,i  #aag? ,,congress  #a/ ,session  ,h4 
,r4 #fafi  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,decemb] #g1 #bjba    
,ms4 ,slotk9 7= h]self & ,mr4 ,gallagh]7
 introduc$ ! foll[+ bill2 :i* 0 ref]r$  
to ! ,committee on ,arm$ ,s]vices  ,a   
,,bill  ,to direct ! ,secret>y ( ,def5se
 to e/abli% a framework relat+ to risks 
to ! def5se supply *a91 & = o!r         
purposes4  #a4 ,def5se supply *a9 risk  
assessm5t framework  7a7 ,9 g5]al ,n    
lat] ?an "o ye> aft] ! date ( ! enactm5t
 ( ?is ,act1 ! ,secret>y ( ,def5se %all 
e/abli% a framework1 :i* may be includ$ 
z "p ( a framework develop$ "u section  
#beji ( title #aj1 ,unit$ ,/ates ,code1 
& pursuant to recomm5dations provid$ "u 
section #e ( ,executive ,ord] #adjag    
7#hf ,f$4 ,reg4 #aahdi1 relat+ to       
,am]ica's supply *a9s71 to consolidate !
 in=mation relat+ to risks to ! def5se  
supply *a9 t is collect$ by ! elem5ts ( 
! ,dep>tm5t ( ,def5se to-- 7#a7 enable  
,dep>tm5t-wide risk assessm5ts ( !      
def5se supply *a92 &  7#b7 support !    

developm5t ( /rategies to mitigate risks
 to ! def5se supply *a94  7b7 ,framework
 requirem5ts ,! framework e/abli%$ "u   
subsection 7a7 %all--  7#a7 provide = ! 
collection1 managem5t1 & /orage ( data f
 ! supply *a9 risk managem5t processes (
 ! ,dep>tm5t ( ,def5se2  7#b7 provide = 
! collection ( reports on supply *a9    
risk managem5t f ! milit>y dep>tm5ts &  
,def5se ,ag5cies1 & ! dissem9ation ( su*
 reports to ! compon5ts ( ! milit>y     
dep>tm5ts & ,def5se ,ag5cies involv$ 9 !
 managem5t ( supply *a9 risk2  7#c7     
enable all elem5ts ( ! ,dep>tm5t to     
analyze ! in=mation collect$ by su*     
framework to id5tify risks to ! def5se  
supply *a92  7#d7 enable ! ,dep>tm5t    
to--  7,a7 assess ! capabilities ( =eign
 adv]s>ies 7z def9$ 9 section #h7;c7 ( !
 ,secure & ,tru/$ ,communications       
,networks ,act ( #bjai 7#dg ,u4,s4,c4   
#afjg7;c777 to affect ! def5se supply   
*a92  7,b7 analyze ! ability ( !        
indu/rial base ( ! ,unit$ ,/ates to meet
 ! ne$s ( ! def5se supply *a92  7,c7    

track global te*nology tr5ds t c\ld     
affect ! def5se supply *a91 z det]m9$ by
 ! ,secret>y ( ,def5se2 &  7,d7 assess !
 risks pos$ by em]g+ ?reats to ! def5se 
supply *a92  7#e7 support !             
id5tification ( te*nology 9 :i* !       
,dep>tm5t may inve/ to r$uce risks to ! 
def5se supply *a91 includ+ by improv+ ! 
resili5ce ( ! def5se supply2 &  7#f7    
provide =--  7,a7 a map ( ! supply *a9s 
= major end items t supports analysis1  
monitor+1 & report+ ) respect to        
high-risk subcontractors & risks to su* 
supply *a92 &  7,b7 ! use ( a cov]$     
application describ$ 9 subsection 7c7 9 
! creation ( su* map to assess risks to 
! supply *a9 = major end items by       
bus9ess sector1 v5dor1 program1 "p1 or  
te*nology4  7c7 ,cov]$ application      
describ$ ,! cov]$ application describ$ 9
 ?is subsection is a cov]$ application t
 includes ! foll[+ elem5ts3 7#a7 ,a     
c5traliz$ database t consolidates       
multiple disp>ate data s\rces into a    
s+le repository to ensure ! consi/5t    

availability ( data4  7#b7 ,c5traliz$   
report+ to all[ = effici5t mitigation & 
rem$iation ( id5tifi$ supply *a9        
vuln]abilities4  7#c7 ,broad            
int]op]ability ) o!r s(tw>e & sy/ems to 
ensure support = ! analytical           
capabilities ( us]s across ! ,dep>tm5t4 
7#d7 ,scalable te*nology to support     
multiple us]s1 access controls =        
security1 & functionality design$ =     
in=mation-%>+ & collaboration4  7d7     
,guidance ,n lat] ?an #ahj days aft] !  
framework requir$ "u subsection 7a7 is  
e/abli%$1 & regul>ly !reaft]1 !         
,secret>y ( ,def5se %all issue guidance 
on mitigat+ risks to ! def5se supply    
*a94  7e7 ,reports  7#a7 ,progress      
report ,n lat] ?an #ahj days aft] ! date
 ( ! enactm5t ( ?is ,act1 ! ,secret>y ( 
,def5se %all submit to ! congressional  
def5se committees a report on ! progress
 ( e/abli%+ ! framework z requir$ "u    
subsection 7a74  7#b7 ,f9al report ,n   
lat] ?an "o ye> aft] ! date ( ! enactm5t
 ( ?is ,act1 ! ,secret>y ( ,def5se %all 

submit to ! congressional def5se        
committees a report describ+ ! framework
 e/abli%$ "u subsection 7a7 & !         
organizational /ructure to manage &     
ov]see ! framework4  7f7 ,def9itions ,9 
?is section3 7#a7 ,cov]$ application ,! 
t]m cov]$ application means a           
s(tw>e-z-a-s]vice application t uses    
decision sci5ce1 comm]cial data1 & ma*9e
 le>n+ te*niques4  7#b7 ,def5se ,ag5cy2 
milit>y dep>tm5t ,! t]ms ,def5se ,ag5cy 
& milit>y dep>tm5t h ! mean+s giv5 su*  
t]ms 9 section #aja ( title #aj1 ,unit$ 
,/ates ,code4  7#c7 ,high-risk          
subcontractors ,! t]m high-risk         
subcontractor means a subcontractor at  
any ti] t supplies major end items = !  
,dep>tm5t ( ,def5se4  7#d7 ,major end   
item ,! t]m major end item means an item
 subject to a unique item-level         
traceability requirem5t at any "t 9 !   
life cycle ( su* item "u ,dep>tm5t (    
,def5se ,in/ruction #hcbj4jd1 titl$     
,item ,unique ,id5tification 7,,iuid7   
,/&>ds = ,tangible ,p]sonal ,prop]ty &  

dat$ ,septemb] #c1 #bjae1 or any        
successor in/ruction4