,,ii ,cal5d> ,no4 #efb #aag? ,,congress 
#b;d ,session  ,s4 #dfbi ,report ,no4   
#aag-baj ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$
 ,,/ates  ,july #bg1 #bjbb,ms4 ,ros5 7= 
h]self1 ,mr4 ,cornyn1 & ,mr4 ,pet]s7    
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,homel& ,security & ,gov]nm5tal ,affairs
  ,novemb] #ag1 #bjbb,report$ by ,mr4   
,pet]s1 ) amendments,omit ! "p /ruck    
?r\gh & ins]t ! "p pr9t$ 9 italic  ,a   
,,bill  ,to am5d ! ,c>l ,lev9 & ,h[>d   
,p4 ,buck ,mc,keon ,national ,def5se    
,au?orization ,act = ,fiscal ,ye> #bjae 
to modify requirem5ts relat+ to data    
c5t]s ( c]ta9 ,f$]al ag5cies1 & = o!r   
purposes4  #a4 ,%ort title ,?is ,act may
 be cit$ z ! ,f$]al ,data ,c5t]         
,enhancem5t ,act ( #bjbb4  #b4 ,f$]al   
,data ,c5t] ,consolidation ,initiative  
,am5dm5ts  7a7 ,f9d+s ,congress f9ds !  
foll[+3 7#a7 ,! /atutory au?orization = 
! ,f$]al ,data ,c5t] ,optimization      
,initiative "u section #hcd ( ! ,c>l    
,lev9 & ,h[>d ,p4 ,buck ,mc,keon        

,national ,def5se ,au?orization ,act =  
,fiscal ,ye> #bjae 7#dd ,u4,s4,c4 #cfja 
note2 ,public ,law #aac-bia7 expires at 
! end ( fiscal ye> #bjbb4  7#b7 ,!      
expiration ( ! au?orization describ$ 9  
p>agraph 7#a7 pres5ts ,congress ) an    
opportunity to review ! objectives ( !  
,f$]al ,data ,c5t] ,optimization        
,initiative to ensure t ! initiative is 
meet+ ! curr5t ne$s ( ! ,f$]al          
,gov]nm5t4  7#c7 ,! initial focus ( !   
,f$]al ,data ,c5t] ,optimization        
,initiative1 :i* 0 to consolidate data  
c5t]s & create new effici5cies1 has     
result$ 91 s9ce #bjaj-- 7,a7 !          
consolidation ( m ?an #f1jjj ,f$]al data
 c5t]s2 &  7,b7 co/ sav+s & avoidance ( 
#e1hjj1jjj1jjj4  7#d7 ,! ne$ ( ! ,f$]al 
,gov]nm5t = access to data & data       
process+ sy/ems has evolv$ s9ce ! date (
 enactm5t 9 #bjad ( subtitle ,d ( title 
,,viii ( ! ,c>l ,lev9 & ,h[>d ,p4 ,buck 
,mc,keon ,national ,def5se ,au?orization
 ,act = ,fiscal ,ye> #bjae4  7#e7 ,f$]al
 ag5cies & employees involv$ 9 mission  

critical functions increas+ly ne$       
reliable access to secure1 reliable1    
su/a9able1 & protect$ facilities to h\se
 mission critical data & data op]ations 
to meet ! imm$iate ne$s ( ! p ( ! ,unit$
 ,/ates4  7#f7 ,z ( ! date ( enactm5t ( 
?is ,act1 !re is a gr[+ ne$ = ,f$]al    
ag5cies to use data c5t]s & cl\d        
applications t meet high /&>ds =        
cyb]security1 resili5cy1 availability1 &
 su/a9ability4  7b7 ,m9imum requirem5ts 
= new data c5t]s ,section #hcd ( ! ,c>l 
,lev9 & ,h[>d ,p4 ,buck ,mc,keon        
,national ,def5se ,au?orization ,act =  
,fiscal ,ye> #bjae 7#dd ,u4,s4,c4 #cfja 
note2 ,public ,law #aac-bia7 is am5d$-- 
7#a7 9 subsection 7a71 by /rik+         
p>agraphs 7#c7 & 7#d7 & ins]t+ ! foll[+3
  7#c7 ,new data c5t] ,! t]m new data   
c5t] means a-- 7,a7 7i7 a data c5t] or a
 portion !re( t is own$1 op]at$1 or     
ma9ta9$ by a cov]$ ag5cy2 or  7ii7 to ! 
ext5t practicable1 a data c5t] or       
portion !re(-- 7,i7 t is own$1 op]at$1  
or ma9ta9$ by a contractor on behalf ( a

 cov]$ ag5cy on ! date on :i* ! contract
 betwe5 ! cov]$ ag5cy & ! contractor    
expires2 &  7,,ii7 ) respect to :i* !   
cov]$ ag5cy ext5ds ! contract1 or ent]s 
into a new contract1 ) ! contractor2 &  
7,b7 on or aft] ! date t is #ahj days   
aft] ! date ( enactm5t ( ! ,f$]al ,data 
,c5t] ,enhancem5t ,act ( #bjbb1 a data  
c5t] or portion !re( t is-- 7i7         
e/abli%$2 or  7ii7 sub/antially upgrad$ 
or exp&$4  2  7#b7 by /rik+ subsection  
7b7 & ins]t+ ! foll[+3  7b7 ,m9imum     
requirem5ts = new data c5t]s  7#a7 ,9   
g5]al ,n lat] ?an #ahj days aft] ! date 
( enactm5t ( ! ,f$]al ,data ,c5t]       
,enhancem5t ,act ( #bjbb1 ! ,adm9i/rator
 %all e/abli% m9imum requirem5ts = new  
data c5t]s 9 consultation ) !           
,adm9i/rator ( ,g5]al ,s]vices & !      
,f$]al ,*ief ,in=mation ,(fic]s ,c\ncil4
  7#b7 ,cont5ts  7,a7 ,9 g5]al ,! m9imum
 requirem5ts e/abli%$ "u p>agraph 7#a7  
%all include requirem5ts relat+ to-- 7i7
 ! availability ( new data c5t]s2  7ii7 
! use ( new data c5t]s2  7iii7 ! use (  

su/a9able en]gy s\rces2  7iv7 uptime    
p]c5tage2  7v7 protections aga9/ p[]    
failures1 includ+ on-site en]gy g5]ation
 & access to multiple transmission pa?s2
  7vi7 protections aga9/ physical       
intrusions & natural disa/]s2  7vii7    
in=mation security protections requir$  
by sub*apt] ,,ii ( *apt] #ce ( title    
#dd1 ,unit$ ,/ates ,code1 & o!r         
applicable law & policy2 &  7viii7 any  
o!r requirem5ts ! ,adm9i/rator det]m9es 
appropriate4  7,b7 ,consultation ,9     
e/abli%+ ! requirem5ts describ$ 9       
subp>agraph 7,a77vii71 ! ,adm9i/rator   
%all consult ) ! ,director ( !          
,cyb]security & ,infra/ructure ,security
 ,ag5cy & ! ,national ,cyb] ,director4  
7#c7 ,use ( exi/+ /&>ds ,! ,adm9i/rator 
may incorporate ! m9imum requirem5ts    
e/abli%$ "u p>agraph 7#a7 into !        
appropriate requirem5ts ( any ag5cy data
 c5t] exi/+ z ( ! date ( enactm5t ( !   
,f$]al ,data ,c5t] ,enhancem5t ,act (   
#bjbb4  7#d7 ,review ( /&>ds ,!         
,adm9i/rator1 9 consultation ) !        

,adm9i/rator ( ,g5]al ,s]vices & !      
,f$]al ,*ief ,in=mation ,(fic]s ,c\ncil1
 %all review1 update1 & modify ! m9imum 
requirem5ts e/abli%$ "u p>agraph 7#a71 z
 necess>y4  7#e7 ,report on new data    
c5t]s ,dur+ ! developm5t & plann+       
lifecycle ( a new data c5t]1 if ! head (
 a cov]$ ag5cy det]m9es t ! cov]$ ag5cy 
is likely to make a managem5t or        
f9ancial decision relat+ to ! new data  
c5t]1 ! head ( ! cov]$ ag5cy %all-- 7,a7
 notify-- 7i7 ! ,adm9i/rator2  7ii7     
,committee on ,homel& ,security &       
,gov]nm5tal ,affairs ( ! ,s5ate2 &      
7iii7 ,committee on ,ov]sight & ,re=m ( 
! ,h\se ( ,repres5tatives2 &  7,b7      
describe 9 ! notification ) suffici5t   
detail h[ ! cov]$ ag5cy int5ds to comply
 ) ! m9imum requirem5ts e/abli%$ "u     
p>agraph 7#a74  7#f7 ,use ( te*nology ,9
 det]m9+ :e!r to e/abli% or cont9ue to  
op]ate a data c5t]1 ! head ( a cov]$    
ag5cy %all-- 7,a7 regul>ly assess !     
application portfolio ( ! cov]$ ag5cy & 
ensure t ea* legacy application is      

updat$1 replac$1 or mod]niz$1 z         
appropriate1 to take advantage ( mod]n  
te*nologies2 &  7,b7 prioritize &1 to ! 
greate/ ext5t possible1 lev]age         
comm]cial cl\d environm5ts r ?an        
acquir+1 ov]see+1 or manag+ cu/om data  
c5t] infra/ructure4  2 &  7#c7 9        
subsection 7c71 by /rik+ p>agraph 7#a7 &
 ins]t+ ! foll[+3  7#a7 ,9 g5]al ,! head
 ( a cov]$ ag5cy %all ov]see & manage ! 
data c5t] portfolio & ! in=mation       
te*nology /rategy ( ! cov]$ ag5cy 9     
accordance ) ,f$]al cyb]security        
guidel9es & directives1 includ+-- 7,a7  
in=mation security /&>ds & guidel9es    
promulgat$ by ! ,director ( ! ,national 
,in/itute ( ,/&>ds & ,te*nology2  7,b7  
applicable provisions f\nd )9 ! ,f$]al  
,risk & ,au?orization ,managem5t        
,program2 &  7,c7 directives issu$ by ! 
,secret>y ( ,homel& ,security "u section
 #ceec ( title #dd1 ,unit$ ,/ates ,code4
  4  7c7 ,ext5sion ( sunset ,section    
#hcd7;e7 ( ! ,c>l ,lev9 & ,h[>d ,p4     
,buck ,mc,keon ,national ,def5se        

,au?orization ,act = ,fiscal ,ye> #bjae 
7#dd ,u4,s4,c4 #cfja note2 ,public ,law 
#aac-bia7 is am5d$ by /rik+ #bjbb &     
ins]t+ #bjbe4  ,novemb] #ag1            
#bjbb,report$ ) am5dm5ts