I 

116TH CONGRESS 

2D SESSION H. R. 7257 

To direct the Secretary of Defense to carry out activities to develop, secure, 

and effectively implement fifth generation information and communications technology within the Department of Defense. 

IN THE HOUSE OF REPRESENTATIVES 

JUNE 18, 2020 

Mr. LARSEN of Washington (for himself and Mr. GALLAGHER) introduced the 

following bill; which was referred to the Committee on Armed Services 

A BILL 

To direct the Secretary of Defense to carry out activities 

to develop, secure, and effectively implement fifth generation information and communications technology within 

the Department of Defense. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. TELECOMMUNICATIONS SECURITY PROGRAM. 

4 (a) PROGRAM REQUIRED.—The Secretary of Defense 

5 shall carry out a program to identify and mitigate 

6 vulnerabilities in the telecommunications infrastructure of 

7 the Department of Defense. 


kjohnson on DSK79L0C42PROD with BILLS
2 

•HR 7257 IH

1 (b) ELEMENTS.—In carrying out the program under 

2 subsection (a), the Secretary shall— 

3 (1) develop a capability to communicate clearly 

4 and authoritatively about threats by foreign actors; 

5 (2) conduct independent red-team security anal6 ysis of Department of Defense systems, subsystems, 

7 devices, and components including no-knowledge 

8 testing and testing with limited or full knowledge of 

9 expected functionalities; 

10 (3) verify the integrity of personnel who are 

11 tasked with design fabrication, integration, configu12 ration, storage, test, and documentation of non13 commercial 5G technology to be used by the Depart14 ment of Defense; 

15 (4) verify the efficacy of the physical security 

16 measures used at Department of Defense locations 

17 where system design, fabrication, integration, con18 figuration, storage, test, and documentation of 5G 

19 technology occurs; 

20 (5) direct the Chief Information Officer of the 

21 Department of Defense to use the Federal Risk and 

22 Authorization Management Program (commonly 

23 known as ‘‘FedRAMP’’) moderate or high cloud 

24 standard baselines, supplemented with the Depart25 ment’s FedRAMP cloud standard controls and conVerDate Sep 11 2014 03:15 Jul 11, 2020 Jkt 099200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\H7257.IH H7257

kjohnson on DSK79L0C42PROD with BILLS
3 

•HR 7257 IH

1 trol enhancements, to assess 5G core service pro2 viders whose services will be used by the Department 

3 of Defense through the Department’s provisional au4 thorization process; and 

5 (6) direct the Defense Information Systems 

6 Agency and the United States Cyber Command to 

7 Develop a capability for continuous, independent 

8 monitoring of packet streams for 5G data on fre9 quencies assigned to the Department of Defense to 

10 validate availability, confidentiality, and integrity of 

11 Department of Defense communications systems. 

12 (c) IMPLEMENTATION PLAN.—Not later than 90 

13 days after the date of the enactment of this Act, the Sec14 retary of Defense shall submit to Congress a plan for the 

15 implementation of the program under subsection (a). 

16 (d) REPORT REQUIRED.—Not later than 180 days 

17 after submitting the plan under subsection (c), the Sec18 retary of Defense shall submit to Congress a report that 

19 includes— 

20 (1) a comprehensive assessment of the findings 

21 and conclusions of the program under subsection 

22 (a); 

23 (2) recommendations on how to mitigate 

24 vulnerabilities in the Department of Defense tele25 communications infrastructure; and 


kjohnson on DSK79L0C42PROD with BILLS
4 

•HR 7257 IH

1 (3) an explanation of how the Department of 

2 Defense plans to implement such recommendations. 

Æ 


kjohnson on DSK79L0C42PROD with BILLS