Sec. 216. Program of standards and requirements for microelectronics
643 words·~3 min read·
/bill/118/s/2226/es/section-216A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
The Secretary of Defense shall establish, not later than 180 days after the date of the enactment of this Act, a program within the National Security Agency to develop and continuously update, as the Secretary determines necessary, standards, commercial best practices, and requirements for the design, manufacture, packaging, test, and distribution of microelectronics acquired by the Department of Defense to provide acceptable levels of confidentiality, integrity, and availability for Department commercial-off-the-shelf
(COTS)microelectronics, field programmable gate arrays (FPGAs), and custom integrated circuits (CICs). The Secretary shall ensure that the program established pursuant to subsection
(a)is advised and assessed by the Government-Industry-Academia Working Group on Microelectronics established under section 220 of the James M. Inhofe National Defense Authorization Act for Fiscal Year 2023 ( Public Law 117–263 ). The program established by subsection
(a)shall develop— evidence-based assurance processes and techniques that sustain, build on, automate, and scale up the results and accomplishments of the Rapid Assured Microelectronics Prototypes (RAMP), RAMP-Commercial (RAMP-C), and State-of-the-Art Heterogeneous Integrated Packaging
(SHIP)programs to enhance the confidentiality, integrity, and availability of microelectronics while minimizing costs and impacts to commercial manufacturing practices; validation methods for such processes and techniques, in coordination with the developmental and operational test and evaluation community, as the Secretary determines necessary; threat models that comprehensively characterize the threat to microelectronics confidentiality, integrity, and availability across the entire supply chain, and the design, production, packaging, and deployment cycle to support risk management and risk mitigation, based on the principle of reducing risk to as low a level as reasonably practicable, including— comparative risk assessments; and balanced and practical investments in assurance based on risks and returns; levels of assurance and associated requirements for the production and acquisition of commercial-off-the-shelf integrated circuits, integrated circuits subject to International Traffic in Arms Regulations
(ITAR)under subchapter M of chapter I of title 22, Code of Federal Regulations, or successor regulations, and classified integrated circuits using commercial foundry manufacturing process flows; guides for Federal Government program evaluators, program offices, and industry to meet microelectronics assurance requirements; and guidance for the creation of a government organizational structure and plan to support the acquisition of fit-for-purpose microelectronics, including the role of the Defense Microelectronics Activity, the Crane Division of the Naval Surface Warfare Center, and the Joint Federated Assurance Center. The program established pursuant to subsection
(a)shall establish a Department microelectronics assurance standard that includes an overarching assurance framework as well as the guides developed under subsection (c)(5), for commercial-off-the-shelf integrated circuits, integrated circuits subject to the International Traffic in Arms Regulations under subchapter M of chapter I of title 22, Code of Federal Regulations, or successor regulations, and classified microelectronics developed under subsection (c)(4). The Secretary shall designate one individual from a military department as the Microelectronics Assurance Executive Agent to assist Federal Government program offices in acquiring fit-for-purpose microelectronics. Effective on the date of the establishment of the program required by subsection (a), such program shall assume management of the Rapid Assured Microelectronics Prototypes, Rapid Assured Microelectronics Prototypes-Commercial (RAMP-C), and State-of-the-Art Heterogeneous Integrated Packaging programs that were in effect on the day before the date of the enactment of this Act and executed by the Under Secretary of Defense for Research and Engineering. The Under Secretary of Defense for Research and Engineering shall provide oversight of the planning and execution of the program required by subsection (a). The Secretary shall ensure that, for contracts for application-specific integrated circuits designed by defense industrial base contractors— the use of evidence-based assurance processes and techniques are included in the contract data requirements list; commercial best industry practices for confidentiality, integrity, and availability are used; a library of certified third-party intellectual property is established for reuse, including reuse of transistor layouts, cells, and macrocells; legal mechanisms are in place for data collection and sharing; and automation technology is adopted to achieve efficiency.
Connectionstraces to 1
Traces to 1 document
Citation graph
cites case law
Sec. 216
Program of standards and requirements for microelectronics
Cites 1Cited by 0 across 0 sources