,i  #aafth ,,congress  #b;d ,session    
,h4 ,r4 #gbeg  ,,in ,,the ,,house ,,of  
,,representatives  ,june #ah1 #bjbj ,mr4
 ,larsen of ,washington 7for himself and
 ,mr4 ,gallagher7 introduced the        
following bill2 which was referred to   
the ,committee on ,armed ,services  ,a  
,,bill  ,to direct the ,secretary of    
,defense to carry out activities to     
develop1 secure1 and effectively        
implement fifth generation information  
and communications technology within the
 ,department of ,defense4  #a4          
,telecommunications security program    
7a7 ,program required ,the ,secretary of
 ,defense shall carry out a program to  
identify and mitigate vulnerabilities in
 the telecommunications infrastructure  
of the ,department of ,defense4  7b7    
,elements ,in carrying out the program  
under subsection 7a71 the ,secretary    
shall--  7#a7 develop a capability to   
communicate clearly and authoritatively 
about threats by foreign actors2  7#b7  
conduct independent red-team security   

analysis of ,department of ,defense     
systems1 subsystems1 devices1 and       
components including no-knowledge       
testing and testing with limited or full
 knowledge of expected functionalities2 
7#c7 verify the integrity of personnel  
who are tasked with design fabrication1 
integration1 configuration1 storage1    
test1 and documentation of noncommercial
 #e;,g technology to be used by the     
,department of ,defense2  7#d7 verify   
the efficacy of the physical security   
measures used at ,department of ,defense
 locations where system design1         
fabrication1 integration1 configuration1
 storage1 test1 and documentation of    
#e;,g technology occurs2  7#e7 direct   
the ,chief ,information ,officer of the 
,department of ,defense to use the      
,federal ,risk and ,authorization       
,management ,program 7commonly known as 
,fed,r,a,m,p7 moderate or high cloud    
standard baselines1 supplemented with   
the ,department's ,fed,r,a,m,p cloud    
standard controls and control           

enhancements1 to assess #e;,g core      
service providers whose services will be
 used by the ,department of ,defense    
through the ,department's provisional   
authorization process2 and  7#f7 direct 
the ,defense ,information ,systems      
,agency and the ,united ,states ,cyber  
,command to ,develop a capability for   
continuous1 independent monitoring of   
packet streams for #e;,g data on        
frequencies assigned to the ,department 
of ,defense to validate availability1   
confidentiality1 and integrity of       
,department of ,defense communications  
systems4  7c7 ,implementation plan ,not 
later than #ij days after the date of   
the enactment of this ,act1 the         
,secretary of ,defense shall submit to  
,congress a plan for the implementation 
of the program under subsection 7a74    
7d7 ,report required ,not later than    
#ahj days after submitting the plan     
under subsection 7c71 the ,secretary of 
,defense shall submit to ,congress a    
report that includes--  7#a7 a          

comprehensive assessment of the findings
 and conclusions of the program under   
subsection 7a72  7#b7 recommendations on
 how to mitigate vulnerabilities in the 
,department of ,defense                 
telecommunications infrastructure2 and  
7#c7 an explanation of how the          
,department of ,defense plans to        
implement such recommendations4