I 

118TH CONGRESS 

2D SESSION H. R. 9290 

To direct the Chief Information Officer of the Department of Defense and 

the Director of the Defense Information Systems Agency to jointly provide to the Committees on Armed Services of the Senate and House 

of Representatives a briefing on the plan of the Department of Defense 

to transition away from the Joint Regional Security Stacks, and for 

other purposes. 

IN THE HOUSE OF REPRESENTATIVES 

AUGUST 2, 2024 

Ms. SLOTKIN introduced the following bill; which was referred to the 

Committee on Armed Services 

A BILL 

To direct the Chief Information Officer of the Department 

of Defense and the Director of the Defense Information 

Systems Agency to jointly provide to the Committees 

on Armed Services of the Senate and House of Representatives a briefing on the plan of the Department 

of Defense to transition away from the Joint Regional 

Security Stacks, and for other purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 


kjohnson on DSK7ZCZBW3PROD with $$_JOB
2 

•HR 9290 IH

1 SECTION 1. BRIEFING ON DEPARTMENT OF DEFENSE PLAN 

2 TO TRANSITION AWAY FROM JOINT RE3 GIONAL SECURITY STACKS. 

4 (a) FINDINGS.—Congress makes the following find5 ings: 

6 (1) the Department of Defense faces aggressive 

7 timelines to meet zero trust goals by 2027 that align 

8 to its Zero Trust Strategy; and 

9 (2) a central part of this evolution will be the 

10 migration away from the legacy Joint Regional Se11 curity Stacks. 

12 (b) SENSE OF CONGRESS.—It is the sense of Con13 gress that— 

14 (1) it is paramount that the successor to the 

15 Joint Regional Security Stacks incorporates least 

16 privilege access, continuous trust verification, and 

17 continuous security inspection while protecting all 

18 data and securing all applications regardless of user 

19 location or device; 

20 (2) in order to achieve goals within the specified 

21 timelines of the Department of Defense, the military 

22 departments, combatant commands, and other com23 ponents of the Department should leverage scalable, 

24 IL–5 certified solutions that went through an open 

25 vendor selection process and comprehensive proto26 typing before production; and 


kjohnson on DSK7ZCZBW3PROD with $$_JOB
3 

•HR 9290 IH

1 (3) if such components instead pursue their 

2 own bespoke solutions to this common need, they 

3 must plan to navigate the transition from the Joint 

4 Regional Security Stacks and certification timeline 

5 constraints without negatively affecting the resilience 

6 of the Department of Defense information networks. 

7 (c) BRIEFING.—Not later than 120 days after the 

8 date of the enactment of this Act, the Chief Information 

9 Officer of the Department of Defense and the Director 

10 of the Defense Information Systems Agency, shall jointly 

11 provide to the Committees on Armed Services of the Sen12 ate and House of Representatives a briefing on the plan 

13 of the Department of Defense to transition away from the 

14 Joint Regional Security Stacks, with a focus on how leg15 acy seats will gain access to zero trust-aligned continuous 

16 trust verification and security inspection regardless of user 

17 location or device. 

Æ 


kjohnson on DSK7ZCZBW3PROD with $$_JOB