by
 compon5t4  7#b7 ,! ?reats1 9           
consultation ) ! ,dep>tm5t's ,(fice (   
,intellig5ce & ,analysis1 ( =eign       
/ate-own$ entities' in=mation &         
communications te*nology equipm5t t c\ld
 impact ! ,dep>tm5t4  ,augu/ #bg1 #bjai 
,report$ ) an am5dm5t1 committ$ to !    
,committee ( ! ,:ole ,h\se on ! ,/ate ( 
! ,union1 & ord]$ to be pr9t$