,,ii #aahth ,,congress #b;d ,session ,s4 #dfea ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,july #aj1 #bjbd,mr4 ,cornyn 7for himself and ,mr4 ,peters7 introduced the following bill2 which was read twice and referred to the ,committee on ,homeland ,security and ,governmental ,affairs ,a ,,bill ,to require agencies to use information and communications technology products obtained from original equipment manufacturers or authorized resellers1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,securing ,america's ,federal ,equipment in ,supply ,chains ,act or the ,,safe ,supply ,chains ,act4 #b4 ,agency use of ,,it products 7a7 ,definitions ,in this section3 7#a7 ,agency ,the term agency has the meaning given the term in section #cejb of title #dd1 ,united ,states ,code4 7#b7 ,appropriate congressional committees ,the term appropriate congressional committees means the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate and the ,committee on ,oversight and ,accountability of the ,house of ,representatives4 7#c7 ,authorized reseller ,the term authorized reseller means a reseller1 after market manufacturer1 supplier1 or distributor of a covered product with a direct or prime contractual arrangement with1 or the express written authority of1 the original equipment manufacturer of the covered product to manufacture1 buy1 stock1 repackage1 sell1 resell1 repair1 service1 otherwise support1 or distribute the covered product4 7#d7 ,covered product ,the term covered product-- 7,a7 means an information and communications technology end-use hardware product or component1 including software and firmware that comprise the end-use hardware product or component2 and 7,b7 does not include-- 7i7 other software2 or 7ii7 an end-use hardware product-- 7,i7 in which there is embedded information and communications technology2 and 7,,ii7 the principal function of which is not the creation1 manipulation1 storage1 display1 receipt1 or transmission of electronic data and information4 7#e7 ,end-use product ,the term end-use product means a product ready for use by the maintainer1 integrator1 or end user of the product4 7#f7 ,information and communications technology ,the term information and communications technology-- 7,a7 has the meaning given the term in section #dgac of title #da1 ,united ,states ,code2 and 7,b7 includes information and communications technologies covered by definitions contained in the ,federal ,acquisition ,regulation1 including definitions added after the date of the enactment of this ,act by the ,federal ,acquisition ,regulatory ,council pursuant to notice and comment4 7#g7 ,original equipment manufacturer ,the term original equipment manufacturer means a company that manufactures a covered product that the company-- 7,a7 designed from self-sourced or purchased components2 and 7,b7 sells under the name of the company4 7b7 ,prohibition on procurement and use ,subject to subsection 7c7 and notwithstanding sections #aije through #aijg of title #da1 ,united ,states ,code1 the head of an agency may not procure or obtain1 renew a contract to procure or obtain1 or use a covered product that is procured from an entity other than-- 7#a7 an original equipment manufacturer2 or 7#b7 an authorized reseller4 7c7 ,waiver 7#a7 ,in general ,upon written notice to the ,director of the ,office of ,management and ,budget1 the head of an agency may waive the prohibition under subsection 7b7 with respect to a covered product if the head of the agency determines that-- 7,a7 the waiver is necessary in the interest of national security2 or 7,b7 procuring1 obtaining1 or using the covered product is necessary-- 7i7 for the purpose of scientifically valid research 7as defined in section #ajb the ,education ,sciences ,reform ,act of #bjjb 7#bj ,u4,s4,c4 #ieja772 or 7ii7 to avoid jeopardizing the performance of mission critical functions4 7#b7 ,notice ,the notice described in paragraph 7#a7-- 7,a7 shall-- 7i7 specify1 with respect to the waiver under paragraph 7#a7-- 7,i7 the justification for the waiver2 7,,ii7 any security mitigations that have been implemented2 and 7,,iii7 with respect to a waiver that necessitates a security mitigation1 the plan of action and milestones to avoid future waivers for subsequent similar purchases2 and 7ii7 be submitted in an unclassified form2 and 7,b7 may include a classified annex4 7#c7 ,duration ,with respect to a waiver for the purpose of research1 as described in paragraph 7#a77;,b77i71 the waiver shall be effective for the duration of the research identified in the waiver4 7d7 ,reports to congress 7#a7 ,in general ,not later than #a year after the date of enactment of this ,act1 and annually thereafter until the date that is #f years after the date of enactment of this ,act1 the ,director of the ,office of ,management and ,budget shall submit to the appropriate congressional committees a report that lists-- 7,a7 the number and types of covered products for which a waiver under subsection 7c77#a7 was granted during the #a-year period preceding the date of the submission of the report2 and 7,b7 the legal authority under which each waiver described in subparagraph 7,a7 was granted1 such as whether the waiver was granted pursuant to subparagraph 7,a7 or 7,b7 of subsection 7c77#a74 7#b7 ,classification of report ,each report submitted under this subsection-- 7,a7 shall be submitted in unclassified form2 and 7,b7 may include a classified annex that contains the information described in paragraph 7#a77;,b74 7e7 ,effective date ,this section shall take effect on the date that is #a year after the date of enactment of this ,act4