,,ii #aag? ,,congress #a/ ,session ,s4 #adai ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,april #bh1 #bjba,mr4 ,hawley introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,arm$ ,s]vices ,a ,,bill ,to require ! ,secret>y ( ,def5se to support & provide inc5tives = dome/ic manufactur+ ( pr9t$ circuit bo>ds1 to id5tify national security risks 9 pr9t$ circuit bo>ds import$ f c]ta9 =eign c\ntries1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,protect+ ,critical ,bo>ds & ,electronics ,?r\gh ,transp>5cy & ,endur+ ,re9ve/m5t ,act ( #bjba or ! ,,pcbett] ,act ( #bjba4 #b4 ,e/abli%m5t ( ,electronics ,supply ,*a9 ,fund & assi/ance & inc5tives = dome/ic manufactur+ ( pr9t$ circuit bo>ds 7a7 ,e/abli%m5t ( ,electronics ,supply ,*a9 ,fund ,!re is e/abli%$ 9 ! ,treasury ( ! ,unit$ ,/ates a tru/ fund to be kn[n z ! ,electronics ,supply ,*a9 ,fund 79 ?is section ! ,fund74 7b7 ,cont5ts ( ,fund 7#a7 ,9 g5]al ,! ,fund %all consi/s ( su* am\nts z may be appropriat$ = deposit 9 ! ,fund4 7#b7 ,availability 7,a7 ,9 g5]al ,am\nts deposit$ 9 ! ,fund %all rema9 available ?r\gh ! end ( ! t5? fiscal ye> beg9n+ aft] ! date on :i* funds are fir/ appropriat$ to ! ,fund4 7,b7 ,rema9d] to treasury ,any am\nts rema9+ 9 ! ,fund aft] ! date specifi$ 9 subp>agraph 7,a7 %all be deposit$ 9 ! g5]al fund ( ! ,treasury4 7c7 ,use ( fund ,am\nts deposit$ 9 ! ,fund %all be available to ! ,secret>y ( ,def5se-- 7#a7 to fund ! con/ruction1 expansion1 or mod]nization ( facilities to develop or manufacture semiconductors1 microelectronics1 advanc$ electronic packag+1 & pr9t$ circuit bo>ds2 7#b7 to c>ry out subsection 7d72 & 7#c7 to c>ry out section #d7;a74 7d7 ,specific activities requir$ ,us+ am\nts f ! ,fund1 ! ,secret>y ( ,def5se1 9 consultation ) ! ,secret>y ( ,comm]ce1 ! ,secret>y ( ,homel& ,security1 ! ,director ( ,national ,intellig5ce1 & su* o!r (ficials z ! ,secret>y ( ,def5se consid]s appropriate1 %all-- 7#a7 promote & deploy te*nology1 includ+ microelectronics1 pr9t$ circuit bo>ds1 semiconductors1 & relat$ te*nologies s z to create a comm]cially competitive electronics indu/ry 9 ! ,unit$ ,/ates capable ( meet+ ,unit$ ,/ates national security ne$s2 7#b7 e/abli% production & manufactur+ sites = ! te*nologies describ$ 9 p>agraph 7#a72 & 7#c7 e/abli% security /&>ds necess>y = ! implem5tation (-- 7,a7 ?is ,act2 7,b7 section #hhi ( ! ,john ,s4 ,mc,cain ,national ,def5se ,au?orization ,act = ,fiscal ,ye> #bjai 7,public ,law #aae-bcb2 #acb ,/at4 #aiag72 7,c7 section #bbd ( ! ,national ,def5se ,au?orization ,act = ,fiscal ,ye> #bjbj 7,public ,law #aaf-ib2 #aj ,u4,s4,c4 #bcjb note72 & 7,d7 section #hda ( ! ,william ,m4 7,mac7 ,?ornb]ry ,national ,def5se ,au?orization ,act = ,fiscal ,ye> #bjba 7,public ,law #aaf-bhc74 7e7 ,pr9t$ circuit bo>d manufactur+ z qualify+ capability ,! ,secret>y ( ,def5se %all consid] pr9t$ circuit bo>d manufactur+ z a qualify+ capability :5 mak+ funds available = ! con/ruction1 expansion1 or mod]nization ( dome/ic developm5t or manufactur+ capabilities = semiconductors or electronic packag+4 #c4 ,requirem5t t c]ta9 provid]s ( sy/ems to ,dep>tm5t ( ,def5se disclose ! s\rce ( pr9t$ circuit bo>ds :5 s\rc$ f c]ta9 c\ntries 7a7 ,disclosure ,! ,secret>y ( ,def5se %all require any provid] ( a cov]$ sy/em to provide to ! ,dep>tm5t ( ,def5se1 along ) deliv]y ( ! cov]$ sy/em1 a li/ ( ! pr9t$ circuit bo>ds 9 ! cov]$ sy/em t includes1 = ea* pr9t$ circuit bo>d1 an atte/ation ( :e!r-- 7#a7 ! pr9t$ circuit bo>d 0 p>tially or fully manufactur$ & assembl$ 9 a cov]$ nation2 7#b7 ! pr9t$ circuit bo>d 0 fully manufactur$ & assembl$ outside ( a cov]$ nation2 or 7#c7 ! provid] _c det]m9e :]e ! pr9t$ circuit bo>d 0 manufactur$ & assembl$4 7b7 ,regulations ,n lat] ?an #ij days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y %all promulgate su* regulations z are necess>y to c>ry out ?is section4 7c7 ,def9itions ,9 ?is section3 7#a7 ,! t]m cov]$ nation includes ! foll[+3 7,a7 ,! ,p's ,republic ( ,*9a4 7,b7 ,! ,russian ,f$]ation4 7,c7 ,! ,democratic ,p's ,republic ( ,nor? ,korea4 7,d7 ,! ,islamic ,republic ( ,iran4 7#b7 ,! t]m cov]$ sy/em means any item1 includ+ comm]cial items & comm]cially available (f-!-%elf items1 not)/&+ section #cdeb ( title #aj1 ,unit$ ,/ates ,code1 z r$esignat$ by section #ahba7;a77#a7 ( ! ,william ,m4 7,mac7 ,?ornb]ry ,national ,def5se ,au?orization ,act = ,fiscal ,ye> #bjba 7,public ,law #aaf-bhc71 or sections #aijf & #aijg ( title #da1 ,unit$ ,/ates ,code1 t-- 7,a7 has an electronic compon5t2 7,b7 is provid$ to ! ,dep>tm5t ( ,def5se "u a contract t exce$s ! simplifi$ acquisition ?re%old2 & 7,c7 transmits or /ores in=mation includ+-- 7i7 telecommunications2 7ii7 data communications & /orage1 includ+ s]v]s1 swit*es1 & network+ sy/ems1 b exclud+ p]sonal data /orage devices1 p]sonal comput]s1 desktop comput]s1 tablets1 & h&held equipm5t2 7iii7 in=mation te*nology security sy/ems2 & 7iv7 any o!r sy/em t ! ,secret>y det]m9es %\ld be cov]$4 7#c7 ,! t]m manufactur$ & assembl$1 ) respect to a pr9t$ circuit bo>d1 includes all actions f ! pr9t+ ( ! pr9t$ circuit bo>d f raw mat]ials to ! integration ( ! complet$ pr9t$ circuit bo>d 9 an end item or compon5t ( an end item4 #d4 ,dep>tm5t ( ,def5se te/+ ( vuln]ability ( sy/ems ) pr9t$ circuit bo>ds f c]ta9 c\ntries & rem$iation & prev5tion ( su* vuln]abilities 7a7 ,te/+ 7#a7 ,program e/abli%m5t requir$ ,n lat] ?an "o ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,def5se %all e/abli% a program to te/ sy/ems own$ or op]at$ by ! ,dep>tm5t ( ,def5se = vuln]abilities to =eign int]f]5ce1 sabotage1 espionage1 & attack4 7#b7 ,requir$ te/+ = c]ta9 sy/ems ,?r\gh ! program e/abli%$ "u p>agraph 7#a71 ! ,secret>y %all te/ ea* sy/em ( ! ,dep>tm5t t conta9s at lea/ "o pr9t$ circuit bo>d = :i* a disclosure 0 made pursuant to section #c7;a7 & an atte/ation 0 made ) respect to p>agraph 7#a7 or 7#c7 ( su* section4 7#c7 ,me?ods ,! ,secret>y %all ensure t ! program e/abli%$ "u p>agraph 7#a7 uses1 to ! maximum ext5t practicable1 be/-9-bre$ te/+ & detection me?ods us$ by comm]cial indu/ry1 includ+-- 7,a7 p5etration te/+2 7,b7 r$ team+2 & 7,c7 inv5tory audit+4 7b7 ,rem$iation 7#a7 ,designation ,:5ev] in=m$ ( a vuln]ability 9 a sy/em "u ! program e/abli%$ "u subsection 7a77#a71 ! ,secret>y %all designate a s5ior (ficial ( ! ,dep>tm5t to rem$iate ! vuln]ability z soon z practicable4 7#b7 ,requirem5ts ,rem$iation "u p>agraph 7#a7 %all include ^? measures t ! designat$ (ficial det]m9es necess>y to l[] ! risk to acceptable levels1 includ+-- 7,a7 add+ h>dw>e or s(tw>e to isolate & conta9 any malici\s pr9t$ circuit bo>d2 7,b7 de/ruction1 deactivation1 or replacem5t ( ! sy/em conta9+ ! vuln]ability2 or 7,c7 physical modification ( ! sy/em conta9+ ! vuln]ability ?r\gh ! ins]tion ( a tru/$ pr9t$ circuit bo>d or o!r h>dw>e t does n conta9 kn[n vuln]abilities4 7#c7 ,assignm5t ( co/s 7,a7 ,det]m9ation ,:5ev] a vuln]ability is f\nd 9 a sy/em f a contractor ?r\gh ! program e/abli%$ "u subsection 7a77#a71 ! ,secret>y ( ,def5se %all det]m9e :e!r ! contractor %\ld reasonably h discov]$ ! vuln]ability prior to deliv]y ( ! sy/em to ! ,dep>tm5t4 7,b7 ,paym5t by contractor ,if1 pursuant to subp>agraph 7,a71 ! ,secret>y det]m9es t a contractor %\ld reasonably h discov]$ ! vuln]ability prior to deliv]y to ! ,dep>tm5t1 ! ,secret>y may )hold future paym5ts to ! contractor 9 an am\nt n to exce$ ! am\nt exp5d$ by ! ,dep>tm5t on rem$iation ( ! affect$ sy/em4 7,c7 ,presumption 7i7 ,9 g5]al ,if ! ,secret>y det]m9es t a vuln]ability id5tifi$ ?r\gh ! program e/abli%$ "u subsection 7a77#a7 is ! result ( any pr9t$ circuit bo>d t ! contractor import$ f ! ,p's ,republic ( ,*9a aft] ,decemb] #ca1 #bjba1 ! ,secret>y %all presume t ! contractor reasonably %\ld h discov]$ ! vuln]ability prior to deliv]y to ! ,dep>tm5t4 7ii7 ,rebuttal all[$ ,! contractor may rebut a presumption "u clause 7i7 ) a %[+ ( te*nical impossibility4 7c7 ,prev5tion ,n lat] ?an "o ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y %all promulgate su* regulations z ! ,secret>y consid]s necess>y to require contractors sell+ goods or s]vices to ! ,dep>tm5t t include pr9t$ circuit bo>ds to und]take su* due dilig5ce z ! ,secret>y consid]s appropriate to prev5t ! occurr5ce ( vuln]abilities 9 su* goods & s]vices1 includ+-- 7#a7 c]tification ( ! own]%ip1 managem5t1 & security ( subcontractors2 7#b7 conduct+ p5etration te/+1 r$ team+ ex]cises1 & o!r simulat$ attacks aga9/ ! good or s]vice2 & 7#c7 compliance ) ! ,cyb]security ,maturity ,model ,c]tification1 or successor model c]tification4 7d7 ,annual reports 7#a7 ,9 g5]al ,n lat] ?an ,decemb] #ca ( ea* ye>1 ! ,secret>y ( ,def5se %all submit to ! congressional def5se committees a report on ! activities c>ri$ out "u ?is section dur+ ! prec$+ fiscal ye>4 7#b7 ,cont5ts ,ea* report submitt$ "u p>agraph 7#a7 %all include1 = ! p]iod cov]$ by ! report1 ! foll[+3 7,a7 ,! numb] ( sy/ems te/$ = vuln]abilities4 7,b7 ,! numb] ( sy/ems id5tifi$ z hav+ a vuln]ability4 7,c7 ,! numb] ( sy/ems t ! ,dep>tm5t has yet to te/ "u ?is section4 7,d7 ,! id5tity ( any contractors t h be5 id5tifi$ z fail+ to reasonably discov] a vuln]ability 9 a good or s]vice provid$ to ! ,dep>tm5t ( ,def5se4 7,e7 ,su* o!r in=mation z ! ,secret>y consid]s appropriate4 7e7 ,congressional def5se committees def9$ ,9 ?is section1 ! t]m congressional def5se committees has ! mean+ giv5 t t]m 9 section #aja7;a7 ( title #aj1 ,unit$ ,/ates ,code4