,,ii ,cal5d> ,no4 #ci #aah? ,,congress  
#a/ ,session  ,s4 #icc ,report ,no4     
#aah-ae ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ 
,,/ates  ,m>* #bb1 #bjbc,ms4 ,ros5 7=   
h]self1 ,mr4 ,cornyn1 & ,mr4 ,pet]s7    
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,homel& ,security & ,gov]nm5tal ,affairs
  ,april #bg1 #bjbc,report$ by ,mr4     
,pet]s1 )\t am5dm5t  ,a ,,bill  ,to am5d
 ! ,c>l ,lev9 & ,h[>d ,p4 ,buck ,mc,keon
 ,national ,def5se ,au?orization ,act = 
,fiscal ,ye> #bjae to modify requirem5ts
 relat+ to data c5t]s ( c]ta9 ,f$]al    
ag5cies1 & = o!r purposes4  #a4 ,%ort   
title ,?is ,act may be cit$ z ! ,f$]al  
,data ,c5t] ,enhancem5t ,act ( #bjbc4   
#b4 ,f$]al ,data ,c5t] ,consolidation   
,initiative ,am5dm5ts  7a7 ,f9d+s       
,congress f9ds ! foll[+3 7#a7 ,!        
/atutory au?orization = ! ,f$]al ,data  
,c5t] ,optimization ,initiative "u      
section #hcd ( ! ,c>l ,lev9 & ,h[>d ,p4 
,buck ,mc,keon ,national ,def5se        
,au?orization ,act = ,fiscal ,ye> #bjae 

7#dd ,u4,s4,c4 #cfja note2 ,public ,law 
#aac-bia7 expires at ! end ( fiscal ye> 
#bjbb4  7#b7 ,! expiration ( !          
au?orization describ$ 9 p>agraph 7#a7   
pres5ts ,congress ) an opportunity to   
review ! objectives ( ! ,f$]al ,data    
,c5t] ,optimization ,initiative to      
ensure t ! initiative is meet+ ! curr5t 
ne$s ( ! ,f$]al ,gov]nm5t4  7#c7 ,!     
initial focus ( ! ,f$]al ,data ,c5t]    
,optimization ,initiative1 :i* 0 to     
consolidate data c5t]s & create new     
effici5cies1 has result$ 91 s9ce #bjaj--
 7,a7 ! consolidation ( m ?an #f1jjj    
,f$]al data c5t]s2 &  7,b7 co/ sav+s &  
avoidance ( #e1hjj1jjj1jjj4  7#d7 ,! ne$
 ( ! ,f$]al ,gov]nm5t = access to data &
 data process+ sy/ems has evolv$ s9ce ! 
date ( enactm5t 9 #bjad ( subtitle ,d ( 
title ,,viii ( ! ,c>l ,lev9 & ,h[>d ,p4 
,buck ,mc,keon ,national ,def5se        
,au?orization ,act = ,fiscal ,ye> #bjae4
  7#e7 ,f$]al ag5cies & employees       
involv$ 9 mission critical functions    
increas+ly ne$ reliable access to       

secure1 reliable1 su/a9able1 & protect$ 
facilities to h\se mission critical data
 & data op]ations to meet ! imm$iate    
ne$s ( ! p ( ! ,unit$ ,/ates4  7#f7 ,z (
 ! date ( enactm5t ( ?is ,act1 !re is a 
gr[+ ne$ = ,f$]al ag5cies to use data   
c5t]s & cl\d applications t meet high   
/&>ds = cyb]security1 resili5cy1        
availability1 & su/a9ability4  7b7      
,m9imum requirem5ts = new data c5t]s    
,section #hcd ( ! ,c>l ,lev9 & ,h[>d ,p4
 ,buck ,mc,keon ,national ,def5se       
,au?orization ,act = ,fiscal ,ye> #bjae 
7#dd ,u4,s4,c4 #cfja note2 ,public ,law 
#aac-bia7 is am5d$-- 7#a7 9 subsection  
7a71 by /rik+ p>agraphs 7#c7 & 7#d7 &   
ins]t+ ! foll[+3  7#c7 ,new data c5t] ,!
 t]m new data c5t] means-- 7,a7 7i7 a   
data c5t] or a portion !re( t is own$1  
op]at$1 or ma9ta9$ by a cov]$ ag5cy2 or 
7ii7 to ! ext5t practicable1 a data c5t]
 or portion !re(-- 7,i7 t is own$1      
op]at$1 or ma9ta9$ by a contractor on   
behalf ( a cov]$ ag5cy on ! date on :i* 
! contract betwe5 ! cov]$ ag5cy & !     

contractor expires2 &  7,,ii7 ) respect 
to :i* ! cov]$ ag5cy ext5ds ! contract1 
or ent]s into a new contract1 ) !       
contractor2 &  7,b7 on or aft] ! date t 
is #ahj days aft] ! date ( enactm5t ( ! 
,f$]al ,data ,c5t] ,enhancem5t ,act (   
#bjbc1 a data c5t] or portion !re( t    
is-- 7i7 e/abli%$2 or  7ii7 sub/antially
 upgrad$ or exp&$4  2  7#b7 by /rik+    
subsection 7b7 & ins]t+ ! foll[+3  7b7  
,m9imum requirem5ts = new data c5t]s    
7#a7 ,9 g5]al ,n lat] ?an #ahj days aft]
 ! date ( enactm5t ( ! ,f$]al ,data     
,c5t] ,enhancem5t ,act ( #bjbc1 !       
,adm9i/rator %all e/abli% m9imum        
requirem5ts = new data c5t]s 9          
consultation ) ! ,adm9i/rator ( ,g5]al  
,s]vices & ! ,f$]al ,*ief ,in=mation    
,(fic]s ,c\ncil4  7#b7 ,cont5ts  7,a7 ,9
 g5]al ,! m9imum requirem5ts e/abli%$ "u
 p>agraph 7#a7 %all include requirem5ts 
relat+ to-- 7i7 ! availability ( new    
data c5t]s2  7ii7 ! use ( new data      
c5t]s2  7iii7 ! use ( su/a9able en]gy   
s\rces2  7iv7 uptime p]c5tage2  7v7     

protections aga9/ p[] failures1 includ+ 
on-site en]gy g5]ation & access to      
multiple transmission pa?s2  7vi7       
protections aga9/ physical intrusions & 
natural disa/]s2  7vii7 in=mation       
security protections requir$ by sub*apt]
 ,,ii ( *apt] #ce ( title #dd1 ,unit$   
,/ates ,code1 & o!r applicable law &    
policy2 &  7viii7 any o!r requirem5ts ! 
,adm9i/rator det]m9es appropriate4  7,b7
 ,consultation ,9 e/abli%+ ! requirem5ts
 describ$ 9 subp>agraph 7,a77vii71 !    
,adm9i/rator %all consult ) ! ,director 
( ! ,cyb]security & ,infra/ructure      
,security ,ag5cy & ! ,national ,cyb]    
,director4  7#c7 ,incorporation ( m9imum
 requirem5ts into curr5t data c5t]s ,z  
soon z practicable1 & 9 any case n lat] 
?an #ij days aft] ! ,adm9i/rator        
e/abli%es ! m9imum requirem5ts pursuant 
to p>agraph 7#a71 ! ,adm9i/rator %all   
issue guidance to ensure1 z appropriate1
 t cov]$ ag5cies incorporate ! m9imum   
requirem5ts e/abli%$ "u t p>agraph into 
! op]ations ( any data c5t] ( a cov]$   

ag5cy exi/+ z ( ! date ( enactm5t ( !   
,f$]al ,data ,c5t] ,enhancem5t ,act (   
#bjbc4  7#d7 ,review ( requirem5ts ,!   
,adm9i/rator1 9 consultation ) !        
,adm9i/rator ( ,g5]al ,s]vices & !      
,f$]al ,*ief ,in=mation ,(fic]s ,c\ncil1
 %all review1 update1 & modify ! m9imum 
requirem5ts e/abli%$ "u p>agraph 7#a71 z
 necess>y4  7#e7 ,report on new data    
c5t]s ,dur+ ! developm5t & plann+       
lifecycle ( a new data c5t]1 if ! head (
 a cov]$ ag5cy det]m9es t ! cov]$ ag5cy 
is likely to make a managem5t or        
f9ancial decision relat+ to any data    
c5t]1 ! head ( ! cov]$ ag5cy %all-- 7,a7
 notify-- 7i7 ! ,adm9i/rator2  7ii7     
,committee on ,homel& ,security &       
,gov]nm5tal ,affairs ( ! ,s5ate2 &      
7iii7 ,committee on ,ov]sight &         
,acc\ntability ( ! ,h\se (              
,repres5tatives2 &  7,b7 describe 9 !   
notification ) suffici5t detail h[ !    
cov]$ ag5cy int5ds to comply ) ! m9imum 
requirem5ts e/abli%$ "u p>agraph 7#a74  
7#f7 ,use ( te*nology ,9 det]m9+ :e!r to

 e/abli% or cont9ue to op]ate an exi/+  
data c5t]1 ! head ( a cov]$ ag5cy %all--
 7,a7 regul>ly assess ! application     
portfolio ( ! cov]$ ag5cy & ensure t ea*
 at-risk legacy application is updat$1  
replac$1 or mod]niz$1 z appropriate1 to 
take advantage ( mod]n te*nologies2 &   
7,b7 prioritize &1 to ! greate/ ext5t   
possible1 lev]age comm]cial cl\d        
environm5ts r ?an acquir+1 ov]see+1 or  
manag+ cu/om data c5t] infra/ructure4   
7#g7 ,public website  7,a7 ,9 g5]al ,!  
,adm9i/rator %all ma9ta9 a public-fac+  
website t includes in=mation1 data1 &   
explanatory /atem5ts relat+ to !        
compliance ( cov]$ ag5cies ) !          
requirem5ts ( ?is section4  7,b7        
,processes & proc$ures ,9 ma9ta9+ !     
website describ$ 9 subp>agraph 7,a71 !  
,adm9i/rator %all-- 7i7 ensure cov]$    
ag5cies regul>ly1 & n less frequ5tly ?an
 biannually1 update ! in=mation1 data1 &
 explanatory /atem5ts pos$ on ! website1
 pursuant to guidance issu$ by !        
,adm9i/rator1 relat+ to any new data    

c5t]s &1 z appropriate1 ea* exi/+ data  
c5t] ( ! cov]$ ag5cy2 &  7ii7 ensure t  
all in=mation1 data1 & explanatory      
/atem5ts on ! website are ma9ta9$ z op5 
,gov]nm5t data assets4  2 &  7#c7 9     
subsection 7c71 by /rik+ p>agraph 7#a7 &
 ins]t+ ! foll[+3  7#a7 ,9 g5]al ,! head
 ( a cov]$ ag5cy %all ov]see & manage ! 
data c5t] portfolio & ! in=mation       
te*nology /rategy ( ! cov]$ ag5cy 9     
accordance ) ,f$]al cyb]security        
guidel9es & directives1 includ+-- 7,a7  
in=mation security /&>ds & guidel9es    
promulgat$ by ! ,director ( ! ,national 
,in/itute ( ,/&>ds & ,te*nology2  7,b7  
applicable requirem5ts & guidance issu$ 
by ! ,director ( ! ,(fice ( ,managem5t &
 ,budget pursuant to section #cfad (    
title #dd1 ,unit$ ,/ates ,code2 &  7,c7 
directives issu$ by ! ,secret>y (       
,homel& ,security "u section #ceec (    
title #dd1 ,unit$ ,/ates ,code4  4  7c7 
,ext5sion ( sunset ,section #hcd7;e7 ( !
 ,c>l ,lev9 & ,h[>d ,p4 ,buck ,mc,keon  
,national ,def5se ,au?orization ,act =  

,fiscal ,ye> #bjae 7#dd ,u4,s4,c4 #cfja 
note2 ,public ,law #aac-bia7 is am5d$ by
 /rik+ #bjbb & ins]t+ #bjbf4  7d7 ,,gao 
review ,n lat] ?an #a ye> aft] ! date ( 
! enactm5t ( ?is ,act1 & annually       
!reaft]1 ! ,comptroll] ,g5]al ( ! ,unit$
 ,/ates %all review1 v]ify1 & audit !   
compliance ( cov]$ ag5cies ) ! m9imum   
requirem5ts e/abli%$ pursuant to section
 #hcd7;b77#a7 ( ! ,c>l ,lev9 & ,h[>d ,p4
 ,buck ,mc,keon ,national ,def5se       
,au?orization ,act = ,fiscal ,ye> #bjae 
7#dd ,u4,s4,c4 #cfja note2 ,public ,law 
#aac-bia7 = new data c5t]s & subsection 
7b77#c7 ( t ,act = exi/+ data c5t]s1 z  
appropriate4  ,april #bg1 #bjbc,report$ 
)\t am5dm5t