I 

118TH CONGRESS 

1ST SESSION H. R. 6190 

To provide for cybersecurity prioritization in formation technology 

procurement. 

IN THE HOUSE OF REPRESENTATIVES 

NOVEMBER 2, 2023 

Mr. KEAN of New Jersey introduced the following bill; which was referred to 

the Committee on Foreign Affairs 

A BILL 

To provide for cybersecurity prioritization in formation 

technology procurement. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. CYBERSECURITY PRIORITIZATION IN INFOR4 MATION TECHNOLOGY PROCUREMENT. 

5 (a) SENSE OF CONGRESS.—It is the sense of Con6 gress that— 

7 (1) the Department has not sufficiently empha8 sized cybersecurity in its operations or in its pro9 curement of information technology, and that these 

2 

•HR 6190 IH

1 shortcomings have contributed to numerous cyberse2 curity incidents at the Department; and 

3 (2) the Department should prioritize, to the 

4 highest level and to a greater extent than it already 

5 does, the minimization of cybersecurity risks in its 

6 procurement of information technology. 

7 (b) ANNUAL REPORT.—The Chief Information Offi8 cer in the Bureau of Information Resources Management 

9 shall submit to the appropriate congressional committees 

10 an annual report that— 

11 (1) describes all Department information tech12 nology procurement contracts awarded in the year 

13 prior to the issuance of the report, including the 

14 name of the awardee and the information technology 

15 they were contracted to procure; 

16 (2) for all Department information technology 

17 procurement contracts awarded in the year prior to 

18 the issuance of the report with contract price exceed19 ing $10 million— 

20 (A) details the cybersecurity risks which 

21 have been or will be created by the information 

22 technology procured or intended to be procured 

23 under the contract, including the Department’s 

24 strategy for mitigating these risks; 

3 

•HR 6190 IH

1 (B) justifies the Department’s choice to 

2 award the contract to its particular awardee in 

3 light of those cybersecurity risks; and 

4 (C) justifies the Department’s choice to 

5 procure such information technology in light of 

6 those cybersecurity risks. 

7 (c) DEFINITIONS.—In this section— 

8 (1) the term ‘‘appropriate congressional com9 mittees’’ means— 

10 (A) the Committee on Foreign Affairs of 

11 the House of Representatives; and 

12 (B) the Committee on Foreign Relations of 

13 the Senate; 

14 (2) the term ‘‘cybersecurity incident’’ has the 

15 meaning given the term ‘‘incident’’ in section 3552 

16 of title 44, United States Code; 

17 (3) the term ‘‘cybersecurity risk’’ has the mean18 ing given that term in section 2200 of the Homeland 

19 Security Act of 2002 (6 U.S.C. 650), except that 

20 such term refers exclusively to cybersecurity risks to 

21 the Department’s information and information sys22 tems; 

23 (4) the term ‘‘Department’’ means the Depart24 ment of State; 

4 

•HR 6190 IH

1 (5) the term ‘‘information system’’ has the 

2 meaning given that term in section 3502 of title 44, 

3 United States Code; and 

4 (6) the term ‘‘information technology’’ has the 

5 meaning given that term in section 11101 of title 

6 40, United States Code. 

Æ