Sec. 5302. Authorization to use commercial cloud enclaves overseas
164 words·~1 min read·
/bill/119/s/1071/enr/section-5302·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Not later than 180 days after the date of the enactment of this Act, the Department shall issue internal guidelines that authorize and track the use of enclaves deployed in overseas commercial cloud regions for OCONUS systems categorized at the Federal Information Security Modernization Act (FISMA) high baseline. The enclave deployments shall be consistent with existing Federal cybersecurity regulations as well as best practices established across National Institute of Standards and Technology standards and ISO 27000 security controls.
Not later than 90 days after the enactment of the Act, and before issuing the new internal guidelines required under subsection (a), the Secretary shall brief the appropriate congressional committees on the proposed new guidelines, including— relevant risk assessments; and any security challenges regarding implementation. In this section, the term appropriate congressional committees means— the Committee on Foreign Affairs and the Permanent Select Committee on Intelligence of the House of Representatives; and the Committee on Foreign Relations and the Select Committee on Intelligence of the Senate.