,,ii  #aaf? ,,congress  #a/ ,session    
,s4 #bcaf  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,july #cj1 #bjai ,mr4  
,crapo 7= himself & ,mr4 ,w>n]7         
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,select ,committee  
on ,intellig5ce  ,a ,,bill  ,to require 
a plan = /r5g!n+ ! supply *a9           
intellig5ce function1 to e/abli% a      
,national ,supply ,*a9 ,intellig5ce     
,c5t]1 & = o!r purposes4  #a4 ,%ort     
title ,?is ,act may be cit$ z !         
,manufactur+1 ,inve/m5t1 & ,controls    
,review = ,comput] ,h>dw>e1             
,intellectual ,prop]ty1 & ,supply ,act (
 #bjai or ! ,,micro*ips ,act ( #bjai4   
#b4 ,f9d+s & s5se ( ,congress  7a7      
,f9d+s ,congress makes ! foll[+ f9d+s3  
7#a7 ,fif? g5]ation telecommunications  
te*nology 7commonly ref]r$ to z #e;,g71 
z well z o!r em]g+ te*nologies1 w       
revolutionize ! te*nology indu/ry1      
becom+ a vital "p ( day-to-day bus9ess &
 life1 & requires secure supply *a9s = !
 national security ( ! ,unit$ ,/ates4   

7#b7 ,an insecure supply *a9 = products 
suppli$ to ! ,unit$ ,/ates ,gov]nm5t c  
lead to a degradation ( critical        
infra/ructure & te*nology items t are   
ess5tial to ! def5se ( ! ,unit$ ,/ates4 
7#c7 ,! ,unit$ ,/ates ,gov]nm5t         
confronts adv]s>ies :o seek to (fset !  
milit>y /r5g? ( ! ,unit$ ,/ates ?r\gh   
asymmetric1 nonk9etic actions t         
compromise & neutralize ! decision-mak+ 
sy/ems1 processes1 & w>fight+           
capabilities ( ! ,unit$ ,/ates4  7#d7   
,^! adv]s>ies take advantage ( ! op5 &  
democratic sy/em ( ! ,unit$ ,/ates t    
prioritizes gov]nm5tal transp>5cy to    
connect citiz5s ) ! actions ( !         
,gov]nm5t4  7#e7 ,! ,national ,def5se   
,/rategy id5tifi$ ,russia & ,*9a z      
prim>y /rategic competitors ( ! ,unit$  
,/ates4  7#f7 ,russia & ,*9a seek to    
/eal s5sitive def5se in=mation f !      
,unit$ ,/ates ?r\gh ! use ( bl5d$       
espionage op]ations 9 ! supply *a91     
supply *a9 activities1 & cyb]space1 &   
?r\gh insid] ?reat human actors4  7#g7  

,! actions ( ,russia & ,*9a g well      
beyond !ft ( critical milit>y te*nology1
 ?reat5+ ! integrity & read9ess (       
in=mation & weapons sy/ems & pot5tially 
enabl+ key elem5ts ( ! /rategies ( an   
adv]s>y to defeat ! ,arm$ ,=ces ( !     
,unit$ ,/ates across ! spectrum (       
conflict4  7#h7 ,accord+ to "s e/imates1
 cyb]security sp5d+ 9 ! ,unit$ ,/ates f 
#bjag to #bjba w exce$                  
#a1jjj1jjj1jjj1jjj among ! public &     
private sectors4  7#i7 ,ev5 ) ^! l>ge   
inve/m5ts 9 cyb]security1 ! ,unit$      
,/ates rema9s vuln]able to advanc$ cyb] 
actors l ,russia & ,*9a4  7#aj7 ,s9ce   
#bjac1 m ?an #f1jjj1jjj individual data 
records h be5 compromis$ e day ?r\gh    
data brea*es1 ) ne>ly half ( ^! losses  
occurr+ 9 ! ,gov]nm5t sector4  7#aa7    
,l>ge exp5ditures ( res\rces & a        
protective /rategy t relies on firewalls
 & b\nd>ies t c be brea*$ by a p]si/5t  
actor are cle>ly insuffici5t &          
completely ignore ! supply *a9 vector4  
7#ab7 ,milit>y weapons sy/ems are n     

immune to cyb] vuln]abilities4  7#ac7   
,an ,octob] #bjah ,gov]nm5t             
,acc\ntability ,(fice report f\nd t     
ne>ly all weapons sy/ems ( ! ,unit$     
,/ates h cyb] vuln]abilities ! scale (  
:i* ! ,dep>tm5t ( ,def5se is j beg9n+ to
 grapple )4  7#ad7 ,fur!rmore1 ! report 
/at$ t despite multiple w>n+s s9ce !    
e>ly #aiijs1 cyb]security has n be5 a   
focus ( weapon sy/ems acquisitions4     
7#ae7 ,!re h be5 num]\s press /ories    
ab\t data brea*es & !ft ( ,unit$ ,/ates 
s5sitive te*nology t prove t cyb]       
vuln]abilities are real & n !oretical4  
7#af7 ,! ,dep>tm5t ( ,def5se w sp5d m   
?an #a1fjj1jjj1jjj1jjj to develop &     
field its curr5t portfolio ( weapons    
sy/ems4  7#ag7 ,conduct+ acquisitions   
)\t mak+ security resili5cy a key       
discrim9ator 9 capability developm5t &  
contract aw>d decisions c\ld pot5tially 
lead to additional losses ( te*nological
 advantages ( ! ,arm$ ,=ces & negate    
ef=ts to improve ! capabilities ( !     
,arm$ ,=ces to meet ! ,national ,def5se 

,/rategy4  7#ah7 ,s(tw>e1 h>dw>e1 &     
s]vices supply *a9s h prov5 to be major 
means ?r\gh :i* adv]s>ies seek to ga9   
access to weapons sy/ems & in=mation &  
communications te*nology plat=ms &      
sy/ems ( ! ,unit$ ,/ates4  7#ai7        
,vuln]abilities 9 ^! critical areas     
introduce unacceptable risks to human   
life & ! ability ( ! ,arm$ ,=ces to     
execute ! missions ! public ( ! ,unit$  
,/ates expects ( !m4  7#bj7 ,!          
e/abli%m5t ( ! ,protect+ ,critical      
,te*nology ,task ,=ce ( ! ,dep>tm5t (   
,def5se & ! ,in=mation & ,communication 
,te*nology ,supply ,*a9 ,risk ,managem5t
 ,task ,=ce ( ! ,dep>tm5t ( ,homel&     
,security is a welcome fir/ /ep1 b !    
,unit$ ,/ates ,gov]nm5t requires a      
fundam5tal security culture *ange4      
7#ba7 ,! innovative te*nologies t w help
 ! ,arm$ ,=ces1 economy1 & indu/ry ( !  
,unit$ ,/ates ma9ta9 competitive        
advantages ov] ! competitors ( ! ,unit$ 
,/ates are develop$ 9 private indu/ry & 
9 academia4  7#bb7 ,engagem5t to f9d    

solutions ) indu/ry /akehold]s & alli$  
c\ntries to mitigate ! cle>1 pres5t1 &  
rapidly evolv+ ?reats to ! national     
security ( ! ,unit$ ,/ates is necess>y4 
7#bc7 ,a national c5t] to unify ef=ts   
across ! :ole ( gov]nm5t to /rategically
 w>n ( & support ! mitigation ( ?reats  
to supply *a9s & supply *a9 activities  
is vital to ! cyb]security1 critical    
infra/ructure1 & national security ( !  
,unit$ ,/ates4  7b7 ,s5se ( ,congress ,x
 is ! s5se ( ,congress t-- 7#a7 ! ,unit$
 ,/ates ,gov]nm5t %\ld endeavor to      
deliv] w>fight+ capabilities to         
op]ational =ces )\t hav+ critical       
in=mation or te*nology witt+ly or       
unwitt+ly lo/1 /ol51 or modifi$2  7#b7 !
 ,dep>tm5t ( ,def5se & ! :ole ( ! ,unit$
 ,/ates ,gov]nm5t %\ld adapt to !       
*all5ges pres5t$ by adv]s>ies :ile      
ma9ta9+ z mu* transp>5cy ) ! p ( !      
,unit$ ,/ates z possible2  7#c7 /rong]  
ef=t %\ld be plac$ on secur+ ! va/      
supply *a9s ( ! contractors responsible 
= develop+ & produc+ ! def5se relat$    

capabilities ( ! ,unit$ ,/ates2  7#d7 ! 
ef=ts ( ! ,dep>tm5t ( ,def5se1 !        
,dep>tm5t ( ,homel& ,security1 & !      
,f$]al ,acquisition ,security ,c\ncil to
 protect critical te*nologies %\ld be   
action ori5t$ ) cle> outcome            
expectations & *a9s ( acc\ntability2    
7#e7 te*nology protection %\ld beg9 long
 be=e a contract is sign$ betwe5 a      
contractor & ! ,unit$ ,/ates ,gov]nm5t2 
7#f7 ! ,unit$ ,/ates ,gov]nm5t %\ld     
improve its ability to collaborate to   
protect bo? ! op5 rese>* environm5t &   
em]g+ milit>y te*nologies2 &  7#g7 !    
,unit$ ,/ates ,gov]nm5t %\ld focus on   
supply *a9 security to ensure t milit>y 
sy/ems & sy/ems requir$ = s5sitive      
activities are n acquir$ or op]at$ 9 a  
compromis$ /ate4  #c4 ,plan = /r5g!n+ ! 
supply *a9 intellig5ce function  7a7 ,9 
g5]al ,n lat] ?an #ahj days aft] ! date 
( ! enactm5t ( ?is ,act1 ! ,director ( !
 ,national ,c\nt]9tellig5ce & ,security 
,c5t]1 9 coord9ation ) ! ,director ( !  
,def5se ,c\nt]9tellig5ce & ,security    

,ag5cy & o!r int]ag5cy p>tn]s1 %all     
submit to ,congress a plan = /r5g!n+ !  
supply *a9 intellig5ce function4  7b7   
,elem5ts ,! plan submitt$ "u subsection 
7a7 %all address ! foll[+3 7#a7 ,su*    
recomm5dations z ! ,director ( !        
,national ,c\nt]9tellig5ce & ,security  
,c5t] may h ) respect to--  7,a7 !      
appropriate work=ce model1 includ+ size1
 mix1 & s5iority1 f ! elem5ts ( !       
intellig5ce community & o!r int]ag5cy   
p>tn]s2 &  7,b7 ! appropriate gov]nance 
/ructure )9 ! intellig5ce community & ) 
int]ag5cy p>tn]s4  7#b7 ,! budget>y     
res\rces necess>y to implem5t ! plan4   
7#c7 ,! au?orities necess>y to implem5t 
! plan4  7c7 ,def9ition ( intellig5ce   
community ,9 ?is section1 ! t]m         
intellig5ce community has ! mean+ giv5  
su* t]m 9 section #c ( ! ,national      
,security ,act ( #aidg 7#ej ,u4,s4,c4   
#cjjc74  #d4 ,e/abli%m5t ( ,national    
,supply ,*a9 ,intellig5ce ,c5t]  7a7    
,e/abli%m5t ( ,c5t] ,title ,,ix ( !     
,intellig5ce ,au?orization ,act =       

,fiscal ,ye> #bjjc 7#ej ,u4,s4,c4 #cchb 
et seq47 is am5d$ by add+ at ! end !    
foll[+3  #ije4 ,national ,supply ,*a9   
,intellig5ce ,c5t]  7a7 ,e/abli%m5t (   
,c5t] ,!re is )9 ! ,national            
,c\nt]9tellig5ce & ,security ,c5t] 9 !  
,(fice ( ! ,director ( ,national        
,intellig5ce a ,national ,supply ,*a9   
,intellig5ce ,c5t]4  7b7 ,director (    
,national ,supply ,*a9 ,intellig5ce     
,c5t] ,!re is a ,director ( ! ,national 
,supply ,*a9 ,intellig5ce ,c5t]1 :o %all
 be appo9t$ by ! ,presid5t1 9           
consultation ) ! ,director ( ,national  
,intellig5ce & o!r int]ag5cy p>tn]s z ! 
,presid5t consid]s appropriate4  7c7    
,c5t] p]sonnel  7#a7 ,s5ior managem5t ,!
 ,director ( ! ,national ,supply ,*a9   
,intellig5ce ,c5t] %all ensure t ! s5ior
 managem5t ( ! ,c5t] includes "o or m   
detailees f ea* ( ! foll[+3  7,a7 ,!    
,dep>tm5t ( ,def5se4  7,b7 ,! ,dep>tm5t 
( ,ju/ice4  7,c7 ,! ,dep>tm5t ( ,homel& 
,security4  7,d7 ,! ,dep>tm5t (         
,comm]ce4  7#b7 ,detail or assignm5t (  

p]sonnel  7,a7 ,9 g5]al ,) ! approval ( 
! ,director ( ! ,(fice ( ,managem5t &   
,budget1 & 9 consultation ) !           
congressional committees ( jurisdiction1
 ! ,director ( ! ,national ,supply ,*a9 
,intellig5ce ,c5t] may reque/ ( ! head (
 any dep>tm5t1 ag5cy1 or elem5t ( !     
,f$]al ,gov]nm5t ! detail or assignm5t (
 p]sonnel f su* dep>tm5t1 ag5cy1 or     
elem5t to ! ,national ,supply ,*a9      
,intellig5ce ,c5t]4  7,b7 ,duties       
,p]sonnel detail$ or assign$ "u         
subp>agraph 7,a7 %all assi/ ! ,national 
,supply ,*a9 ,intellig5ce ,c5t] 9 c>ry+ 
out ! prim>y missions ( ! ,c5t]4  7,c7  
,t]ms ,p]sonnel detail$ or assign$ "u   
subp>agraph 7,a7 %all be assign$ or     
detail$ to ! ,national ,supply ,*a9     
,intellig5ce ,c5t] = a p]iod ( n m ?an  
#b ye>s4  7,d7 ,regul> employm5t ,any   
,f$]al ,gov]nm5t employee detail$ or    
assign$ "u subp>agraph 7,a7 %all reta9 !
 rights1 /atus1 & privileges ( 8 or h]  
regul> employm5t )\t int]ruption4  7d7  
,prim>y missions ,! prim>y missions ( ! 

,national ,supply ,*a9 ,intellig5ce     
,c5t] %all be z foll[s3 7#a7 ,to        
aggregate all-s\rce intellig5ce relat+  
to supply *a9s1 includ+--  7,a7         
classifi$ & unclassifi$ in=mation2  7,b7
 ?reat in=mation2 &  7,c7 propriet>y &  
s5sitive in=mation1 includ+ risk &      
vuln]ability in=mation1 volunt>ily      
provid$ by private entities4  7#b7 ,to  
%>e /rategic w>n+s relat+ to supply *a9s
 or supply *a9 activities1 z ! ,director
 ( ! ,national ,supply ,*a9 ,intellig5ce
 ,c5t] consid]s appropriate & consi/5t )
 security /&>ds = classifi$ in=mation & 
s5sitive propriet>y in=mation1 among--  
7,a7 ! elem5ts ( ! intellig5ce community
 7z def9$ 9 section #c ( ! ,national    
,security ,act ( #aidg 7#ej ,u4,s4,c4   
#cjjc771 compon5ts ( ! ,dep>tm5t (      
,ju/ice & ! ,dep>tm5t ( ,def5se1 !      
,f$]al ,acquisition ,security ,c\ncil1 &
 o!r ,f$]al ag5cies2  7,b7 at-risk      
indu/ry p>tn]s2 &  7,c7 gov]nm5ts (     
c\ntries t are allies ( ! ,unit$ ,/ates4
  7#c7 ,to s]ve z ! c5tral & %>$ k      

res\rce =-- 7,a7 kn[n & suspect$ ?reats 
to supply *a9 activities or supply *a9  
integrity f int]national gr\ps1         
companies1 c\ntries1 or o!r entities2 & 
7,b7 ! goals1 /rategies1 capabilities1 &
 networks ( contacts & support ( su*    
gr\ps1 companies1 c\ntries1 & o!r       
entities4  7#d7 ,to p]=m tasks assign$  
to ! ,national ,supply ,*a9 ,intellig5ce
 ,c5t] by relevant ,gov]nm5t supply *a9 
task =ces1 c\ncils1 includ+ ! ,f$]al    
,acquisition ,security ,c\ncil1 & o!r   
entities4  7e7 ,annual reports requir$  
,! ,director ( ! ,national ,supply ,*a9 
,intellig5ce ,c5t] %all annually submit 
to ,congress a report1 ) classifi$      
annexes z appropriate1 on ! /ate (      
?reats to ! security ( supply *a9s &    
supply *a9 activities = ,unit$ ,/ates   
,gov]nm5t acquisitions & repl5i%m5t z ( 
! date ( ! submittal ( ! report4  7f7   
,fund+ ,am\nts us$ to c>ry out ?is      
section %all be d]iv$ f am\nts          
appropriat$ or o!rwise made available = 
! ,national ,intellig5ce ,program 7z    

def9$ 9 section #c ( ! ,national        
,security ,act ( #aidg 7#ej ,u4,s4,c4   
#cjjc774  4  7b7 ,cl]ical am5dm5t ,!    
table ( cont5ts 9 section #a7;b7 ( su*  
,act is am5d$ by ins]t+ aft] ! item     
relat+ to section #ijd ! foll[+ new     
item3  ,sec4 #ije4 ,national ,supply    
,*a9 ,intellig5ce ,c5t]4  4  7c7 ,s5se (
 ,congress ,x is ! s5se ( ,congress t ! 
,director ( ! ,national ,supply ,*a9    
,intellig5ce ,c5t] %\ld implem5t !      
recomm5dations submitt$ "u section      
#c7;b77#a74  #e4 ,inve/m5t 9 supply *a9 
security "u ,def5se ,production ,act (  
#aiej  7a7 ,9 g5]al ,section #cjc ( !   
,def5se ,production ,act ( #aiej 7#ej   
,u4,s4,c4 #decc7 is am5d$ by add+ at !  
end ! foll[+3  7h7 ,inve/m5t 9 supply   
*a9 security  7#a7 ,9 g5]al ,! ,presid5t
 may make available to an eligible      
entity describ$ 9 p>agraph 7#b7 paym5ts 
to increase ! security ( supply *a9s &  
supply *a9 activities1 if ! ,presid5t   
c]tifies to ,congress n less ?an #cj    
days be=e mak+ su* a paym5t t ! paym5t  

is 9 ! national security int]e/s ( !    
,unit$ ,/ates4  7#b7 ,eligible entity   
,an eligible entity describ$ 9 ?is      
p>agraph is an entity t-- 7,a7 is       
organiz$ "u ! laws ( ! ,unit$ ,/ates or 
any jurisdiction )9 ! ,unit$ ,/ates2 &  
7,b7 produces-- 7i7 "o or m critical    
compon5ts2  7ii7 critical te*nology2 or 
7iii7 "o or m products = ! increas$     
security ( supply *a9s or supply *a9    
activities4  7#c7 ,regulations  7,a7 ,9 
g5]al ,n lat] ?an #ij days aft] ! date (
 ! enactm5t ( ! ,manufactur+1 ,inve/m5t1
 & ,controls ,review = ,comput] ,h>dw>e1
 ,intellectual ,prop]ty1 & ,supply ,act 
( #bjai1 ! ,presid5t %all prescribe     
regulations sett+ =? def9itions = ! t]ms
 supply *a9 & supply *a9 activities = ! 
purposes ( ?is subsection4  7,b7 ,scope 
( def9itions ,! def9itions requir$ by   
subp>agraph 7,a7-- 7i7 %all encompass-- 
7,i7 ! organization1 p1 activities1     
in=mation1 & res\rces involv$ 9 !       
deliv]y & op]ation ( a product or s]vice
 us$ by ! ,gov]nm5t2 or  7,,ii7 critical

 infra/ructure z def9$ 9 ,presid5tial   
,policy ,directive #ba 7,febru>y #ab1   
#bjac2 relat+ to critical infra/ructure 
security & resili5ce72 &  7ii7 may      
include v>iations = specific sectors or 
,gov]nm5t functions4  4