,i  #aag? ,,congress  #a/ ,session  ,h4 
,r4 #dfaa  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,july #ba1 #bjba,mr4  
,torres ( ,new ,york 7= himself & ,mr4  
,g>b>9o7 introduc$ ! foll[+ bill2 :i* 0 
ref]r$ to ! ,committee on ,homel&       
,security  ,a ,,bill  ,to direct !      
,secret>y ( ,homel& ,security to issue  
guidance ) respect to c]ta9 in=mation & 
communications te*nology or s]vices     
contracts1 & = o!r purposes4  #a4 ,%ort 
title ,?is ,act may be cit$ z ! ,,dhs   
,s(tw>e ,supply ,*a9 ,risk ,managem5t   
,act ( #bjba4  #b4 ,dep>tm5t ( ,homel&  
,security guidance ) respect to c]ta9   
in=mation & communications te*nology or 
s]vices contracts  7a7 ,guidance ,!     
,secret>y ( ,homel& ,security1 act+     
?r\gh ! ,"u ,secret>y1 %all issue       
guidance ) respect to new & exi/+ cov]$ 
contracts4  7b7 ,new cov]$ contracts ,9 
develop+ guidance "u subsection 7a71 )  
respect to ea* new cov]$ contract1 z a  
condition on ! aw>d ( su* a contract1   
ea* contractor respond+ to a            

solicitation = su* a contract %all      
submit to ! cov]$ (fic]-- 7#a7 a plann$ 
bill ( mat]ials :5 submitt+ a bid       
proposal2 &  7#b7 ! c]tification &      
notifications describ$ 9 subsection 7e74
  7c7 ,exi/+ cov]$ contracts ,9 develop+
 guidance "u subsection 7a71 ) respect  
to ea* exi/+ cov]$ contract1 ea*        
contractor ) an exi/+ cov]$ contract    
%all submit to ! cov]$ (fic]-- 7#a7 !   
bill ( mat]ials us$ = su* contract1 ^u !
 reque/ ( su* (fic]2 &  7#b7 !          
c]tification & notifications describ$ 9 
subsection 7e74  7d7 ,updat+ bill (     
mat]ials ,) respect to a cov]$ contract1
 9 ! case ( a *ange to ! in=mation      
includ$ 9 a bill ( mat]ials submitt$    
pursuant to subsections 7b77#a7 &       
7c77#a71 ea* contractor %all submit to !
 cov]$ (fic] ! update to su* bill (     
mat]ials1 9 a timely mann]4  7e7        
,c]tification & notifications ,!        
c]tification & notifications ref]r$ to 9
 subsections 7b77#b7 & 7c77#b71 )       
respect to a cov]$ contract1 are !      

foll[+3 7#a7 ,a c]tification t ea* item 
li/$ on ! submitt$ bill ( mat]ials is   
free f all kn[n security vuln]abilities 
or defects id5tifi$ 9-- 7,a7 ! ,national
 ,in/itute ( ,/&>ds & ,te*nology        
,national ,vuln]ability ,database2 &    
7,b7 any database designat$ by ! ,"u    
,secret>y1 9 coord9ation ) ! ,director (
 ! ,cyb]security & ,infra/ructure       
,security ,ag5cy1 t tracks security     
vuln]abilities & defects 9 op5 s\rce or 
?ird-p>ty develop$ s(tw>e4  7#b7 ,a     
notification ( ea* security vuln]ability
 or defect1 if id5tifi$1 ?r\gh-- 7,a7 ! 
c]tification ( su* submitt$ bill (      
mat]ials requir$ "u p>agraph 7#a72 or   
7,b7 any o!r mann] ( id5tification4     
7#c7 ,a notification relat+ to ! plan to
 mitigate1 repair1 or resolve ea*       
security vuln]ability or defect li/$ 9 !
 notification requir$ "u p>agraph 7#b74 
7f7 ,en=cem5t ,9 develop+ guidance "u   
subsection 7a71 ! ,secret>y %all in/ruct
 cov]$ (fic]s ) respect to-- 7#a7 !     
processes available to su* (fic]s en=c+ 

subsections 7b7 & 7c72 &  7#b7 :5 su*   
processes %\ld be us$4  7g7 ,effective  
date ,! guidance requir$ "u subsection  
7a7 %all take effect on ! date t is #ahj
 days aft] ! date ( ! enactm5t ( ?is    
section4  7h7 ,def9itions ,9 ?is        
section3 7#a7 ,bill ( mat]ials ,! t]m   
bill ( mat]ials means a li/ ( ! p>ts &  
compon5ts ( an end product or s]vice1   
includ+1 ) respect to ea* "p & compon5t1
 in=mation relat+ to ! orig91           
composition1 integrity1 & any o!r       
in=mation z det]m9$ appropriate by ! ,"u
 ,secret>y4  7#b7 ,cov]$ contract ,! t]m
 cov]$ contract means a contract relat+ 
to ! procurem5t ( cov]$ in=mation &     
communications te*nology or s]vices = ! 
,dep>tm5t ( ,homel& ,security4  7#c7    
,cov]$ in=mation & communications       
te*nology or s]vices ,! t]m cov]$       
in=mation & communications te*nology or 
s]vices means ! t]ms-- 7,a7 in=mation   
te*nology 7z su* t]m is def9$ 9 section 
#aaaja7f7 ( title #dj1 ,unit$ ,/ates    
,code72  7,b7 in=mation sy/em 7z su* t]m

 is def9$ 9 section #cejb7h7 ( title    
#dd1 ,unit$ ,/ates ,code72  7,c7        
telecommunications equipm5t 7z su* t]m  
is def9$ 9 section #c7eb7 ( !           
,communications ,act ( #aicd 7#dg       
,u4,s4,c4 #aec7eb7772 &  7,d7           
telecommunications s]vice 7z su* t]m is 
def9$ 9 section #c7ec7 ( !              
,communications ,act ( #aicd 7#dg       
,u4,s4,c4 #aec7ec7774  7#d7 ,cov]$ (fic]
 ,! t]m cov]$ (fic] means-- 7,a7 a      
contract+ (fic] ( ! ,dep>tm5t2 &  7,b7  
any o!r (ficial ( ! ,dep>tm5t z det]m9$ 
appropriate by ! ,"u ,secret>y4  7#e7   
,s(tw>e ,! t]m s(tw>e means comput]     
programs & associat$ data t may be      
dynamically writt5 or modifi$ dur+      
execution4  7#f7 ,"u ,secret>y ,! t]m   
,"u ,secret>y means ! ,"u ,secret>y =   
,managem5t ( ! ,dep>tm5t ( ,homel&      
,security4