I 

118TH CONGRESS 

1ST SESSION H. R. 4915 

To amend title 10, United States Code, to codify the program of the Office 

of Small Business Programs of the Department of Defense known as 

Project Spectrum, and for other purposes. 

IN THE HOUSE OF REPRESENTATIVES 

JULY 26, 2023 

Mr. JOYCE of Ohio (for himself, Ms. ROSS, Mr. FITZPATRICK, and Ms. 

ESCOBAR) introduced the following bill; which was referred to the Committee on Armed Services 

A BILL 

To amend title 10, United States Code, to codify the program of the Office of Small Business Programs of the 

Department of Defense known as Project Spectrum, and 

for other purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘The Project Spectrum 

5 Authorization Act’’. 


kjohnson on DSK79L0C42PROD with BILLS
2 

•HR 4915 IH

1 SEC. 2. PROJECT SPECTRUM. 

2 Chapter 19 of title 10, United States Code, is amend3 ed by inserting before section 399 the following new sec4 tion: 

5 ‘‘§ 398b. Project Spectrum 

6 ‘‘(a) PROJECT SPECTRUM; PURPOSE.—There is with7 in the Office of Small Business Programs of the Depart8 ment of Defense a program known as ‘Project Spectrum’, 

9 the purpose of which is to provide to covered entities, 

10 through an online platform, digital resources and services 

11 that increase awareness about cybersecurity risks and help 

12 such covered entities to comply with the cybersecurity re13 quirements of the defense acquisition system. 

14 ‘‘(b) ELIGIBILITY.—The Director of the Office of 

15 Small Business Programs may establish eligibility require16 ments for the receipt by a covered entity of a given re17 source or service made available through Project Spec18 trum. 

19 ‘‘(c) APPLICATION.—To receive through Project 

20 Spectrum a resource or service for which the Director has 

21 established an eligibility requirement under subsection (b), 

22 a covered entity shall submit to the Director an applica23 tion at such time, in such form, and containing such infor24 mation as the Director determines appropriate. 

25 ‘‘(d) FUNCTIONS.—In carrying out Project Spec26 trum, the Director shall maintain an online platform 


kjohnson on DSK79L0C42PROD with BILLS
3 

•HR 4915 IH

1 through which the Director shall make available to each 

2 covered entity that the Director determines to be eligible 

3 under subsection (b) with respect to a given resource or 

4 service, the following: 

5 ‘‘(1) Educational materials regarding cybersecu6 rity, including cybersecurity training courses and 

7 workforce development training. 

8 ‘‘(2) Guidance regarding best practices for cy9 bersecurity matters, including guidance for devel10 oping internal cybersecurity policies and suggestions 

11 for procedures for reviewing any violation of such 

12 policies. 

13 ‘‘(3) Assessments of the cybersecurity practices 

14 and cybersecurity systems used by a covered entity. 

15 ‘‘(4) A review and feasibility assessment of 

16 products, software, and data security tools available 

17 in the commercial marketplace. 

18 ‘‘(5) Cybersecurity services, including dash19 board monitoring services, continuous threat moni20 toring services, software patching services, and patch 

21 testing services. 

22 ‘‘(6) Cybersecurity readiness checks. 

23 ‘‘(7) A platform for secure data collaboration 

24 between two or more employees of a covered entity 

25 and between multiple covered entities. 


kjohnson on DSK79L0C42PROD with BILLS
4 

•HR 4915 IH

1 ‘‘(8) Any additional resources or services, as de2 termined by the Director. 

3 ‘‘(e) DEFINITIONS.—In this section: 

4 ‘‘(1) The term ‘covered entity’ means a supplier 

5 of the Department of Defense that is a small or me6 dium business and registers to access the online 

7 platform of Project Spectrum. 

8 ‘‘(2) The term ‘defense acquisition system’ has 

9 the meaning given to such term in section 3001 of 

10 this title.’’. 

Æ 


kjohnson on DSK79L0C42PROD with BILLS