```

[Congressional Bills 117th Congress]
[From the U.S. Government Publishing Office]
[S. 2201 Reported in Senate (RS)]

<DOC>

                                                       Calendar No. 153
117th CONGRESS
  1st Session
                                S. 2201

                          [Report No. 117-43]

 To manage supply chain risk through counterintelligence training, and 
                          for other purposes.

_______________________________________________________________________

                   IN THE SENATE OF THE UNITED STATES

                             June 23, 2021

Mr. Peters (for himself and Mr. Johnson) introduced the following bill; 
which was read twice and referred to the Committee on Homeland Security 
                        and Governmental Affairs

                            October 26, 2021

                Reported by Mr. Peters, with amendments
  [Omit the part struck through and insert the part printed in italic]

_______________________________________________________________________

                                 A BILL

 
 To manage supply chain risk through counterintelligence training, and 
                          for other purposes.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Supply Chain Security Training Act 
of 2021''.

SEC. 2. TRAINING PROGRAM TO MANAGE SUPPLY CHAIN RISK.

    (a) In General.--Not later than 180 days after the date of the 
enactment of this Act, the Administrator of General Services, through 
the Federal Acquisition Institute, shall develop a training program for 
officials with supply chain risk management responsibilities at 
executive Federal agencies.
    (b) Content.--The training program shall be designed to prepare 
such personnel to perform supply chain risk management activities and 
identify and mitigate supply chain security threats that arise 
throughout the acquisition lifecycle, including for the acquisition of 
information and communications technology. The training program shall--
            (1) include, considering the protection of classified and 
        other sensitive information, information on current, specific 
        supply chain security threats; and
            (2) be updated as determined to be necessary by the 
        Administrator.
    (c) Coordination and Consultation.--In developing the training 
program, the Administrator shall--
            (1) coordinate with the Federal Acquisition Security 
        Council, the Secretary of Homeland Security, and the Director 
        of the Office of Personnel Management; and
            (2) consult with the Director of the Department of 
        Defense's Defense Acquisition University and the Director of 
        National Intelligence.
    (d) Guidance.--
            (1) In general.--Not later than 180 days after the training 
        program is developed under subsection (a), the Director of the 
        Office of Management and Budget shall promulgate guidance to 
        Federal agencies requiring executive agency adoption and use of 
        the training program. Such guidance shall--
                    (1) (A) allow executive agencies to incorporate the 
                training program into existing agency training 
                programs; and
                    (2) (B) provide guidance on how to identify 
                executive agency officials with supply chain risk 
                management responsibilities.
            (2) Availability.--The Director of the Office of Management 
        and Budget shall make the guidance promulgated under paragraph 
        (1) available to Federal agencies of the legislative and 
        judicial branches.

SEC. 3. REPORTS ON IMPLEMENTATION OF PROGRAM.

    Not later than 180 days after the completion of the first course, 
and annually thereafter for the next three years, the Administrator of 
General Services shall submit to the appropriate congressional 
committees and leadership a report on implementation of the training 
program required under section 2.

SEC. 4. DEFINITIONS.

    In this Act:
            (1) Appropriate congressional committees and leadership.--
        The term ``appropriate congressional committees'' means--
                    (A) the Committee on Homeland Security and 
                Governmental Affairs and the Committee on Armed 
                Services of the Senate; and
                    (B) the Committee on Oversight and Reform and the 
                Committee on Armed Services of the House of 
                Representatives.
            (2) Information and communications technology.--The term 
        ``information and communications technology'' has the meaning 
        given the term in section 4713(k) of title 41, United States 
        Code.
            (3) Executive agency.--The term ``executive agency'' has 
        the meaning given the term in section 133 of title 41, United 
        States Code.
            (4) Federal agency.--The term ``Federal agency'' means any 
        agency, committee, commission, office, or other establishment 
        in the executive, legislative, or judicial branch of the 
        Federal Government.
            (4)(5) Training program.--The term ``training program'' 
        means the training program developed pursuant to section 2(a).
                                                       Calendar No. 153

117th CONGRESS

  1st Session

                                S. 2201

                          [Report No. 117-43]

_______________________________________________________________________

                                 A BILL

 To manage supply chain risk through counterintelligence training, and 
                          for other purposes.

_______________________________________________________________________

                            October 26, 2021

                        Reported with amendments
```