Sec. 2. Annual report on supply chain vulnerabilities related to the People’s Republic of China
248 words·~1 min read·
/bill/116/s/987/is/section-2A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Section 3603 of title 44, United States Code, is amended by adding at the end the following: In this subsection, the term Internet of Things means physical devices embedded with sensors that can collect data and connect to each other and the broader internet. Not later than 180 days after the date of the enactment of this subsection, and not less frequently than annually thereafter, the Chief Information Officers Council shall submit to Congress a report on supply chain vulnerabilities related to the People’s Republic of China that includes the following:
An assessment of the supply chain risk posed by the People’s Republic of China to each Federal agency. A description of how each Federal agency is mitigating the supply chain risk posed by the People’s Republic of China. An assessment of the existing procurement and security policies and guidance of each Federal agency with respect to cybersecurity, operations security, physical security, information security, and data security that may affect information and communications technology, fifth generation mobile networks (commonly known as 5G networks ), and the Internet of Things, that describes the following:
Areas for which new policies and guidance may be needed, including for specific information and communications technology, 5G networks, and the Internet of Things, including applications or procedures related to the Internet of Things. Areas for which existing security policies and guidance can be updated to address vulnerabilities with respect to supply chain security, cybersecurity, operations security, physical security, information security, and data security. .