,,ii ,calendar ,no4 #gca #aahth ,,congress #b;d ,session ,s4 #bhga ,report ,no4 #aah-caa ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,september #bj1 #bjbc,mr4 ,daines 7for himself1 ,ms4 ,rosen1 and ,mr4 ,peters7 introduced the following bill2 which was read twice and referred to the ,committee on ,homeland ,security and ,governmental ,affairs ,december #ai 7legislative day1 ,december #af71 #bjbd,reported by ,mr4 ,peters1 with an amendment,strike out all after the enacting clause and insert the part printed in italic ,a ,,bill ,to advance ,federal ,government innovation through the implementation and use of multi-cloud computing software technology1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,multi-,cloud ,innovation and ,advancement ,act of #bjbc4 #b4 ,definitions ,in this ,act3 7#a7 ,agency ,the term agency has the meaning given the term in section #cejb of title #dd1 ,united ,states ,code4 7#b7 ,cloud computing ,the term cloud computing has the meaning given the term in ,special ,publication #hjj-ade of the ,national ,institute of ,standards and ,technology1 or any successor document4 7#c7 ,comptroller ,general ,the term ,comptroller ,general means the ,comptroller ,general of the ,united ,states4 7#d7 ,director ,the term ,director means the ,director of the ,office of ,management and ,budget4 7#e7 ,information and communications technology ,the term information and communications technology-- 7,a7 has the meaning given the term in subpart #b4aja of the ,federal ,acquisition ,regulation1 or any successor regulation2 and 7,b7 includes associated services4 7#f7 ,multi-cloud technology ,the term multi-cloud technology means architecture and services that allow for data1 application1 and program portability1 usability1 and interoperability between infrastructure1 platforms1 and hosted applications of multiple cloud computing vendors and between public1 private1 and edge cloud environments in a manner that securely delivers operational and management consistency1 comprehensive visibility1 and resiliency4 7#g7 ,relevant committees of ,congress ,the term relevant committees of ,congress means the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate and the ,committee on ,oversight and ,accountability of the ,house of ,representatives4 #c4 ,use of multi-cloud technology 7a7 ,in general ,not later than #a year after the date of enactment of this ,act1 the ,director1 in consultation with the ,administrator of ,general ,services1 the ,director of the ,national ,institute of ,standards and ,technology1 the ,secretary of ,homeland ,security1 the ,administrator of the ,united ,states ,digital ,service1 and the ,administrator of the ,office of ,electronic ,government1 shall-- 7#a7 identify and evaluate any impediments to the adoption of multi-cloud technology by agencies2 7#b7 identify best practices for how agencies can implement multi-cloud technology to allow for data portability and interoperability across multiple cloud computing vendors2 7#c7 evaluate the adoption by agencies of cybersecurity frameworks to support multi-cloud technology2 and 7#d7 develop written guidance for agencies based on the results of the identification described in paragraph 7#b7 that-- 7,a7 describes how agencies should use multi-cloud technology to allow for applications1 data1 and programs to be portable and interoperable between public1 private1 and edge cloud environments2 and 7,b7 outlines a roadmap for the implementation of multi-cloud technology across agencies not later than ,january #a1 #bjbe4 7b7 ,briefing ,not later than #a year after the date of enactment of this ,act1 the ,director shall submit to the relevant committees of ,congress-- 7#a7 a copy of the written guidance developed under subsection 7a77#d72 7#b7 a briefing on the implementation of multi-cloud technology by agencies2 and 7#c7 any recommendations relating to the expansion or extension of the implementation described in paragraph 7#b74 #d4 ,workforce development study and technical capabilities assessment 7a7 ,in general ,not later than #a year after the date of enactment of this ,act1 the ,comptroller ,general shall submit to ,congress and make publicly available a report that-- 7#a7 assesses the state of the digital skills and expertise gap within the ,federal workforce relating to information and communications technology1 with particular attention to the skills and expertise gap relating to cloud computing and multi-cloud technology2 7#b7 assesses the capability of the ,federal acquisition workforce to effectively research1 solicit1 evaluate1 acquire1 and manage multi-cloud technology from vendors1 with particular attention to flexible or modular contracting practices that facilitate the inherently complex and dynamic nature of multi-cloud technology procurement2 7#c7 estimates any costs associated with additional ,federal workforce training as a result of the increased adoption of multi-cloud technologies2 and 7#d7 includes any recommendations to address any gap identified as a result of the assessment described in paragraph 7#a7 relating to-- 7,a7 ,federal workforce development activities1 including training1 certifications1 staffing levels1 and partnerships2 and 7,b7 policies and hiring practices for agencies4 7b7 ,technical assessment ,not later than #a year after the date of enactment of this ,act1 the ,comptroller ,general shall submit to ,congress and make publicly available a report that-- 7#a7 assesses the technical capabilities of existing agency networks to support multi-cloud technology2 7#b7 evaluates any technical capability impediments of agencies that delay the adoption of multi-cloud technology2 and 7#c7 includes any recommendations relating to policies and best practices for agencies to address any impediments identified as a result of the assessment described in paragraph 7#a7 and the evaluation described in paragraph 7#b74 #e4 ,report to ,congress ,not later than #b years after the date of enactment of this ,act1 the ,comptroller ,general shall submit to ,congress and make publicly available a report assessing how agencies have implemented the guidance developed under section #c7;a77#d7 to deploy and secure multi-cloud technology architecture that includes multiple cloud computing software vendors4 #a4 ,short title ,this ,act may be cited as the ,multi-,cloud ,innovation and ,advancement ,act of #bjbc4 #b4 ,definitions ,in this ,act3 7#a7 ,agency ,the term agency has the meaning given the term in section #cejb of title #dd1 ,united ,states ,code4 7#b7 ,cloud computing ,the term cloud computing has the meaning given the term in ,special ,publication #hjj-ade of the ,national ,institute of ,standards and ,technology1 or any successor document4 7#c7 ,comptroller ,general ,the term ,comptroller ,general means the ,comptroller ,general of the ,united ,states4 7#d7 ,director ,the term ,director means the ,director of the ,office of ,management and ,budget4 7#e7 ,information and communications technology ,the term information and communications technology-- 7,a7 has the meaning given the term in subpart #b4aja of the ,federal ,acquisition ,regulation1 or any successor regulation2 and 7,b7 includes associated services4 7#f7 ,multi-cloud technology ,the term multi-cloud technology has the meaning given the term by the ,director of the ,national ,institute of ,standards and ,technology pursuant to section #f7;a74 7#g7 ,relevant committees of ,congress ,the term relevant committees of ,congress means the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate and the ,committee on ,oversight and ,accountability of the ,house of ,representatives4 #c4 ,study and guidelines for voluntary agency use of multi-cloud technology 7a7 ,in general ,not later than #a year after the date of enactment of this ,act1 the ,director shall-- 7#a7 study the use of multi-cloud technology by agencies2 7#b7 identify the extent to which agencies use multi-cloud computing technology2 7#c7 identify1 among agencies that use multi-cloud technology-- 7,a7 best practices1 including for security1 portability1 and interoperability across multiple cloud computing vendors2 7,b7 best cybersecurity practices and frameworks1 including cloud native security solutions1 to support multi-cloud technology2 7,c7 lessons learned from adoption of multi-cloud technologies by agencies2 and 7,d7 use cases of multi-cloud technology by agencies2 7#d7 develop a cost-benefit analysis of agencies transitioning to multi-cloud technology compared to the existing cloud computing systems of those agencies2 and 7#e7 provide to the relevant committees of ,congress a briefing on the plans and methodologies of the ,director for carrying out this subsection and subsection 7b74 7b7 ,best practices ,not later than #a year after the date of the completion of the study required under subsection 7a77#a71 the ,director shall compile and make available to agencies the information identified under subsection 7a77#c7 to assist agencies that consider adopting or choose to adopt multi-cloud technology4 7c7 ,briefing ,not later than #edj days after the date of enactment of this ,act1 the ,director shall submit to the relevant committees of ,congress the findings of the study required under subsection 7a77#a71 including any legislative recommendations to ensure the safe and secure voluntary adoption of multi-cloud technology by agencies4 #d4 ,workforce development study and technical capabilities assessment ,not later than #a year after the date of enactment of this ,act1 the ,comptroller ,general shall submit to ,congress and make publicly available a report that-- 7#a7 assesses the state of the digital skills and expertise gap within the ,federal workforce relating to information and communications technology1 including cloud computing and multi-cloud technology2 7#b7 assesses-- 7,a7 the capability of the ,federal acquisition workforce to effectively research1 solicit1 evaluate1 acquire1 and securely procure and manage multi-cloud technology from vendors1 with particular attention to flexible or modular contracting practices that facilitate the inherently complex and dynamic nature of multi-cloud technology procurement2 and 7,b7 any gaps in the ,federal acquisition workforce with respect to the tasks described in subparagraph 7,a72 7#c7 assesses the capability of the ,federal information technology workforce to effectively architect1 deploy1 manage1 and secure multi-cloud technology from vendors1 with particular attention to technical practices that focus on interoperability1 monitoring1 and optimization of the multi-cloud environment2 7#d7 estimates any costs associated with additional ,federal workforce training as a result of the increased adoption of multi-cloud technologies2 and 7#e7 includes any recommendations to address any gap identified as a result of the assessment described in paragraph 7#a7 relating to-- 7,a7 ,federal workforce development activities1 including training1 certifications1 staffing levels1 and partnerships2 and 7,b7 policies and hiring practices for agencies4 #e4 ,report to ,congress ,not later than #b years after the date of enactment of this ,act1 the ,comptroller ,general shall submit to ,congress and make publicly available a report assessing-- 7#a7 the state of cloud technology adoption within the ,federal ,government as of the date of enactment of this ,act2 7#b7 whether and to what extent the use of multi-cloud technology has resulted in flexibility1 cost savings1 and reduced cybersecurity risk2 7#c7 circumstances that are favorable or not favorable for adoption by agencies of multi-cloud technology2 7#d7 the technical and other capabilities necessary for the voluntary adoption of multi-cloud technology by agencies2 7#e7 cybersecurity risks and benefits specific to multi-cloud technology1 including best practices for agencies or entities looking to use multi-cloud technology to mitigate identified risks2 and 7#f7 a cost-benefit analysis of agencies transitioning to multi-cloud technology compared to the existing cloud computing systems of those agencies4 #f4 ,multi-cloud technology definition 7a7 ,in general ,not later than #abj days after the date of enactment of this ,act1 the ,director of the ,national ,institute of ,standards and ,technology shall publish a definition of multi-cloud technology for the purpose of this ,act4 7b7 ,considerations ,in publishing the definition required under subsection 7a71 the ,director of the ,national ,institute of ,standards and ,technology shall consider input from stakeholders and industry leaders4 7c7 ,review2 updates ,the ,director of the ,national ,institute of ,standards and ,technology shall periodically review and1 if necessary1 update and republish the definition required under subsection 7a7 to reflect advancements in technology or industry practices4 #g4 ,no additional funds ,no additional amounts are authorized to be appropriated to carry out this ,act4 ,december #ai 7legislative day1 ,december #af71 #bjbd,reported with an amendment