,,ii #aag? ,,congress #a/ ,session ,s4 #cdjh ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,decemb] #ae1 #bjba,mr4 ,oss(f introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ,a ,,bill ,to am5d *apt] #cf ( title #dd1 ,unit$ ,/ates ,code1 to require report+ reg>d+ ! security ( cl\d comput+ products & s]vices4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,f$]al ,cl\d ,risk ,managem5t ,improvem5ts ,act4 #b4 ,report+ reg>d+ security ( cl\d comput+ products & s]vices 7a7 ,9 g5]al ,*apt] #cf ( title #dd1 ,unit$ ,/ates ,code1 is am5d$ by add+ at ! end ! foll[+3 #cfjg4 ,report+ reg>d+ security ( cl\d comput+ products & s]vices 7a7 ,def9itions ,9 ?is section3 7#a7 ,ag5cy ,! t]m ag5cy has ! mean+ giv5 ! t]m 9 section #cejb4 7#b7 ,cl\d comput+ ,! t]m cl\d comput+ has ! mean+ giv5 ! t]m 9 ,special ,publication #hjj-ade ( ! ,national ,in/itute ( ,/&>ds & ,te*nology1 or any successor docum5t4 7#c7 ,cl\d s]vice provid] ,! t]m cl\d s]vice provid] means an entity (f]+ cl\d comput+ products or s]vices to ag5cies4 7b7 ,report+ ,n lat] ?an #a ye> aft] ! date ( enactm5t ( ?is section1 & annually !reaft]1 ! ,adm9i/rator ( ,g5]al ,s]vices %all submit to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate & ! ,committee on ,ov]sight & ,re=m ( ! ,h\se ( ,repres5tatives a report t includes a review ( measures tak5 "u ! ,f$]al ,risk & ,au?orization ,managem5t ,program1 or any successor !reto1 to ensure ! security ( data /or$ or process$ by cl\d s]vice provid]s1 :i* may include-- 7#a7 geolocation re/rictions = provid$ products or s]vices2 7#b7 disclosures ( =eign elem5ts ( supply *a9s ( acquir$ products or s]vices2 7#c7 regul> disclosures ( own]%ip ( cl\d s]vice provid]s by =eign entities2 & 7#d7 encryption requirem5ts = data process$1 /or$1 or transmitt$ by cl\d s]vice provid]s4 4 7b7 ,con=m+ am5dm5t ,! table ( sections = *apt] #cf ( title #dd1 ,unit$ ,/ates ,code1 is am5d$ by add+ at ! end ! foll[+3 #cfjg4 ,report+ reg>d+ security ( cl\d comput+ products & s]vices4 4