I 
117TH CONGRESS 
1ST SESSION H. R. 6169 
To direct the Secretary of Defense to establish a framework relating to 
risks to the defense supply chain, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
DECEMBER 7, 2021 
Ms. SLOTKIN (for herself and Mr. GALLAGHER) introduced the following bill; 
which was referred to the Committee on Armed Services 
A BILL 
To direct the Secretary of Defense to establish a framework 
relating to risks to the defense supply chain, and for 
other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. DEFENSE SUPPLY CHAIN RISK ASSESSMENT 
FRAMEWORK. 
(a) IN GENERAL.—Not later than one year after the 
date of the enactment of this Act, the Secretary of Defense 
shall establish a framework, which may be included as part 
of a framework developed under section 2509 of title 10, 
United States Code, and pursuant to recommendations 
provided under section 5 of Executive Order 14017 (86 
VerDate Sep 11 2014 
23:08 Dec 16, 2021
Jkt 029200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H6169.IH
H6169
pbinns on DSKJLVW7X2PROD with BILLS
Fed. Reg. 11849, relating to America’s supply chains), to 
consolidate the information relating to risks to the defense 
supply chain that is collected by the elements of the De-
partment of Defense to— 
(1) enable Department-wide risk assessments of 
the defense supply chain; and 
(2) support the development of strategies to 
mitigate risks to the defense supply chain. 
(b) FRAMEWORK REQUIREMENTS.—The framework 
established under subsection (a) shall— 
(1) provide for the collection, management, and 
storage of data from the supply chain risk manage-
ment processes of the Department of Defense; 
(2) provide for the collection of reports on sup-
ply chain risk management from the military depart-
ments and Defense Agencies, and the dissemination 
of such reports to the components of the military de-
partments and Defense Agencies involved in the 
management of supply chain risk; 
(3) enable all elements of the Department to 
analyze the information collected by such framework 
to identify risks to the defense supply chain; 
(4) enable the Department to— 
(A) assess the capabilities of foreign adver-
saries (as defined in section 8(c) of the Secure 
VerDate Sep 11 2014 
23:08 Dec 16, 2021
Jkt 029200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H6169.IH
H6169
pbinns on DSKJLVW7X2PROD with BILLS
and Trusted Communications Networks Act of 
2019 (47 U.S.C. 1607(c))) to affect the defense 
supply chain; 
(B) analyze the ability of the industrial 
base of the United States to meet the needs of 
the defense supply chain; 
(C) track global technology trends that 
could affect the defense supply chain, as deter-
mined by the Secretary of Defense; and 
(D) assess the risks posed by emerging 
threats to the defense supply chain; 
(5) support the identification of technology in 
which the Department may invest to reduce risks to 
the defense supply chain, including by improving the 
resilience of the defense supply; and 
(6) provide for— 
(A) a map of the supply chains for major 
end items that supports analysis, monitoring, 
and reporting with respect to high-risk sub-
contractors and risks to such supply chain; and 
(B) the use of a covered application de-
scribed in subsection (c) in the creation of such 
map to assess risks to the supply chain for 
major end items by business sector, vendor, 
program, part, or technology. 
VerDate Sep 11 2014 
23:08 Dec 16, 2021
Jkt 029200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H6169.IH
H6169
pbinns on DSKJLVW7X2PROD with BILLS
(c) COVERED APPLICATION DESCRIBED.—The cov-
ered application described in this subsection is a covered 
application that includes the following elements: 
(1) A centralized database that consolidates 
multiple disparate data sources into a single reposi-
tory to ensure the consistent availability of data. 
(2) Centralized reporting to allow for efficient 
mitigation and remediation of identified supply chain 
vulnerabilities. 
(3) Broad interoperability with other software 
and systems to ensure support for the analytical ca-
pabilities of users across the Department. 
(4) Scalable technology to support multiple 
users, access controls for security, and functionality 
designed for information-sharing and collaboration. 
(d) GUIDANCE.—Not later than 180 days after the 
framework required under subsection (a) is established, 
and regularly thereafter, the Secretary of Defense shall 
issue guidance on mitigating risks to the defense supply 
chain. 
(e) REPORTS.— 
(1) PROGRESS REPORT.—Not later than 180 
days after the date of the enactment of this Act, the 
Secretary of Defense shall submit to the congres-
sional defense committees a report on the progress 
VerDate Sep 11 2014 
23:08 Dec 16, 2021
Jkt 029200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H6169.IH
H6169
pbinns on DSKJLVW7X2PROD with BILLS
of establishing the framework as required under sub-
section (a). 
(2) FINAL REPORT.—Not later than one year 
after the date of the enactment of this Act, the Sec-
retary of Defense shall submit to the congressional 
defense committees a report describing the frame-
work established under subsection (a) and the orga-
nizational structure to manage and oversee the 
framework. 
(f) DEFINITIONS.—In this section: 
(1) COVERED APPLICATION.—The term ‘‘cov-
ered application’’ means a software-as-a-service ap-
plication that uses decision science, commercial data, 
and machine learning techniques. 
(2) DEFENSE
AGENCY; 
MILITARY
DEPART-
MENT.—The terms ‘‘Defense Agency’’ and ‘‘military 
department’’ have the meanings given such terms in 
section 101 of title 10, United States Code. 
(3) HIGH-RISK
SUBCONTRACTORS.—The term 
‘‘high-risk subcontractor’’ means a subcontractor at 
any tier that supplies major end items for the De-
partment of Defense. 
(4) MAJOR END ITEM.—The term ‘‘major end 
item’’ means an item subject to a unique item-level 
traceability requirement at any time in the life cycle 
VerDate Sep 11 2014 
23:08 Dec 16, 2021
Jkt 029200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H6169.IH
H6169
pbinns on DSKJLVW7X2PROD with BILLS
of such item under Department of Defense Instruc-
tion 8320.04, titled ‘‘Item Unique Identification 
(IUID) Standards for Tangible Personal Property’’ 
and dated September 3, 2015, or any successor in-
struction. 
Æ 
VerDate Sep 11 2014 
23:08 Dec 16, 2021
Jkt 029200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6301
E:\BILLS\H6169.IH
H6169
pbinns on DSKJLVW7X2PROD with BILLS