,,ii  #aai? ,,congress  #b;d ,session   
,s4 #eeih  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,septemb] #bi1         
#bjbf,mr4 ,banks introduc$ ! foll[+     
bill2 :i* 0 read twice & ref]r$ to !    
,committee on ,arm$ ,s]vices  ,a ,,bill 
,to provide = an audit & mitigation (   
cov]$ cellul> modules 9 ! ,dep>tm5t (   
,def5se sy/ems & infra/ructure4  #a4    
,%ort title ,?is ,act may be cit$ z !   
,block+ ,=eign ,cellul> ,modules 9      
,def5se ,sy/ems ,act ( #bjbf4  #b4      
,audit & mitigation ( cov]$ cellul>     
modules 9 ! ,dep>tm5t ( ,def5se sy/ems &
 infra/ructure  7a7 ,dep>tm5t ( ,def5se 
audit  7#a7 ,9 g5]al ,n lat] ?an #ahj   
days aft] ! date ( ! enactm5t ( ?is     
,act1 ! ,secret>y ( ,def5se %all        
initiate a ,dep>tm5t-wide audit to      
id5tify ! pres5ce ( cov]$ cellul>       
modules )9 cov]$ sy/ems4  7#b7 ,scope ,!
 audit requir$ "u p>agraph 7#a7 %all--  
7,a7 cov] all milit>y dep>tm5ts1        
combatant comm&s1 def5se ag5cies1 &     
,dep>tm5t ( ,def5se activities or       

programs2  7,b7 prioritize cov]$ sy/ems 
critical to milit>y mobility1 logi/ics1 
& in/allation security2  7,c7 include   
bo? gov]nm5t-own$ & contractor-op]at$   
cov]$ sy/ems connect$ to ,dep>tm5t (    
,def5se networks or access+ ,dep>tm5t ( 
,def5se in=mation2  7,d7 id5tify to !   
maximum ext5t practicable1 !            
manufactur]1 model1 firmw>e v]sion1 &   
ho/ product = ea* cov]$ cellul> module  
id5tifi$2 &  7,e7 assess ! cyb]security 
risk pos$ by ea* id5tifi$ cov]$ cellul> 
module1 includ+ data fl[s1 network      
exposure1 & pot5tial = remote access4   
7b7 ,mitigation & ,report+  7#a7 ,report
 requir$ ,n lat] ?an #a ye> aft] ! date 
( ! enactm5t ( ?is ,act1 & bi5nially    
!reaft] = a p]iod n to exce$ #f ye>s1 ! 
,secret>y %all submit to ! congressional
 def5se committees a report on ! audit &
 mitigation activities c>ri$ out "u ?is 
section4  7#b7 ,cont5ts ,ea* report     
submitt$ "u p>agraph 7#a7 %all include !
 foll[+3 7,a7 ,! prelim9>y or updat$    
f9d+s ( ! audit requir$ "u subsection   

7b74  7,b7 ,a description ( ongo+ &     
plann$ mitigation measures1 includ+--   
7i7 rip-&-replace programs2  7ii7       
accel]at$ dive/iture or retirem5t (     
legacy assets2  7iii7 network           
segm5tation1 isolation1 or comp5sat+    
cyb]security or eng9e]+ controls2  7iv7 
firmw>e or s(tw>e rem$iation2 &  7v7    
supply-*a9 sub/itution ) tru/$          
alt]natives4  7,c7 ,co/ e/imates1       
timel9es1 & res\rce requirem5ts = ea*   
category ( mitigation measure describ$ 9
 subp>agraph 7,b74  7,d7 ,an            
id5tification ( any /atutory1           
regulatory1 or acquisition b>ri]s to    
complet+ mitigation4  7,e7              
,recomm5dations = additional legislative
 au?orities1 if any1 ne$$ to complete   
mitigation4  7#c7 ,=m ,ea* report       
submitt$ "u p>agraph 7#a7 %all be       
submitt$ 9 unclassifi$ =m1 b may include
 a classifi$ annex4  7c7 ,comptroll]    
,g5]al report ,n lat] ?an #ahj days aft]
 ! submission ( ! report requir$ 9      
subsection 7b71 ! ,comptroll] ,g5]al ( !

 ,unit$ ,/ates %all submit to !         
congressional def5se committees a report
 on ! implem5tation & effectiv5ess ( !  
activities describ$ 9 subsection 7b74   
7d7 ,def9itions ,9 ?is section3 7#a7    
,cellul> module ,! t]m cellul> module   
means a modul> transmitt]1 z describ$ 9 
section #ae4bab ( title #dg1 ,code (    
,f$]al ,regulations1 t provides cellul> 
connectivity to a ho/ product1 includ+  
an ,int]net ( ?+s device4  7#b7         
,congressional def5se committees ,! t]m 
congressional def5se committees has !   
mean+ giv5 ! t]m 9 section #aja7;a77#af7
 ( title #aj1 ,unit$ ,/ates ,code4  7#c7
 ,cov]$ cellul> module ,! t]m cov]$     
cellul> module means any cellul> module 
produc$1 manufactur$1 or provid$ by--   
7,a7 an entity id5tifi$ "u section #hhi 
( ! ,john ,s4 ,mc,cain ,national ,def5se
 ,au?orization ,act = ,fiscal ,ye> #bjai
 7,public ,law #aae-bcb2 #da ,u4,s4,c4  
#cija note prec472  7,b7 an entity t is 
own$ by1 controll$ by1 or subject to !  
jurisdiction or direction ( ! ,p's      

,republic ( ,*9a2 or  7,c7 any o!r      
entity det]m9$ by ! ,secret>y ( ,def5se 
to pres5t an unacceptable supply-*a9    
risk4  7#d7 ,cov]$ sy/em ,! t]m cov]$   
sy/em means any item ( infra/ructure    
own$1 leas$1 op]at$1 or controll$ by !  
,dep>tm5t ( ,def5se4  7#e7 ,int]net (   
?+s device ,! t]m ,int]net ( ?+s device 
has ! mean+ giv5 to su* t]m 9 ,,ni/     
,special ,publication #ahjj-af4