,,ii #aaf? ,,congress #a/ ,session ,s4 #adeg ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,may #ad1 #bjai,mrs4 ,blackburn 7= h]self & ,mr4 ,cornyn7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation ,a ,,bill ,to provide = int]ag5cy coord9ation on risk mitigation 9 ! communications equipm5t & s]vices m>ketplace & ! supply *a9 !re(1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,%>+ ,urg5t1 ,pot5tially ,problematic ,locations t ,yield ,communications ,haz>ds 9 ,am]ican ,int]net ,networks ,act ( #bjai or ! ,,supply ,,*a9 ,act ( #bjai4 #b4 ,int]ag5cy coord9ation on risk mitigation 9 ! communications equipm5t & s]vices m>ketplace & ! supply *a9 !re( 7a7 ,def9itions ,9 ?is section3 7#a7 ,appropriate committees ( ,congress ,! t]m appropriate committees ( ,congress means-- 7,a7 ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation1 ! ,committee on ,=eign ,relations1 ! ,committee on ,arm$ ,s]vices1 ! ,committee on ! ,judici>y1 ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs1 & ! ,select ,committee on ,intellig5ce ( ! ,s5ate2 & 7,b7 ! ,committee on ,en]gy & ,comm]ce1 ! ,committee on ,=eign ,affairs1 ! ,committee on ,arm$ ,s]vices1 ! ,committee on ! ,judici>y1 ! ,committee on ,homel& ,security1 & ! ,p]man5t ,select ,committee on ,intellig5ce ( ! ,h\se ( ,repres5tatives4 7#b7 ,appropriate ,f$]al entity ,! t]m appropriate ,f$]al entity means-- 7,a7 ! ,dep>tm5t ( ,def5se2 7,b7 ! ,dep>tm5t ( ,en]gy2 7,c7 ! ,dep>tm5t ( ,homel& ,security2 7,d7 ! ,dep>tm5t ( ,ju/ice2 7,e7 ! ,dep>tm5t ( ,transportation2 7,f7 ! ,dep>tm5t ( ! ,treasury2 & 7,g7 ! ,(fice ( ! ,director ( ,national ,intellig5ce4 7#c7 ,classifi$ in=mation ,! t]m classifi$ in=mation means any in=mation or mat]ial t has be5 det]m9$ by ! ,f$]al ,gov]nm5t pursuant to an ,executive ord]1 /atute1 or regulation1 to require protection aga9/ unau?oriz$ disclosure = reasons ( national security4 7#d7 ,communications equipm5t & s]vices ,! t]m communications equipm5t & s]vices includes any h>dw>e1 s(tw>e1 or o!r product or s]vice prim>ily int5d$ to fulfill or enable ! function ( in=mation process+ & communications by electronic means1 includ+ transmission & display1 includ+ ov] ! int]net4 7#e7 ,risk ,! t]m risk means any aspect or prop]ty ( ! compon5ts ( communications equipm5t & s]vices or ! associat$ supply *a9 t may be us$ to ga9 unau?oriz$ access to a communications network1 disrupt a communications network1 disrupt ! manufacture ( communications equipm5t1 disrupt cons5sus-driv5 indu/ry /&>ds = communications equipm5t & s]vices1 or o!rwise h>m a communications network or ! us]s ( ! network1 includ+ ga9+ unau?oriz$ access to data or r$irect+ data4 7#f7 ,secret>y ,! t]m ,secret>y means ! ,secret>y ( ,comm]ce4 7#g7 ,supply *a9 ,! t]m supply *a91 ) respect to communications equipm5t & s]vices-- 7,a7 means ! network ( p]sons & activities f s\rce to deliv]y ( ! equipm5t & s]vices2 & 7,b7 includes-- 7i7 v5dors1 suppli]s1 & provid]s ( ! equipm5t & s]vices2 & 7ii7 p]sons :o manufacture1 assemble1 develop1 or te/ ! equipm5t & s]vices4 7b7 ,ongo+ review ,consi/5t ) ! protection ( classifi$ in=mation1 ! ,secret>y %all1 9 coord9ation ) ! head ( ea* appropriate ,f$]al entity1 conduct an ongo+ review ( risks to ! communications equipm5t & s]vices m>ketplace & ! supply *a9 !re(4 7c7 ,long-,t]m sc5>io & /rategic plann+ 7#a7 ,developm5t1 issuance1 & implem5tation ( proc$ures ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is section1 consi/5t ) ! protection ( classifi$ in=mation1 ! ,secret>y1 9 coord9ation ) ! head ( ea* appropriate ,f$]al entity1 %all-- 7,a7 develop & issue proc$ures to regul>ly facilitate-- 7i7 long-t]m sc5>io & /rategic plann+ ) private entities t h appropriate security cle>ances to review classifi$ in=mation ab\t risks1 includ+ by-- 7,i7 assess+ ! sev]ity ( risks pos$ to ! m>ketplace ( individual compon5ts ( communications equipm5t & s]vices & ! supply *a9 !re(2 7,,ii7 id5tify+ c\nt]feit communications equipm5t & s]vices 9 ! m>ketplace2 7,,iii7 assess+ ! ability ( =eign gov]nm5ts or ?ird p>ties to exploit ! m>ketplace 9 a mann] t raises risks2 7,,iv7 id5tify+-- 7aa7 em]g+ risks & long-t]m tr5ds 9 ! m>ketplace ( individual compon5ts or /&>ds ( communications equipm5t & s]vices & ! supply *a9 !re(2 & 7bb7 /rategies to mitigate risks describ$ 9 item 7aa72 & 7,v7 analyz+ opportunities = asymmetric advantage2 7ii7 !-- 7,i7 prep>ation ( unclassifi$ in=mation t raises aw>5ess ( risks1 includ+1 z appropriate1 unclassifi$ v]sions ( any in=mation %>$ "u clause 7i72 & 7,,ii7 dissem9ation by ! ,secret>y ( ! unclassifi$ in=mation describ$ 9 subclause 7,i7 to private entities t d n h appropriate security cle>ances2 & 7iii7 ! volunt>y %>+ f private entities to ! ,secret>y ( in=mation ab\t risks to ! m>ketplace2 & 7,b7 c>ry out ! proc$ures develop$ & issu$ "u subp>agraph 7,a74 7#b7 ,mann] ( pres5tation ,! in=mation %>$ ) private entities "u p>agraph 7#a77;,a77i7 %all be pres5t$ 9 a mann] t id5tifies1 assesses1 & prioritizes risks1 ! mitigation ( risks1 & opportunities = asymmetric advantage4 7#c7 ,in=mation %>$ ) or provid$ to ! ,f$]al ,gov]nm5t 7,a7 ,no waiv] ( privilege or protection ,! provision ( in=mation to ! ,f$]al ,gov]nm5t by a private entity "u clause 7i7 or 7iii7 ( p>agraph 7#a77;,a7 %all n con/itute a waiv] ( any applicable privilege or protection provid$ by law1 includ+ trade secret protection4 7,b7 ,propriet>y in=mation ,in=mation provid$ to ! ,f$]al ,gov]nm5t by a private entity "u clause 7i7 or 7iii7 ( p>agraph 7#a77;,a7 %all be consid]$ ! comm]cial1 f9ancial1 & propriet>y in=mation ( ! private entity4 7,c7 ,exemption f disclosure "u ,,foia ,in=mation provid$ to ! ,f$]al ,gov]nm5t by a private entity "u clause 7i7 or 7iii7 ( p>agraph 7#a77;,a7 %all be exempt f disclosure "u section #eeb7;b77#c7 ( title #e1 ,unit$ ,/ates ,code4 7,d7 ,exemption f ,f$]al regulatory au?ority ,in=mation provid$ to ! ,f$]al ,gov]nm5t by a private entity "u clause 7i7 or 7iii7 ( p>agraph 7#a77;,a7 %all n be us$ by any ,f$]al entity to regulate1 includ+ ?r\gh an en=cem5t action1 ! lawful activities ( ! private entity4 7,e7 ,protection f liability ,no cause ( action %all lie or be ma9ta9$ 9 any c\rt aga9/ a private entity1 & su* action %all be promptly dismiss$1 if ! action is relat$ to or arises out ( ! provision ( in=mation to ! ,f$]al ,gov]nm5t by ! private entity "u clause 7i7 or 7iii7 ( p>agraph 7#a77;,a74 7d7 ,report to ,congress 7#a7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date ( enactm5t ( ?is section1 & bi5nially !reaft]1 ! ,secret>y1 9 coord9ation ) ! head ( ea* appropriate ,f$]al entity1 %all submit to ! appropriate committees ( ,congress a report on ! implem5tation ( ?is section4 7#b7 ,cont5ts ,! report requir$ "u p>agraph 7#a7 %all-- 7,a7 include any recomm5dations t ! ,secret>y1 9 collaboration ) ! heads ( ! appropriate ,f$]al entities1 may h = improvem5ts or modifications to ! proc$ures develop$ & issu$ "u ?is section2 7,b7 evaluate ! effectiv5ess ( ! proc$ures develop$ & issu$ "u subsection 7c77#a77;,a72 7,c7 id5tify processes & proc$ures t improve ! ability ( private entities & ! ,f$]al ,gov]nm5t to adapt to em]g+ risks to ! m>ketplace2 7,d7 provide te*nical guidance on procurem5t ( communications equipm5t & s]vices (f]$ by private entities 9 ord] to mitigate vuln]abilities2 7,e7 include recomm5dations to /reaml9e ! provision ( security cle>ances = relevant private sector actors2 & 7,f7 assess coord9ation betwe5 ! heads ( ! appropriate ,f$]al entities1 includ+ by id5tify+ di/9ct compet5cies & jurisdictions ( ea* appropriate ,f$]al entity4 7#c7 ,=m ( reports ,ea* report submitt$ "u p>agraph 7#a7 %all be 9 unclassifi$ =m1 b may include a classifi$ annex4 7e7 ,rule ( con/ruction ,no?+ 9 ?is section %all be con/ru$ to au?orize ! ,secret>y or ! head ( any o!r ,f$]al ag5cy to issue new regulations4