,i #aah? ,,congress #a/ ,session ,h4 ,r4 #fbef ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,novemb] #g1 #bjbc ,mr4 ,baird introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,=eign ,affairs ,a ,,bill ,to require t ! ,*ief ,in=mation ,(fic] ( ! ,bureau ( ,in=mation ,res\rces submit an annual report t li/s all ! in=mation te*nology procurem5t aw>ds & contracts t 7 aw>d$ ov] #aj1jjj1jjj4 #a4 ,cyb]security prioritization 9 in=mation te*nology procurem5t 7a7 ,s5se ( congress ,x is ! s5se ( ,congress t-- 7#a7 ! ,dep>tm5t has n suffici5tly emphasiz$ cyb]security 9 its op]ations or 9 its procurem5t ( in=mation te*nology1 & t ^! %ortcom+s h contribut$ to num]\s cyb]security incid5ts at ! ,dep>tm5t2 & 7#b7 ! ,dep>tm5t %\ld prioritize1 to ! highe/ level & to a great] ext5t ?an x already does1 ! m9imization ( cyb]security risks 9 its procurem5t ( in=mation te*nology4 7b7 ,annual report ,! ,*ief ,in=mation ,(fic] 9 ! ,bureau ( ,in=mation ,res\rces ,managem5t %all submit to ! appropriate congressional committees an annual report :i*-- 7#a7 describes all ,dep>tm5t in=mation te*nology procurem5t contracts aw>d$ 9 ! ye> prior to ! issuance ( ! report1 includ+ ! "n ( ! aw>dee & ! in=mation te*nology !y 7 contract$ to procure2 & 7#b7 = all ,dep>tm5t in=mation te*nology procurem5t contracts aw>d$ 9 ! ye> prior to ! issuance ( ! report ) contract price exce$+ #aj1jjj1jjj-- 7,a7 details ! cyb]security risks :i* h be5 or w be creat$ by ! in=mation te*nology procur$ or int5d$ to be procur$ "u ! contract1 includ+ ! ,dep>tm5t's /rategy = mitigat+ ^! risks2 7,b7 ju/ifies ! ,dep>tm5t's *oice to aw>d ! contract to its p>ticul> aw>dee 9 light ( ^? cyb]security risks2 & 7,c7 ju/ifies ! ,dep>tm5t's *oice to procure su* in=mation te*nology 9 light ( ^? cyb]security risks4 7c7 ,def9itions ,9 ?is ,act3 7#a7 ,appropriate congressional committees ,! t]m appropriate congressional committees means ! ,h\se ,committee on ,=eign ,affairs & ! ,s5ate ,committee on ,=eign ,relations4 7#b7 ,cyb]security incid5t ,! t]m cyb]security incid5t has ! mean+ giv5 ! t]m incid5t 9 section #ceeb ( title #dd1 ,unit$ ,/ates ,code4 7#c7 ,cyb]security risk ,! t]m cyb]security risk has ! mean+ giv5 t t]m 9 section #bbjj ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fej71 except t x ref]s exclusively to cyb]security risks to ! ,dep>tm5t's in=mation & in=mation sy/ems4 7#d7 ,dep>tm5t ,! t]m ,dep>tm5t means ! ,unit$ ,/ates ,dep>tm5t ( ,/ate4 7#e7 ,in=mation sy/em ,! t]m in=mation sy/em has ! mean+ giv5 t t]m 9 section #cejb ( title #dd1 ,unit$ ,/ates ,code4 7#f7 ,in=mation te*nology ,! t]m in=mation te*nology has ! mean+ giv5 t t]m 9 section #aaaja ( title #dj1 ,unit$ ,/ates ,code4