I 

118TH CONGRESS 

1ST SESSION H. R. 6256 

To require that the Chief Information Officer of the Bureau of Information 

Resources submit an annual report that lists all the information technology procurement awards and contracts that were awarded over 

$10,000,000. 

IN THE HOUSE OF REPRESENTATIVES 

NOVEMBER 7, 2023 

Mr. BAIRD introduced the following bill; which was referred to the Committee 

on Foreign Affairs 

A BILL 

To require that the Chief Information Officer of the Bureau 

of Information Resources submit an annual report that 

lists all the information technology procurement awards 

and contracts that were awarded over $10,000,000. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. CYBERSECURITY PRIORITIZATION IN INFOR4 MATION TECHNOLOGY PROCUREMENT. 

5 (a) SENSE OF CONGRESS.—It is the sense of Con6 gress that— 

7 (1) the Department has not sufficiently empha8 sized cybersecurity in its operations or in its proVerDate Sep 11 2014 01:44 Dec 01, 2023 Jkt 049200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6201 E:\BILLS\H6256.IH H6256

pbinns on DSKJLVW7X2PROD with $$_JOB
2 

•HR 6256 IH

1 curement of information technology, and that these 

2 shortcomings have contributed to numerous cyberse3 curity incidents at the Department; and 

4 (2) the Department should prioritize, to the 

5 highest level and to a greater extent than it already 

6 does, the minimization of cybersecurity risks in its 

7 procurement of information technology. 

8 (b) ANNUAL REPORT.—The Chief Information Offi9 cer in the Bureau of Information Resources Management 

10 shall submit to the appropriate congressional committees 

11 an annual report which— 

12 (1) describes all Department information tech13 nology procurement contracts awarded in the year 

14 prior to the issuance of the report, including the 

15 name of the awardee and the information technology 

16 they were contracted to procure; and 

17 (2) for all Department information technology 

18 procurement contracts awarded in the year prior to 

19 the issuance of the report with contract price exceed20 ing $10,000,000— 

21 (A) details the cybersecurity risks which 

22 have been or will be created by the information 

23 technology procured or intended to be procured 

24 under the contract, including the Department’s 

25 strategy for mitigating these risks; 


pbinns on DSKJLVW7X2PROD with $$_JOB
3 

•HR 6256 IH

1 (B) justifies the Department’s choice to 

2 award the contract to its particular awardee in 

3 light of those cybersecurity risks; and 

4 (C) justifies the Department’s choice to 

5 procure such information technology in light of 

6 those cybersecurity risks. 

7 (c) DEFINITIONS.—In this Act: 

8 (1) APPROPRIATE CONGRESSIONAL COMMIT9 TEES.—The term ‘‘appropriate congressional com10 mittees’’ means the House Committee on Foreign 

11 Affairs and the Senate Committee on Foreign Rela12 tions. 

13 (2) CYBERSECURITY INCIDENT.—The term ‘‘cy14 bersecurity incident’’ has the meaning given the 

15 term ‘‘incident’’ in section 3552 of title 44, United 

16 States Code. 

17 (3) CYBERSECURITY RISK.—The term ‘‘cyberse18 curity risk’’ has the meaning given that term in sec19 tion 2200 of the Homeland Security Act of 2002 (6 

20 U.S.C. 650), except that it refers exclusively to cy21 bersecurity risks to the Department’s information 

22 and information systems. 

23 (4) DEPARTMENT.—The term ‘‘Department’’ 

24 means the United States Department of State. 


pbinns on DSKJLVW7X2PROD with $$_JOB
4 

•HR 6256 IH

1 (5) INFORMATION SYSTEM.—The term ‘‘infor2 mation system’’ has the meaning given that term in 

3 section 3502 of title 44, United States Code. 

4 (6) INFORMATION TECHNOLOGY.—The term 

5 ‘‘information technology’’ has the meaning given 

6 that term in section 11101 of title 40, United States 

7 Code. 

Æ 


pbinns on DSKJLVW7X2PROD with $$_JOB