Sec. 503. PROTECTING THE INFORMATION TECHNOLOGY SUPPLY CHAIN OF THE UNITED STATES

227 words·~1 min read·/statute-compilations/comps-10398/sec-503

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

## SEC. 503 PROTECTING THE INFORMATION TECHNOLOGY SUPPLY CHAIN OF THE UNITED STATES ###

(a)Report Not later than 90 days after the date of the enactment of this Act, the Director of National Intelligence shall submit to the congressional intelligence committees a report that— ####

(1)identifies foreign suppliers of information technology (including equipment, software, and services) that are linked directly or indirectly to a foreign government, including— #####

(A)by ties to the military forces of a foreign government; #####

(B)by ties to the intelligence services of a foreign government; or #####

(C)by being the beneficiaries of significant low interest or no interest loans, loan forgiveness, or other support by a foreign government; and ####

(2)assesses the vulnerability to malicious activity, including cyber crime or espionage, of the telecommunications networks of the United States due to the presence of technology produced by suppliers identified under paragraph (1). ###

(b)Form The report required under subsection

(a)shall be submitted in unclassified form, but may include a classified annex. ###

(c)Telecommunications Networks of the United States Defined In this section, the term “telecommunications networks of the United States” includes— ####

(1)telephone systems; ####

(2)Internet systems; ####

(3)fiber optic lines, including cable landings; ####

(4)computer networks; and ####

(5)smart grid technology under development by the Department of Energy.