1650 
HR 6395 PCS
(2) CRITICAL
INFRASTRUCTURE.—The term 
‘‘critical infrastructure’’ has the meaning given such 
term in section 1016(e) of Public Law 107–56 (42 
U.S.C. 5195c(e)). 
(3) 
CRITICAL
INFRASTRUCTURE
INFORMA-
TION.—The term ‘‘critical infrastructure informa-
tion’’ has the meaning given such term in section 
2222 of the Homeland Security Act of 2002 (6 
U.S.C. 671). 
(4) CYBER
THREAT
INDICATOR.—The term 
‘‘cyber threat indicator’’ has the meaning given such 
term in section 102(6) of the Cybersecurity Act of 
2015 (enacted as division N of the Consolidated Ap-
propriations Act, 2016 (Public Law 114–113; 6 
U.S.C. 1501(6))). 
(5) CYBERSECURITY RISK.—The term ‘‘cyberse-
curity risk’’ has the meaning given such term in sec-
tion 2209 of the Homeland Security Act of 2002 (6 
U.S.C. 659). 
(6) CYBERSECURITY THREAT.—The term ‘‘cy-
bersecurity threat’’ has the meaning given such term 
in section 102(5) of the Cybersecurity Act of 2015 
(enacted as division N of the Consolidated Appro-
priations Act, 2016 (Public Law 114–113; 6 U.S.C. 
1501(5))). 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01650
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1651 
HR 6395 PCS
(7) INFORMATION SHARING AND ANALYSIS OR-
GANIZATION.—The term ‘‘information sharing and 
analysis organization’’ has the meaning given such 
term in section 2222 of the Homeland Security Act 
of 2002 (6 U.S.C. 671). 
SEC. 1632. DEFENSE INDUSTRIAL BASE PARTICIPATION IN 
A THREAT INTELLIGENCE SHARING PRO-
GRAM. 
(a) DEFINITION.—In this section, the term ‘‘defense 
industrial base’’ means the worldwide industrial complex 
with capabilities to perform research and development, de-
sign, produce, deliver, and maintain military weapon sys-
tems, subsystems, components, or parts to meet military 
requirements. 
(b) DEFENSE INDUSTRIAL BASE THREAT INTEL-
LIGENCE PROGRAM.— 
(1) IN
GENERAL.—The Secretary of Defense 
shall establish a threat intelligence program to share 
with and obtain from the defense industrial base in-
formation and intelligence on threats to national se-
curity. 
(2) PROGRAM REQUIREMENTS.—At a minimum, 
the Secretary of Defense shall ensure the threat in-
telligence sharing program established pursuant to 
paragraph (1) includes the following: 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01651
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1652 
HR 6395 PCS
(A) Cybersecurity incident reporting re-
quirements that— 
(i) extend beyond current mandatory 
incident reporting requirements; 
(ii) set specific timeframes for all cat-
egories of such mandatory incident report-
ing; and 
(iii) create a single clearinghouse for 
all such mandatory incident reporting to 
the Department of Defense, including cov-
ered unclassified information, covered de-
fense information, and classified informa-
tion. 
(B) A mechanism for developing a shared 
and real-time picture of the threat environment. 
(C) Joint, collaborative, and co-located 
analytics. 
(D) Investments in technology and capa-
bilities to support automated detection and 
analysis across the defense industrial base. 
(E) Coordinated intelligence sharing with 
relevant domestic law enforcement and counter-
intelligence agencies, in coordination, respec-
tively, with the Director of the Federal Bureau 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01652
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1653 
HR 6395 PCS
of Investigation and the Director of National 
Intelligence. 
(F) A process for direct sharing of threat 
intelligence related to a specific defense indus-
trial base entity with such entity. 
(3) EXISTING
INFORMATION
SHARING
PRO-
GRAMS.—The Secretary of Defense may utilize an 
existing Department of Defense information sharing 
program to satisfy the requirement under paragraph 
(1) if such existing program includes, or is modified 
to include, two-way sharing of threat information 
that is specifically relevant to the defense industrial 
base, including satisfying the requirements specified 
in paragraph (2). 
(4) INTELLIGENCE
QUERIES.—As part of a 
threat intelligence sharing program under this sub-
section, the Secretary of Defense shall require de-
fense industrial base entities holding a Department 
of Defense contract to consent to queries of foreign 
intelligence collection databases related to such enti-
ty as a condition of such contract. 
(c) THREAT INTELLIGENCE PROGRAM PARTICIPA-
TION.— 
(1) PROHIBITION
ON
PROCUREMENT.—Begin-
ning on the date that is than 1 year after the date 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01653
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1654 
HR 6395 PCS
of the enactment of this Act, the Secretary of De-
fense may not procure or acquire, or extend or 
renew a contract to procure or acquire, any item, 
equipment, system, or service from any entity that 
is not a participant in— 
(A) the threat intelligence sharing program 
established pursuant paragraph (1) of sub-
section (b); or 
(B) a comparably widely-utilized threat in-
telligence sharing program described in para-
graph (3) of such subsection. 
(2) APPLICATION
TO
SUBCONTRACTORS.—No 
entity holding a Department of Defense contract 
may subcontract any portion of such contract to an-
other entity unless that second entity— 
(A) is a participant in a threat intelligence 
sharing program under this section; or 
(B) has received a waiver pursuant to sub-
section (d). 
(3) IMPLEMENTATION.—In implementing the 
prohibition under paragraph (1), the Secretary of 
Defense— 
(A) may create tiers of requirements and 
participation within the applicable threat intel-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01654
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1655 
HR 6395 PCS
ligence sharing program referred to in such 
paragraph based on— 
(i) an evaluation of the role of and 
relative threats related to entities within 
the defense industrial base; and 
(ii) cybersecurity maturity model cer-
tification level; and 
(B) shall prioritize available funding and 
technical support to assist entities as is reason-
ably necessary for such entities to participate in 
a threat intelligence sharing program under this 
section. 
(d) WAIVER AUTHORITY.— 
(1) WAIVER.—The Secretary of Defense may 
waive the prohibition under subsection (b)— 
(A) with respect to an entity or class of en-
tities, if the Secretary determines that the re-
quirement to participate in a threat intelligence 
sharing program under this section is unneces-
sary to protect the interests of the United 
States; or 
(B) at the request of an entity, if the Sec-
retary determines there is compelling justifica-
tion for such waiver. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01655
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1656 
HR 6395 PCS
(2) PERIODIC REEVALUATION.—The Secretary 
of Defense shall periodically reevaluate any waiver 
issued pursuant to paragraph (1) and promptly re-
voke any waiver the Secretary determines is no 
longer warranted. 
(e) REGULATIONS.— 
(1) RULEMAKING AUTHORITY.—Not later than 
180 days after the date of the enactment of this Act, 
the Secretary of Defense shall promulgate such rules 
and regulations as are necessary to carry out this 
section. 
(2) CMMC HARMONIZATION.—The Secretary of 
Defense shall ensure that the threat intelligence 
sharing program requirements set forth in the rules 
and regulations promulgated pursuant to paragraph 
(1) consider an entity’s maturity and role within the 
defense industrial base, in accordance with the ma-
turity certification levels established in the Depart-
ment of Defense Cybersecurity Maturity Model Cer-
tification program. 
SEC. 1633. ASSISTANCE FOR SMALL MANUFACTURERS IN 
THE DEFENSE INDUSTRIAL SUPPLY CHAIN 
ON MATTERS RELATING TO CYBERSECURITY. 
(a) IN GENERAL.—Subject to the availability of ap-
propriations, the Secretary of Defense, in consultation 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01656
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1657 
HR 6395 PCS
with the Director of the National Institute of Standards 
and Technology, may award financial assistance to a Cen-
ter for the purpose of providing cybersecurity services to 
small manufacturers. 
(b) CRITERIA.—If the Secretary carries out sub-
section (a), the Secretary, in consultation with the Direc-
tor, shall establish and publish on the grants.gov website, 
or successor website, criteria for selecting recipients for 
financial assistance under this section. 
(c) USE OF FINANCIAL ASSISTANCE.—Financial as-
sistance under this section— 
(1) shall be used by a Center to provide small 
manufacturers with cybersecurity services relating 
to— 
(A) compliance with the cybersecurity re-
quirements of the Department of Defense Sup-
plement to the Federal Acquisition Regulation, 
including awareness, assessment, evaluation, 
preparation, and implementation of cybersecu-
rity services; and 
(B) achieving compliance with the Cyberse-
curity Maturity Model Certification framework 
of the Department of Defense; and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01657
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1658 
HR 6395 PCS
(2) may be used by a Center to employ trained 
personnel to deliver cybersecurity services to small 
manufacturers. 
(d) BIENNIAL REPORTS.— 
(1) IN
GENERAL.—Not less frequently than 
once every 2 years, the Secretary shall submit to the 
congressional defense committees, the Committee on 
Commerce, Science, and Transportation of the Sen-
ate, and the Committee on Science, Space, and 
Technology of the House of Representatives a bien-
nial report on financial assistance awarded under 
this section. 
(2) CONTENTS.—To the extent practicable, 
each report submitted under paragraph (1) shall in-
clude the following with respect to the years covered 
by the report: 
(A) The number of small manufacturing 
companies assisted. 
(B) A description of the cybersecurity serv-
ices provided. 
(C) A description of the cybersecurity mat-
ters addressed. 
(D) An analysis of the operational effec-
tiveness and cost-effectiveness of the cybersecu-
rity services provided. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01658
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1659 
HR 6395 PCS
(e) TERMINATION.—The authority of the Secretary 
to award of financial assistance under this section shall 
terminate on the date that is 5 years after the date of 
the enactment of this Act. 
(f) DEFINITIONS.—In this section: 
(1) The term ‘‘Center’’ has the meaning given 
such term in section 25(a) of the National Institute 
of Standards and Technology Act (15 U.S.C. 
278k(a)). 
(2) The term ‘‘small manufacturer’’ has the 
meaning given that tern in section 1644(g) of the 
John S. McCain National Defense Authorization Act 
for Fiscal Year 2019 (Public Law 115–232; 10 
U.S.C. 2224 note). 
SEC. 1634. DEFENSE INDUSTRIAL BASE CYBERSECURITY 
THREAT HUNTING AND SENSING, DISCOVERY, 
AND MITIGATION. 
(a) DEFINITION.—In this section: 
(1) DEFENSE
INDUSTRIAL
BASE.—The term 
‘‘defense industrial base’’ means the worldwide in-
dustrial complex with capabilities to perform re-
search and development, design, produce, deliver, 
and maintain military weapon systems, subsystems, 
components, or parts to meet military requirements. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01659
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1660 
HR 6395 PCS
(2) ADVANCED DEFENSE INDUSTRIAL BASE.— 
The term ‘‘advanced defense industrial base’’ means 
any entity in the defense industrial base holding a 
Department of Defense contract that requires a cy-
bersecurity maturity model certification of level 4 or 
higher. 
(b) DEFENSE INDUSTRIAL BASE CYBERSECURITY 
THREAT HUNTING STUDY.— 
(1) IN
GENERAL.—Not later than 120 days 
after the date of the enactment of this Act, the Sec-
retary of Defense shall submit to the congressional 
defense committees a study of the feasibility and 
resourcing required to establish the Defense Indus-
trial Base Cybersecurity Threat Hunting Program 
(in this section referred to as the ‘‘Program’’) de-
scribed in subsection (c). 
(2) ELEMENTS.—The study required under 
paragraph (1) shall— 
(A) establish the resources necessary, gov-
ernance structures, and responsibility for execu-
tion of the Program, as well as any other rel-
evant considerations determined by the Sec-
retary; 
(B) include a conclusive determination of 
the Department of Defense’s capacity to estab-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01660
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1661 
HR 6395 PCS
lish the Program by the end of fiscal year 2021; 
and 
(C) identify any barriers that would pre-
vent such establishment. 
(c) DEFENSE INDUSTRIAL BASE CYBERSECURITY 
THREAT HUNTING PROGRAM.— 
(1) IN GENERAL.—Upon a positive determina-
tion of the Program’s feasibility pursuant to the 
study required under subsection (b), the Secretary of 
Defense shall establish the Program to actively iden-
tify cybersecurity threats and vulnerabilities within 
the information systems, including covered defense 
networks containing controlled unclassified informa-
tion, of entities in the defense industrial base. 
(2) PROGRAM
LEVELS.—In establishing the 
Program in accordance with paragraph (1), the Sec-
retary of Defense shall develop a tiered program 
that takes into account the following: 
(A) The cybersecurity maturity of entities 
in the defense industrial base. 
(B) The role of such entities. 
(C) Whether each such entity possesses 
controlled unclassified information and covered 
defense networks. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01661
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1662 
HR 6395 PCS
(D) The covered defense information to 
which such an entity has access as a result of 
contracts with the Department of Defense. 
(3) PROGRAM REQUIREMENTS.—The Program 
shall— 
(A) include requirements for mitigating 
any vulnerabilities identified pursuant to the 
Program; 
(B) provide a mechanism for the Depart-
ment of Defense to share with entities in the 
defense industrial base malicious code, indica-
tors of compromise, and insights on the evolv-
ing threat landscape; 
(C) provide incentives for entities in the 
defense industrial base to share with the De-
partment of Defense, including the National Se-
curity 
Agency’s 
Cybersecurity 
Directorate, 
threat and vulnerability information collected 
pursuant to threat monitoring and hunt activi-
ties; and 
(D) mandate a minimum level of program 
participation for any entity that is part of the 
advanced defense industrial base. 
(d) THREAT IDENTIFICATION PROGRAM PARTICIPA-
TION.— 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01662
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1663 
HR 6395 PCS
(1) PROHIBITION
ON
PROCUREMENT.—If the 
Program is established pursuant to subsection (c), 
beginning on the date that is 1 year after the date 
of the enactment of this Act, the Secretary of De-
fense may not procure or obtain, or extend or renew 
a contract to procure or obtain, any item, equip-
ment, system, or service from any entity in the de-
fense industrial base that is not in compliance with 
the requirements of the Program. 
(2) IMPLEMENTATION.—In implementing the 
prohibition under paragraph (1), the Secretary of 
Defense shall prioritize available funding and tech-
nical support to assist affected entities in the de-
fense industrial base as is reasonably necessary for 
such affected entities to commence participation in 
the Program and satisfy Program requirements. 
(3) WAIVER AUTHORITY.— 
(A) WAIVER.—The Secretary of Defense 
may waive the prohibition under paragraph 
(1)— 
(i) with respect to an entity or class 
of entities in the defense industrial base, if 
the Secretary determines that the require-
ment to participate in the Program is un-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01663
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1664 
HR 6395 PCS
necessary to protect the interests of the 
United States; or 
(ii) at the request of such an entity, 
if the Secretary determines there is a com-
pelling justification for such waiver. 
(B) PERIODIC REEVALUATION.—The Sec-
retary of Defense shall periodically reevaluate 
any waiver issued pursuant to subparagraph 
(A) and revoke any such waiver the Secretary 
determines is no longer warranted. 
(e) USE OF PERSONNEL AND THIRD-PARTY THREAT 
HUNTING AND SENSING CAPABILITIES.—In carrying out 
the Program, the Secretary of Defense may— 
(1) utilize Department of Defense personnel to 
hunt for threats and vulnerabilities within the infor-
mation systems of entities in the defense industrial 
base that have an active contract with Department 
of Defense; 
(2) certify third-party providers to hunt for 
threats and vulnerabilities on behalf of the Depart-
ment of Defense; 
(3) require the deployment of network sensing 
technologies capable of identifying and filtering mali-
cious network traffic; or 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01664
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1665 
HR 6395 PCS
(4) employ a combination of Department of De-
fense personnel and third-party providers and tools, 
as the Secretary determines necessary and appro-
priate, for the entity described in paragraph (1). 
(f) REGULATIONS.— 
(1) RULEMAKING AUTHORITY.—Not later than 
180 days after the date of the enactment of this Act, 
the Secretary of Defense shall promulgate such rules 
and regulations as are necessary to carry out this 
section. 
(2) CMMC HARMONIZATION.—In promulgating 
rules and regulations pursuant to paragraph (1), the 
Secretary of Defense shall consider how best to inte-
grate the requirements of this section with the De-
partment of Defense Cybersecurity Maturity Model 
Certification program. 
SEC. 1635. DEFENSE DIGITAL SERVICE. 
(a) RELATIONSHIP WITH UNITED STATES DIGITAL 
SERVICE.—Not later than 120 days after the date of the 
enactment of this Act, the Secretary of Defense and the 
Administrator of the United States Digital Service shall 
establish a direct relationship between the Department of 
Defense and the United States Digital Service to address 
authorities, hiring processes, roles, and responsibilities. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01665
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1666 
HR 6395 PCS
(b) CERTIFICATION.—Not later than 120 days after 
the date of the enactment of this Act, the Secretary of 
Defense and the Administrator of the United States Dig-
ital Service shall jointly certify to the congressional de-
fense committees that the skills and qualifications of the 
Department of Defense personnel assigned to and sup-
porting the core functions of the Defense Digital Service 
are consistent with the skills and qualifications United 
States Digital Service personnel. 
SEC. 1636. LIMITATION OF FUNDING FOR NATIONAL DE-
FENSE UNIVERSITY. 
Of the funds authorized to be appropriated by this 
Act for fiscal year 2021 for the National Defense Univer-
sity, not more than 60 percent of such funds may be obli-
gated or expended until the Joint Staff and the National 
Defense University present to the congressional defense 
committees the following: 
(1) A comprehensive plan for resourcing and 
growing the student population of the College of In-
formation and Cyberspace, including by— 
(A) enrolling a minimum of 350 cyber 
workforce students per academic year; and 
(B) graduating a minimum of 42 students 
(including a minimum of 28 United States mili-
tary students) in the Joint Professional Military 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01666
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1667 
HR 6395 PCS
Education Phase II War College 10- month 
resident program in fiscal year 2021, and im-
plementing a plan to graduate a minimum of 
70 students (including a minimum of 50 United 
States military and civilian students) in fiscal 
year 2023 and in each year thereafter through 
the Future Year Defense Program. 
(2) Budget documents for the Future Year De-
fense Program which show funding for the College 
of Information and Cyberspace to support the com-
prehensive plan described in subsection (a). 
(3) A comprehensive presentation of how pro-
grams of study on cyber-related matters are being 
expanded and integrated into Joint Professional 
Military Education at all National Defense Univer-
sity constituent colleges. 
SEC. 1637. CRITICAL INFRASTRUCTURE CYBER INCIDENT 
REPORTING PROCEDURES. 
(a) IN GENERAL.—Not later than 1 year after the 
date of enactment of this Act, the Secretary, acting 
through the Director, and in consultation with Sector Risk 
Management Agencies and other appropriate Federal de-
partments, shall, after notice and an opportunity for com-
ment, establish requirements and a process for covered 
critical infrastructure entities to report a covered cyberse-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01667
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1668 
HR 6395 PCS
curity incident to the national cybersecurity and commu-
nications integration center of the Department of Home-
land Security, in furtherance of its mission with respect 
to cybersecurity risks as set forth in section 2209. 
(b) PROCEDURES.—The cybersecurity incident re-
porting requirements and process described in subsection 
(a) shall, at a minimum, include— 
(1) a definition of covered critical infrastructure 
entities that are required to comply with the report-
ing requirements of this section, based on threshold 
criteria related to— 
(A) the likelihood that such entity may be 
targeted by a malicious cyber actor, including a 
foreign country; 
(B) consequences that disruption to or 
compromise of such entity could cause to na-
tional security, economic security, or public 
health and safety; and 
(C) maturity of security operations in de-
tecting, investigating, and mitigating a cyberse-
curity incident; 
(2) criteria for the types and thresholds for a 
covered cybersecurity incident to be reported under 
this section, including the sophistication or novelty 
of the cyber attack, the type, volume, and sensitivity 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01668
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1669 
HR 6395 PCS
of the data at issue, and the number of individuals 
affected or potentially affected by a cybersecurity in-
cident, subject to the limitations described in sub-
section (c); and 
(3) procedures to comply with reporting re-
quirements pursuant to subsection (c). 
(c) CYBERSECURITY
INCIDENT
REPORTING
RE-
QUIREMENTS FOR COVERED CRITICAL INFRASTRUCTURE 
ENTITIES.— 
(1) IN GENERAL.—A covered critical infrastruc-
ture entity, as defined by the Director pursuant to 
subsection (b),meets the requirements of this para-
graph if, upon becoming aware that a covered cyber-
security incident, including an incident involving 
ransomware, social engineering, malware, or unau-
thorized access, has occurred involving any critical 
infrastructure system or subsystem of the critical in-
frastructure, the entity— 
(A) promptly reports such incident to the 
national cybersecurity and communications inte-
gration center, consistent with such require-
ments and process, as soon as practicable (but 
in no case later than 72 hours after the entity 
first becomes aware that the incident occurred); 
and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01669
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1670 
HR 6395 PCS
(B) provides all appropriate updates to any 
report submitted under subparagraph (A). 
(2) CONTENTS OF REPORT.—Each report sub-
mitted under subparagraph (A) of paragraph (1) 
shall contain such information as the Director pre-
scribes in the reporting procedures issued under sub-
section (a), including the following information with 
respect to any cybersecurity incident covered by the 
report: 
(A) The date, time, and time zone when 
the cybersecurity incident began, if known. 
(B) The date, time, and time zone when 
the cybersecurity incident was detected. 
(C) The date, time, and duration of the cy-
bersecurity incident. 
(D) The circumstances of the cybersecurity 
incident, including the specific critical infra-
structure systems or subsystems believed to 
have been accessed and information acquired, if 
any, as well as any interdependent systems that 
suffered damage, disruption, or were otherwise 
impacted by the incident. 
(E) Any planned and implemented tech-
nical measures to respond to and recover from 
the incident. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01670
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1671 
HR 6395 PCS
(F) In the case of any report which is an 
update to a prior report, any additional mate-
rial information relating to the incident, includ-
ing technical data, as it becomes available. 
(d) EFFECT OF OTHER REPORTING.—A covered crit-
ical infrastructure entity shall not be considered to have 
satisfied the reporting requirements set forth in subsection 
(c)(1) by reporting information required pursuant to sub-
section (c)(2) related to a covered cybersecurity incident 
to any person, agency or organization, including a law en-
forcement agency, other than to the Director using the 
incident reporting procedures establish by the national cy-
bersecurity and communications integration center using 
the incident reporting procedures established by the Direc-
tor pursuant to subsection (a). 
(e) DISCLOSURE, RETENTION, AND USE.— 
(1) AUTHORIZED ACTIVITIES.—Covered cyber-
security incidents and related reporting information 
provided to the Director pursuant to this section 
may not be disclosed to, retained by, or used by, 
consistent with otherwise applicable provisions of 
Federal law, any Federal agency or department, or 
any component, officer, employee, or agent of the 
Federal Government, except if the Director deter-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01671
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1672 
HR 6395 PCS
mines such disclosure, retention, or use is necessary 
for— 
(A) the purpose of identifying— 
(i) a cybersecurity threat as such term 
is defined insection 102(5) of the Cyberse-
curity Act of 2015 (contained in division N 
of the Consolidated Appropriations Act, 
2016 (Public Law 114–113; 6 U.S.C. 
1501)), including the source of such cyber-
security threat; or 
(ii) a security vulnerability; 
(B) the purpose of responding to, or other-
wise preventing or mitigating, a specific threat 
of death, serious bodily harm, or serious eco-
nomic harm, including a terrorist act or a use 
of a weapon of mass destruction; 
(C) the purpose of responding to, inves-
tigating, prosecuting, or otherwise preventing or 
mitigating, a serious threat to a minor, includ-
ing sexual exploitation and threats to physical 
safety; or 
(D) the purpose of preventing, inves-
tigating, disrupting, or prosecuting an offense 
arising out of a threat described in subpara-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01672
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1673 
HR 6395 PCS
graphs (B)–(C) (3) or any of the offenses listed 
in— 
(i) sections 1028 through 1030 of title 
18, United States Code (relating to fraud 
and identity theft); 
(ii) chapter 37 of such title (relating 
to espionage and censorship); and 
(iii) chapter 90 of such title (relating 
to protection of trade secrets). 
(2) EXCEPTION.—The Director may enter into 
an agreement with a federally funded research and 
development center or other research institution to 
provide information in an anonymized manner for 
the purpose of aggregating and analyzing cybersecu-
rity incident data and other reported information for 
the limited purpose of better understanding the 
cyber threat landscape, subject to appropriate pro-
tections for information and removal of any unneces-
sary personal or identifying information. 
(3) PRIVACY AND CIVIL LIBERTIES.—Covered 
cybersecurity incidents and related reporting infor-
mation provided to the Director pursuant to this 
section shall be retained, used, and disseminated, 
where permissible and appropriate, by the Federal 
Government— 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01673
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1674 
HR 6395 PCS
(A) in a manner that protects from unau-
thorized use or disclosure any information re-
ported under this section that may contain— 
(i) personal information of a specific 
individual; or 
(ii) information that identifies a spe-
cific individual; and 
(B) in a manner that protects the con-
fidentiality of information reported under this 
section containing— 
(i) personal information of a specific 
individual; or 
(ii) information that identifies a spe-
cific individual. 
(4) FEDERAL
REGULATORY
AUTHORITY.—In-
formation regarding a covered cybersecurity incident 
and related reporting information provided to the 
Director pursuant to this section may not be used by 
any Federal, State, Tribal, or local government to 
regulate, including through an enforcement action, 
the lawful activities of any non-Federal entity. 
(f) LIMITATION.—The Director may not set criteria 
or develop procedures pursuant to this Act that require 
a covered critical infrastructure entity, identified pursuant 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01674
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1675 
HR 6395 PCS
to subsection (b)(1), to report on any cybersecurity inci-
dent unless such incident— 
(1) causes a loss in the confidentiality, integ-
rity, or availability of proprietary, sensitive, or per-
sonal information; 
(2) results in a disruption or otherwise inhibits 
the ability of an entity to deliver services or conduct 
its primary business activity; or 
(3) was carried out by a foreign country, or 
where there is reason to believe a foreign country 
was involved in such incident. 
(g) DEFINITIONS.—In this section: 
(1) COVERED CRITICAL INFRASTRUCTURE EN-
TITY.—The term ‘‘covered critical infrastructure en-
tity’’ is an entity that owns, operates, supports, or 
maintains critical infrastructure which meets the 
definition set forth by the Director pursuant to sub-
section (b)(1). 
(2) COVERED CYBERSECURITY INCIDENT.—The 
term ‘‘covered cybersecurity incident’’ means a cy-
bersecurity incident experienced by a covered critical 
infrastructure entity that meets the definition and 
criteria set forth by the Director in the procedures 
prescribed pursuant to subsection (b)(2), subject to 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01675
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1676 
HR 6395 PCS
the limitations in subsection (f) that involve, at a 
minimum, an incident that— 
(3) CRITICAL
INFRASTRUCTURE.—The term 
‘‘critical infrastructure’’ has the meaning given that 
term in section 2(4) of the Homeland Security Act 
of 2002 (Public Law 107–196; 6 U.S.C. 101(4)). 
(4) CYBERSECURITY RISK.—The term ‘‘cyberse-
curity risk’’ has the meaning given that term in sec-
tion 2209 of the Homeland Security Act of 2002 (6 
U.S.C. 659). 
(5) DEPARTMENT.—The term ‘‘Department’’ 
means the Department of Homeland Security. 
(6) DIRECTOR.—The term ‘‘Director’’ means 
the Director of the Cybersecurity and Infrastructure 
Security Agency of the Department. 
(7) NATIONAL
CYBERSECURITY
AND
COMMU-
NICATIONS INTEGRATION CENTER.—The term ‘‘na-
tional cybersecurity and communications integration 
center’’ or ‘‘Center’’ means the national cybersecu-
rity and communications integration center de-
scribed in section 2209 of the Homeland Security 
Act of 2002 (6 U.S.C. 659). 
(8) SECRETARY.—The term ‘‘Secretary’’ means 
the Secretary of Homeland Security. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01676
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1677 
HR 6395 PCS
(9) SECTOR
SPECIFIC
AGENCY.—The term 
‘‘Sector Specific Agency’’ has the meaning given 
that term in section 2201(5) of the Homeland Secu-
rity Act of 2002 (6 U.S.C. 651(5)). 
SEC. 1638. FUNDING FOR NATIONAL CENTER FOR HARD-
WARE AND EMBEDDED SYSTEMS SECURITY 
AND TRUST. 
(a) INCREASE.—Notwithstanding the amounts set 
forth in the funding tables in division D, the amount au-
thorized to be appropriated in section 4201 for research, 
development, test, and evaluation, Air Force, as specified 
in the corresponding funding table in section 4201, for 
Aerospace Sensors, line 009, is hereby increased by 
$3,000,000 for the National Center for Hardware and 
Embedded Systems Security and Trust. 
(b) OFFSET.—Notwithstanding the amounts set forth 
in the funding tables in division D, the amount authorized 
to be appropriated in section 1402 for chemical agents and 
munitions destruction, as specified in the corresponding 
funding table in section 4501, for Chem Demilitariza-
tion—RDT&E, is hereby reduced by $3,000,000. 
SEC. 1639. STRENGTHENING FEDERAL NETWORKS. 
(a) AUTHORITY.—Section 3553(b) of title 44, United 
States Code, is amended— 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01677
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1678 
HR 6395 PCS
(1) in paragraph (6)(D), by striking ‘‘; and’’ at 
the end and inserting a semicolon; 
(2) by redesignating paragraph (7) as para-
graph (8); and 
(3) by inserting after paragraph (6) the fol-
lowing new paragraph: 
‘‘(7) hunting for and identifying, with or with-
out advance notice, threats and vulnerabilities within 
Federal information systems; and’’. 
(b) BINDING OPERATIONAL DIRECTIVE.—Not later 
than 1 year after the date of the enactment of this section, 
the Secretary of Homeland Security shall issue a binding 
operational directive pursuant to subsection (b)(2) of sec-
tion 3553 of title 44, United States Code, to implement 
paragraph (7) of section 3553(b) of title 44, United States 
Code, as added by subsection (a). 
SEC. 1640. DOD CYBER HYGIENE AND CYBERSECURITY MA-
TURITY 
MODEL 
CERTIFICATION 
FRAME-
WORK. 
(a) IN GENERAL.—Not later than 180 days after the 
date of the enactment of this Act, the Secretary of Defense 
shall submit to the congressional defense committees and 
the Comptroller General of the United States a report on 
the cyber hygiene practices of the Department of Defense 
and the extent to which such practices are effective at pro-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01678
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1679 
HR 6395 PCS
tecting Department missions, information, system and 
networks. The report shall include the following: 
(1) An assessment of each Department compo-
nent’s compliance with the requirements and levels 
identified in the Cyber Maturity Model Certification 
framework. 
(2) For each Department component that does 
not achieve the requirements for ‘‘good cyber hy-
giene’’ as defined in CMMC Model Version 1.02, a 
plan for how that component will implement security 
measures to bring it into compliance with good cyber 
hygiene requirements within 1 year, and a strategy 
for mitigating potential vulnerabilities and con-
sequences until such requirements are implemented. 
(b) COMPTROLLER GENERAL REPORT REQUIRED.— 
Not later than 180 days after the submission of the report 
required under subsection (a), the Comptroller General of 
the United States shall conduct an independent review of 
the report and provide a briefing to the congressional de-
fense committees on the findings of the review. 
SEC. 1640A. SUBPOENA AUTHORITY. 
(a) IN GENERAL.—Section 2209 of the Homeland 
Security Act of 2002 (6 U.S.C. 659) is amended— 
(1) in subsection (a)— 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01679
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1680 
HR 6395 PCS
(A) 
by 
redesignating 
paragraphs 
(1) 
through (6) as paragraphs (2) through (7), re-
spectively; 
(B) by inserting before paragraph (2), as 
so redesignated, the following new paragraph: 
‘‘(1) the term ‘cybersecurity purpose’ has the 
meaning given that term in section 102 of the Cy-
bersecurity Information Sharing Act of 2015 (6 
U.S.C. 1501);’’; 
(C) in paragraph (6), as so redesignated, 
by striking ‘‘and’’ at the end; 
(D) by redesignating paragraph (7), as so 
redesignated, as paragraph (8); and 
(E) by inserting after paragraph (6), as so 
redesignated, the following new paragraph: 
‘‘(7) the term ‘security vulnerability’ has the 
meaning given that term in section 102 of the Cy-
bersecurity Information Sharing Act of 2015 (6 
U.S.C. 1501); and’’; 
(2) in subsection (c)— 
(A) in paragraph (10), by striking ‘‘and’’ 
at the end; 
(B) in paragraph (11), by striking the pe-
riod at the end and inserting ‘‘; and’’; and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01680
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1681 
HR 6395 PCS
(C) by adding at the end the following new 
paragraph: 
‘‘(12) detecting, identifying, and receiving infor-
mation for a cybersecurity purpose about security 
vulnerabilities relating to critical infrastructure in 
information systems and devices.’’; and 
(3) by adding at the end the following new sub-
section: 
‘‘(o) SUBPOENA AUTHORITY.— 
‘‘(1) DEFINITION.—In this subsection, the term 
‘covered device or system’— 
‘‘(A) means a device or system commonly 
used to perform industrial, commercial, sci-
entific, or governmental functions or processes 
that relate to critical infrastructure, including 
operational and industrial control systems, dis-
tributed control systems, and programmable 
logic controllers; and 
‘‘(B) does not include personal devices and 
systems, such as consumer mobile devices, home 
computers, residential wireless routers, or resi-
dential internet enabled consumer devices. 
‘‘(2) AUTHORITY.— 
‘‘(A) IN GENERAL.—If the Director identi-
fies a system connected to the internet with a 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01681
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1682 
HR 6395 PCS
specific security vulnerability and has reason to 
believe such security vulnerability relates to 
critical infrastructure and affects a covered de-
vice or system, and the Director is unable to 
identify the entity at risk that owns or operates 
such covered device or system, the Director may 
issue a subpoena for the production of informa-
tion necessary to identify and notify such entity 
at risk, in order to carry out a function author-
ized under subsection (c)(12). 
‘‘(B) LIMIT
ON
INFORMATION.—A sub-
poena issued pursuant to subparagraph (A) 
may seek information— 
‘‘(i) only in the categories set forth in 
subparagraphs (A), (B), (D), and (E) of 
section 2703(c)(2) of title 18, United 
States Code; and 
‘‘(ii) for not more than 20 covered de-
vices or systems. 
‘‘(C) LIABILITY
PROTECTIONS
FOR
DIS-
CLOSING PROVIDERS.—The provisions of section 
2703(e) of title 18, United States Code, shall 
apply to any subpoena issued pursuant to sub-
paragraph (A). 
‘‘(3) COORDINATION.— 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01682
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1683 
HR 6395 PCS
‘‘(A) IN GENERAL.—If the Director exer-
cises the subpoena authority under this sub-
section, and in the interest of avoiding inter-
ference with ongoing law enforcement investiga-
tions, the Director shall coordinate the issuance 
of any such subpoena with the Department of 
Justice, including the Federal Bureau of Inves-
tigation, pursuant to interagency procedures 
which the Director, in coordination with the At-
torney General, shall develop not later than 60 
days after the date of the enactment of this 
subsection. 
‘‘(B) CONTENTS.—The inter-agency proce-
dures developed under this paragraph shall pro-
vide that a subpoena issued by the Director 
under this subsection shall be— 
‘‘(i) issued to carry out a function de-
scribed in subsection (c)(12); and 
‘‘(ii) subject to the limitations speci-
fied in this subsection. 
‘‘(4) NONCOMPLIANCE.—If any person, part-
nership, corporation, association, or entity fails to 
comply with any duly served subpoena issued pursu-
ant to this subsection, the Director may request that 
the Attorney General seek enforcement of such sub-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01683
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1684 
HR 6395 PCS
poena in any judicial district in which such person, 
partnership, corporation, association, or entity re-
sides, is found, or transacts business. 
‘‘(5) NOTICE.—Not later than 7 days after the 
date on which the Director receives information ob-
tained through a subpoena issued pursuant to this 
subsection, the Director shall notify any entity iden-
tified by information obtained pursuant to such sub-
poena regarding such subpoena and the identified 
vulnerability. 
‘‘(6) AUTHENTICATION.— 
‘‘(A) IN GENERAL.—Any subpoena issued 
pursuant to this subsection shall be authenti-
cated with a cryptographic digital signature of 
an authorized representative of the Agency, or 
other comparable successor technology, that al-
lows the Agency to demonstrate that such sub-
poena was issued by the Agency and has not 
been altered or modified since such issuance. 
‘‘(B) INVALID IF NOT AUTHENTICATED.— 
Any subpoena issued pursuant to this sub-
section that is not authenticated in accordance 
with subparagraph (A) shall not be considered 
to be valid by the recipient of such subpoena. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01684
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1685 
HR 6395 PCS
‘‘(7) PROCEDURES.—Not later than 90 days 
after the date of the enactment of this subsection, 
the Director shall establish internal procedures and 
associated training, applicable to employees and op-
erations of the Agency, regarding subpoenas issued 
pursuant to this subsection, which shall address the 
following: 
‘‘(A) The protection of and restriction on 
dissemination of nonpublic information obtained 
through such a subpoena, including a require-
ment that the Agency not disseminate non-
public information obtained through such a sub-
poena that identifies the party that is subject to 
such subpoena or the entity at risk identified by 
information obtained, except that the Agency 
may share the nonpublic information with the 
Department of Justice for the purpose of en-
forcing such subpoena in accordance with para-
graph (4), and may share with a Federal agen-
cy the nonpublic information of the entity at 
risk if— 
‘‘(i) the Agency identifies or is noti-
fied of a cybersecurity incident involving 
such entity, which relates to the vulner-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01685
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1686 
HR 6395 PCS
ability which led to the issuance of such 
subpoena; 
‘‘(ii) the Director determines that 
sharing the nonpublic information with an-
other Federal department or agency is nec-
essary to allow such department or agency 
to take a law enforcement or national secu-
rity action, consistent with the interagency 
procedures under paragraph (3)(A), or ac-
tions related to mitigating or otherwise re-
solving such incident; 
‘‘(iii) the entity to which the informa-
tion pertains is notified of the Director’s 
determination, to the extent practicable 
consistent with national security or law en-
forcement interests, consistent with such 
interagency procedures; and 
‘‘(iv) the entity consents, except that 
the entity’s consent shall not be required if 
another Federal department or agency 
identifies the entity to the Agency in con-
nection with a suspected cybersecurity inci-
dent. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01686
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1687 
HR 6395 PCS
‘‘(B) The restriction on the use of informa-
tion obtained through such a subpoena for a cy-
bersecurity purpose. 
‘‘(C) The retention and destruction of non-
public information obtained through such a sub-
poena, including— 
‘‘(i) destruction of such information 
that the Director determines is unrelated 
to critical infrastructure immediately upon 
providing notice to the entity pursuant to 
paragraph (5); and 
‘‘(ii) destruction of any personally 
identifiable information not later than 6 
months after the date on which the Direc-
tor receives information obtained through 
such a subpoena, unless otherwise agreed 
to by the individual identified by the sub-
poena respondent. 
‘‘(D) The processes for providing notice to 
each party that is subject to such a subpoena 
and each entity identified by information ob-
tained under such a subpoena. 
‘‘(E) The processes and criteria for con-
ducting critical infrastructure security risk as-
sessments to determine whether a subpoena is 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01687
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1688 
HR 6395 PCS
necessary prior to being issued pursuant to this 
subsection. 
‘‘(F) The information to be provided to an 
entity at risk at the time of the notice of the 
vulnerability, which shall include— 
‘‘(i) a discussion or statement that re-
sponding to, or subsequent engagement 
with, the Agency, is voluntary; and 
‘‘(ii) to the extent practicable, infor-
mation regarding the process through 
which the Director identifies security 
vulnerabilities. 
‘‘(8) LIMITATION ON PROCEDURES.—The inter-
nal procedures established pursuant to paragraph 
(7) may not require an owner or operator of critical 
infrastructure to take any action as a result of a no-
tice of vulnerability made pursuant to this Act. 
‘‘(9) REVIEW OF PROCEDURES.—Not later than 
1 year after the date of the enactment of this sub-
section, the Privacy Officer of the Agency shall— 
‘‘(A) review the internal procedures estab-
lished pursuant to paragraph (7) to ensure 
that— 
‘‘(i) such procedures are consistent 
with fair information practices; and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01688
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1689 
HR 6395 PCS
‘‘(ii) the operations of the Agency 
comply with such procedures; and 
‘‘(B) notify the Committee on Homeland 
Security and Governmental Affairs of the Sen-
ate and the Committee on Homeland Security 
of the House of Representatives of the results 
of the review under subparagraph (A). 
‘‘(10) PUBLICATION
OF
INFORMATION.—Not 
later than 120 days after establishing the internal 
procedures under paragraph (7), the Director shall 
publish information on the website of the Agency re-
garding the subpoena process under this subsection, 
including information regarding the following: 
‘‘(A) Such internal procedures. 
‘‘(B) The purpose for subpoenas issued 
pursuant to this subsection. 
‘‘(C) The subpoena process. 
‘‘(D) The criteria for the critical infra-
structure security risk assessment conducted 
prior to issuing a subpoena. 
‘‘(E) Policies and procedures on retention 
and sharing of data obtained by subpoenas. 
‘‘(F) Guidelines on how entities contacted 
by the Director may respond to notice of a sub-
poena. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01689
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1690 
HR 6395 PCS
‘‘(11) ANNUAL REPORTS.—The Director shall 
annually submit to the Committee on Homeland Se-
curity and Governmental Affairs of the Senate and 
the Committee on Homeland Security of the House 
of Representatives a report (which may include a 
classified annex but with the presumption of declas-
sification) on the use of subpoenas issued pursuant 
to this subsection, which shall include the following: 
‘‘(A) A discussion of the following: 
‘‘(i) The effectiveness of the use of 
such subpoenas to mitigate critical infra-
structure security vulnerabilities. 
‘‘(ii) The critical infrastructure secu-
rity risk assessment process conducted for 
subpoenas issued under this subsection. 
‘‘(iii) The number of subpoenas so 
issued during the preceding year. 
‘‘(iv) To the extent practicable, the 
number of vulnerable covered devices or 
systems mitigated under this subsection by 
the Agency during the preceding year. 
‘‘(v) The number of entities notified 
by the Director under this subsection, and 
their responses, during the preceding year. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01690
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1691 
HR 6395 PCS
‘‘(B) For each subpoena issued pursuant 
to this subsection, the following: 
‘‘(i) Information relating to the source 
of the security vulnerability detected, iden-
tified, or received by the Director. 
‘‘(ii) Information relating to the steps 
taken to identify the entity at risk prior to 
issuing the subpoena. 
‘‘(iii) A description of the outcome of 
the subpoena, including discussion on the 
resolution or mitigation of the critical in-
frastructure security vulnerability. 
‘‘(12) PUBLICATION
OF
THE
ANNUAL
RE-
PORTS.—The Director shall publish a version of the 
annual report required under paragraph (11) on the 
website of the Agency, which shall, at a minimum, 
include the findings described in clauses (iii), (iv), 
and (v) of subparagraph (A) of such paragraph. 
‘‘(13) PROHIBITION ON USE OF INFORMATION 
FOR
UNAUTHORIZED
PURPOSES.—Any information 
obtained pursuant to a subpoena issued under this 
subsection may not be provided to any other Federal 
department or agency for any purpose other than a 
cybersecurity purpose or for the purpose of enforcing 
a subpoena issued pursuant to this subsection.’’. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01691
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1692 
HR 6395 PCS
(b) RULES OF CONSTRUCTION.— 
(1) PROHIBITION
ON
NEW
REGULATORY
AU-
THORITY.—Nothing in this section or the amend-
ments made by this section may be construed to 
grant the Secretary of Homeland Security, or the 
head of any another Federal agency or department, 
any authority to promulgate regulations or set 
standards relating to the cybersecurity of private 
sector critical infrastructure that was not in effect 
on the day before the date of the enactment of this 
Act. 
(2) PRIVATE ENTITIES.—Nothing in this sec-
tion or the amendments made by this section may be 
construed to require any private entity to— 
(A) to request assistance from the Director 
of the Cybersecurity and Infrastructure Secu-
rity Agency of the Department of Homeland 
Security; or 
(B) implement any measure or rec-
ommendation suggested by the Director. 
SEC. 1640B. EXTENSION OF SUNSET FOR PILOT PROGRAM 
ON REGIONAL CYBERSECURITY TRAINING 
CENTER FOR THE ARMY NATIONAL GUARD. 
Section 1651(e) of the John S. McCain National De-
fense Authorization Act for Fiscal Year 2019 (Public Law 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01692
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1693 
HR 6395 PCS
115–232; 32 U.S.C. 501 note) is amended by striking 
‘‘shall expire on the date that is two years after the date 
of the enactment of this Act’’ and inserting ‘‘shall expire 
on August 31, 2022’’. 
SEC. 1640C. CISA CYBERSECURITY SUPPORT TO AGENCIES. 
Section 3553(b) of title 44, United States Code, is 
amended— 
(1) in paragraph (6)(D), by striking ‘‘; and’’ at 
the end and inserting a semicolon; 
(2) by redesignating paragraph (7) as para-
graph (8); 
(3) by inserting after paragraph (6) the fol-
lowing new paragraph: 
‘‘(7) upon request by an agency, and at the 
Secretary’s discretion, with or without reimburse-
ment— 
‘‘(A) providing services, functions, or capa-
bilities, including operation of the agency’s in-
formation security program, to assist the agen-
cy with meeting the requirements set forth in 
section 3554(b); and 
‘‘(B) deploying, operating, and maintaining 
secure technology platforms and tools, including 
networks and common business applications, for 
use by the agency to perform agency functions, 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01693
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1694 
HR 6395 PCS
including collecting, maintaining, storing, proc-
essing, and analyzing information; and’’. 
SEC. 1640D. ESTABLISHMENT IN DHS OF JOINT CYBER 
PLANNING OFFICE. 
(a) AMENDMENT.—Subtitle A of title XXII of the 
Homeland Security Act of 2002 (6 U.S.C. 651 et seq.) 
is amended by adding at the end the following new section: 
‘‘SEC. 2215. JOINT CYBER PLANNING OFFICE. 
‘‘(a) ESTABLISHMENT OF OFFICE.—There is estab-
lished in the Agency an office for joint cyber planning (in 
this section referred to as the ‘Office’) to develop, for pub-
lic and private sector entities, plans for cyber defense oper-
ations, including the development of a set of coordinated 
actions to protect, detect, respond to, and recover from 
cybersecurity risks or incidents or limit, mitigate, or de-
fend against coordinated, malicious cyber operations that 
pose a potential risk to critical infrastructure or national 
interests. The Office shall be headed by a Deputy Assist-
ant Director of Joint Cyber Planning (in this section re-
ferred to as the ‘Director’) within the Cybersecurity Divi-
sion. 
‘‘(b) PLANNING AND EXECUTION.—In leading the de-
velopment of plans for cyber defense operations pursuant 
to subsection (a), the Director shall— 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01694
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1695 
HR 6395 PCS
‘‘(1) coordinate with relevant Federal depart-
ments and agencies to establish processes and proce-
dures necessary to develop and maintain ongoing co-
ordinated plans for cyber defense operations; 
‘‘(2) leverage cyber capabilities and authorities 
of participating Federal departments and agencies, 
as appropriate, in furtherance of plans for cyber de-
fense operations; 
‘‘(3) ensure that plans for cyber defense oper-
ations are, to the greatest extent practicable, devel-
oped in collaboration with relevant private sector en-
tities, particularly in areas in which such entities 
have comparative advantages in limiting, mitigating, 
or defending against a cybersecurity risk or incident 
or coordinated, malicious cyber operation; 
‘‘(4) ensure that plans for cyber defense oper-
ations, as appropriate, are responsive to potential 
adversary activity conducted in response to United 
States offensive cyber operations; 
‘‘(5) facilitate the exercise of plans for cyber de-
fense operations, including by developing and mod-
eling scenarios based on an understanding of adver-
sary threats to, vulnerability of, and potential con-
sequences of disruption or compromise of critical in-
frastructure; 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01695
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1696 
HR 6395 PCS
‘‘(6) coordinate with and, as necessary, support 
relevant Federal departments and agencies in the es-
tablishment of procedures, development of additional 
plans, including for offensive and intelligence activi-
ties in support of cyber defense operations, and cre-
ation of agreements necessary for the rapid execu-
tion of plans for cyber defense operations when a cy-
bersecurity risk or incident or malicious cyber oper-
ation has been identified; and 
‘‘(7) support public and private sector entities, 
as appropriate, in the execution of plans developed 
pursuant to this section. 
‘‘(c) COMPOSITION.—The Office shall be composed 
of— 
‘‘(1) a central planning staff; and 
‘‘(2) appropriate representatives of Federal de-
partments and agencies, including— 
‘‘(A) the Department; 
‘‘(B) United States Cyber Command; 
‘‘(C) the National Security Agency; 
‘‘(D) the Federal Bureau of Investigation; 
‘‘(E) the Department of Justice; and 
‘‘(F) the Office of the Director of National 
Intelligence. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01696
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1697 
HR 6395 PCS
‘‘(d) CONSULTATION.—In carrying out its respon-
sibilities described in subsection (b), the Office shall regu-
larly consult with appropriate representatives of non-Fed-
eral entities, such as— 
‘‘(1) State, local, federally-recognized Tribal, 
and territorial governments; 
‘‘(2) information sharing and analysis organiza-
tions, including information sharing and analysis 
centers; 
‘‘(3) owners and operators of critical informa-
tion systems; 
‘‘(4) private entities; and 
‘‘(5) other appropriate representatives or enti-
ties, as determined by the Secretary. 
‘‘(e) INTERAGENCY AGREEMENTS.—The Secretary 
and the head of a Federal department or agency referred 
to in subsection (c) may enter into agreements for the pur-
pose of detailing personnel on a reimbursable or non-reim-
bursable basis. 
‘‘(f) DEFINITIONS.—In this section: 
‘‘(1) CYBER DEFENSE OPERATION.—The term 
‘cyber defense operation’ means defensive activities 
performed for a cybersecurity purpose. 
‘‘(2) CYBERSECURITY PURPOSE.—The term ‘cy-
bersecurity purpose’ has the meaning given such 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01697
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1698 
HR 6395 PCS
term in section 102 of the Cybersecurity Act of 2015 
(contained in division N of the Consolidated Appro-
priations Act, 2016 (Public Law 114–113; 6 U.S.C. 
1501)). 
‘‘(3) CYBERSECURITY
RISK; INCIDENT.—The 
terms ‘cybersecurity risk’ and ‘incident’ have the 
meanings given such terms in section 2209. 
‘‘(4) INFORMATION SHARING AND ANALYSIS OR-
GANIZATION.—The term ‘information sharing and 
analysis organization’ has the meaning given such 
term in section 2222(5).’’. 
(b) TECHNICAL AND CONFORMING AMENDMENT.— 
The table of contents in section 1(b) of the Homeland Se-
curity Act of 2002 is amended by inserting after the item 
relating to section 2214 the following new item: 
‘‘Sec. 2215. Joint cyber planning office.’’. 
SEC. 1640E. IMPLEMENTATION OF CERTAIN CYBERSECU-
RITY RECOMMENDATIONS; CYBER HYGIENE 
AND 
CYBERSECURITY 
MATURITY 
MODEL 
CERTIFICATION FRAMEWORK. 
(a) REPORT ON IMPLEMENTATION OF CERTAIN CY-
BERSECURITY RECOMMENDATIONS.—Not later than 180 
days after the date of the enactment of this Act, the Sec-
retary of Defense shall submit to the congressional defense 
committees a report regarding the plans of the Secretary 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01698
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1699 
HR 6395 PCS
to implement certain cybersecurity recommendations to 
ensure— 
(1) the Chief Information Officer of the Depart-
ment of Defense takes appropriate steps to ensure 
implementation of DC3I tasks; 
(2) Department components develop plans with 
scheduled completion dates to implement any re-
maining CDIP tasks overseen by the Chief Informa-
tion Officer; 
(3) the Deputy Secretary of Defense identifies 
a Department component to oversee the implementa-
tion of any CDIP tasks not overseen by the Chief 
Information Officer and reports on progress relating 
to such implementation; 
(4) Department components accurately monitor 
and report information on the extent that users have 
completed Cyber Awareness Challenge training, as 
well as the number of users whose access to the De-
partment network was revoked because such users 
have not completed such training; 
(5) the Chief Information Officer ensures all 
Department components, including DARPA, require 
their users to take Cyber Awareness Challenge train-
ing; 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01699
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1700 
HR 6395 PCS
(6) a Department component is directed to 
monitor the extent to which practices are imple-
mented to protect the Department’s network from 
key cyberattack techniques; and 
(7) the Chief Information Officer assesses the 
extent to which senior leaders of the Department 
have more complete information to make risk-based 
decisions, and revise the recurring reports (or de-
velop a new report) accordingly, including informa-
tion relating to the Department’s progress on imple-
menting— 
(A) cybersecurity practices identified in 
cyber hygiene initiatives; and 
(B) cyber hygiene practices to protect De-
partment networks from key cyberattack tech-
niques. 
(b) REPORT ON CYBER HYGIENE AND CYBERSECU-
RITY MATURITY MODEL CERTIFICATION FRAMEWORK.— 
(1) IN
GENERAL.—Not later than 180 days 
after the date of the enactment of this Act, the Sec-
retary of Defense shall submit to the congressional 
defense committees and the Comptroller General of 
the United States a report on the cyber hygiene 
practices of the Department of Defense and the ex-
tent to which such practices are effective at pro-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01700
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1701 
HR 6395 PCS
tecting Department missions, information, system 
and networks. The report shall include the following: 
(A) An assessment of each Department 
component’s compliance with the requirements 
and levels identified in the Cybersecurity Matu-
rity Model Certification framework. 
(B) For each Department component that 
does not achieve the requirements for ‘‘good 
cyber hygiene’’ as defined in CMMC Model 
Version 1.02, a plan for how that component 
will implement security measures to bring it 
into compliance with good cyber hygiene re-
quirements within one year, and a strategy for 
mitigating potential vulnerabilities and con-
sequences until such requirements are imple-
mented. 
(2) COMPTROLLER
GENERAL
REVIEW.—Not 
later than 180 days after the submission of the re-
port required under paragraph (1)), the Comptroller 
General of the United States shall conduct an inde-
pendent review of the report and provide a briefing 
to the congressional defense committees on the find-
ings of the review. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01701
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1702 
HR 6395 PCS
SEC. 1640F. BIENNIAL NATIONAL CYBER EXERCISE. 
(a) REQUIREMENT.—Not later than December 31, 
2023, and not less frequently than once every 2 years 
thereafter until a date that is not less than 10 years after 
the date of enactment of this Act, the Secretary, in con-
sultation with the Secretary of Defense, shall conduct an 
exercise to test the resilience, response, and recovery of 
the United States in the case of a significant cyber attack 
impacting critical infrastructure. 
(b) PLANNING AND PREPARATION.—Each exercise 
under subsection (a) shall be coordinated through the 
Joint Cyber Planning Office of the Cybersecurity and In-
frastructure Security Planning Agency and prepared by 
expert operational planners from the Department of 
Homeland Security, in coordination with the Department 
of Defense, the Federal Bureau of Investigation, and the 
appropriate intelligence community elements, as identified 
by the Director of National Intelligence. 
(c) PARTICIPANTS.— 
(1) FEDERAL
GOVERNMENT
PARTICIPANTS.— 
The following shall participate in each exercise 
under subsection (a): 
(A) Relevant interagency partners, as de-
termined by the Secretary, including relevant 
interagency partners from— 
(i) law enforcement agencies; and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01702
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1703 
HR 6395 PCS
(ii) the intelligence community. 
(B) Senior leader representatives from sec-
tor-specific agencies, as determined by the Sec-
retary. 
(2) STATE
AND
LOCAL
GOVERNMENTS.—The 
Secretary shall invite representatives from State, 
local, and Tribal governments to participate the ex-
ercises under subsection (a) if the Secretary deter-
mines such participation to be appropriate. 
(3) PRIVATE SECTOR.—Depending on the na-
ture of an exercise being conducted under subsection 
(a), the Secretary, in consultation with the senior 
leader representative of the sector-specific agencies 
participating in such exercise pursuant to paragraph 
(1)(A)(ii), shall invite the following individuals to 
participate: 
(A) Representatives from private entities. 
(B) Other individuals that the Secretary 
determines. 
(4) INTERNATIONAL PARTNERS.—Depending on 
the nature of an exercise being conducted under sub-
section (a), the Secretary may, in consultation with 
the Secretary of Defense and the Secretary of State, 
invite allies and partners of the United States to 
participate in such exercise. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01703
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1704 
HR 6395 PCS
(d) OBSERVERS.—The Secretary shall invite appro-
priately cleared representatives from the executive and leg-
islative branches of the Federal Government to observe an 
exercise under subsection (a). 
(e) ELEMENTS.—Each exercise under subsection (a) 
shall include the following elements: 
(1) Exercising the orchestration of cybersecu-
rity response and the provision of cyber support to 
Federal, State, local, and Tribal governments and 
private entities, including the exercise of the com-
mand and control and deconfliction of operational 
responses through the National Security Council, 
interagency coordinating processes and response 
groups, and each participating department and 
agency of the Federal Government. 
(2) Testing of the information-sharing needs 
and capabilities of exercise participants. 
(3) Testing of the relevant policy, guidance, and 
doctrine, including the National Cyber Incident Re-
sponse Plan of the Cybersecurity and Infrastructure 
Security Agency of the Department of Homeland Se-
curity. 
(4) Test the coordination between Federal, 
State, local, and Tribal governments and private en-
tities. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01704
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1705 
HR 6395 PCS
(5) Exercising the integration of operational ca-
pabilities of the Department of Homeland Security, 
the Cyber National Mission Force, Federal law en-
forcement, and the intelligence community. 
(6) Test relevant information sharing and oper-
ational agreements. 
(7) Exercising integrated operations, mutual 
support, and shared situational awareness of the cy-
bersecurity operations centers of the Federal Gov-
ernment, including the following: 
(A) The Cybersecurity and Infrastructure 
Security Agency. 
(B) The Cyber Threat Operations Center 
of the National Security Agency. 
(C) The Joint Operations Center of United 
States Cyber Command. 
(D) The Cyber Threat Intelligence Integra-
tion Center of the Office of the Director of Na-
tional Intelligence. 
(E) The National Cyber Investigative Joint 
Task Force of the Federal Bureau of Investiga-
tion. 
(F) The Defense Cyber Crime Center of 
the Department of Defense. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01705
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1706 
HR 6395 PCS
(G) The Intelligence Community Security 
Coordination Center of the Office of the Direc-
tor of National Intelligence. 
(f) BRIEFING.— 
(1) IN
GENERAL.—Not later than 180 days 
after the date on which each exercise under sub-
section (a) is conducted, the President shall submit 
to the appropriate congressional committees a brief-
ing on the participation of the Federal Government 
participants in each such exercise. 
(2) CONTENTS.—Each briefing required under 
paragraph (1) shall include the following: 
(A) An assessment of the decision and re-
sponse gaps observed in the national level re-
sponse. 
(B) Proposed recommendations to improve 
the resilience, response, and recovery in the 
case of a significant cyber attack impacting 
critical infrastructure. 
(C) Plans to implement the recommenda-
tions described in subparagraph (B). 
(D) Specific timelines for the implementa-
tion of such plans. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01706
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1707 
HR 6395 PCS
(g) REPEAL.—Subsection (b) of section 1648 of the 
National Defense Authorization Act for Fiscal Year 2016 
(Public Law 114–92; 129 Stat. 1119) is repealed. 
(h) NATIONAL CYBER EXERCISE PROGRAM.— 
(1) IN
GENERAL.—Not later than 180 days 
after the date of the enactment of this section, the 
Director, in consultation with appropriate represent-
atives from sector-specific agencies, the cybersecurity 
research community, and Sector Coordinating Coun-
cils, shall carry out the National Cyber Exercise 
Program (referred to in this section as the ‘‘Exercise 
Program’’) to evaluate the National Cyber Incident 
Response Plan, and other related plans and strate-
gies. 
(2) REQUIREMENTS.— 
(A) IN GENERAL.—The Exercise Program 
shall be— 
(i) as realistic as practicable, based on 
current risk assessments, including credible 
threats, vulnerabilities, and consequences; 
(ii) designed, as practicable, to simu-
late the partial or complete incapacitation 
of a State, local, or tribal government, or 
related critical infrastructure, resulting 
from a cyber incident; 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01707
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1708 
HR 6395 PCS
(iii) carried out, as appropriate, with 
a minimum degree of notice to involved 
parties regarding the timing and details of 
such exercises, consistent with safety con-
siderations; 
(iv) designed to provide for the sys-
tematic evaluation of cyber readiness and 
enhance operational understanding of the 
cyber incident response system and rel-
evant information sharing agreements; and 
(v) designed to promptly develop 
after-action reports and plans that can be 
quickly incorporating lessons learned into 
future operations. 
(B) MODEL
EXERCISE
SELECTION.—The 
Exercise Program shall include a selection of 
model exercises that State, local, and Tribal 
governments can readily adapt for use and aid 
such governments with the design, implementa-
tion, and evaluation of exercises that— 
(i) conform to the requirements under 
subparagraph (A); 
(ii) are consistent with any applicable 
State, local, or Tribal strategy or plan; and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01708
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1709 
HR 6395 PCS
(iii) provide for systematic evaluation 
of readiness. 
(i) DEFINITIONS.—In this section: 
(1) APPROPRIATE
CONGRESSIONAL
COMMIT-
TEES.—The term ‘‘appropriate congressional com-
mittees’’ means— 
(A) the Committee on Armed Services of 
the Senate; 
(B) the Committee on Armed Services of 
the House of Representatives; 
(C) the Committee on Homeland Security 
and Governmental Affairs of the Senate; and 
(D) the Committee on Homeland Security 
of the House of Representatives. 
(2) CRITICAL
INFRASTRUCTURE.—The term 
‘‘critical infrastructure’’ has the meaning given such 
term in section 1016(e) of Public Law 107–56 (42 
U.S.C. 5195c(e)). 
(3) INTELLIGENCE
COMMUNITY.—The term 
‘‘intelligence community’’ has the meaning given 
such term in section 3(4) of the National Security 
Act of 1947 (50 U.S.C. 3003(4)). 
(4) PRIVATE ENTITY.—The term ‘‘private enti-
ty’’ has the meaning given the term in section 102 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01709
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1710 
HR 6395 PCS
of the Cybersecurity Information Sharing Act of 
2015 (6 U.S.C. 1501). 
(5) SECRETARY.—The term ‘‘Secretary’’ means 
the Secretary of Homeland Security. 
(6) SECTOR-SPECIFIC AGENCY.—The term ‘‘sec-
tor-specific agency’’ has the meaning given the term 
‘‘Sector-Specific Agency’’ in section 2201 of the 
Homeland Security Act of 2002 (6 U.S.C. 651). 
(7) STATE.—The term ‘‘State’’ means any 
State of the United States, the District of Columbia, 
the Commonwealth of Puerto Rico, the Northern 
Mariana Islands, the United States Virgin Islands, 
Guam, American Samoa, and any other territory or 
possession of the United States. 
Subtitle D—Nuclear Forces 
SEC. 1641. COORDINATION IN TRANSFER OF FUNDS BY DE-
PARTMENT OF DEFENSE TO NATIONAL NU-
CLEAR SECURITY ADMINISTRATION. 
(a) IN GENERAL.—Section 179(f)(3) of title 10, 
United States Code, is amended by adding at the end the 
following new subparagraph: 
‘‘(D) The Secretary of Defense and the Secretary of 
Energy shall ensure that a transfer of estimated nuclear 
budget request authority is carried out in a manner that 
provides for coordination between the Secretary of De-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01710
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1711 
HR 6395 PCS
fense and the Administrator for Nuclear Security using 
appropriate interagency processes during the process in 
which the Secretaries develop the budget materials of the 
Department of Defense and the National Nuclear Security 
Administration, including by beginning such coordination 
by not later than June 30 for such budget materials that 
will be submitted during the following year.’’. 
(b) REPORTS.—Subparagraph (B) of such section is 
amended by adding at the end the following new clause: 
‘‘(iv) A description of the total amount of the 
proposed estimated nuclear budget request authority 
to be transferred by the Secretary of Defense to the 
Secretary of Energy to support the weapons activi-
ties of the National Nuclear Security Administra-
tion, including— 
‘‘(A) identification of any trade-offs made 
within the budget of the Department of Defense 
as part of such proposed transfer; and 
‘‘(B) a certification made jointly by the 
Secretaries that such proposed transfer was de-
veloped in a manner that allowed for the coordi-
nation described in subparagraph (D).’’. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01711
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1712 
HR 6395 PCS
SEC. 1642. EXERCISES OF NUCLEAR COMMAND, CONTROL, 
AND COMMUNICATIONS SYSTEM. 
(a) REQUIREMENT.—Chapter 24 of title 10, United 
States Code, is amended by adding at the end the fol-
lowing new section: 
‘‘§ 499b. Exercises of nuclear command, control, and 
communications system 
‘‘(a) REQUIRED EXERCISES.—Except as provided by 
subsection (b), beginning 2021, the President shall partici-
pate in a large-scale exercise of the nuclear command, con-
trol, and communications system during the first year of 
each term of the President, and may participate in such 
additional exercises as the President determines appro-
priate. 
‘‘(b) WAIVER.—The President may waive, on a case- 
by-case basis, the requirement to participate in an exercise 
under subsection (a) if the President— 
‘‘(1) determines that participating in such an 
exercise is infeasible by reason of a war declared by 
Congress, a national emergency declared by the 
President or Congress, a public health emergency 
declared by the Secretary of Health and Human 
Services under section 319 of the Public Health 
Service Act (42 U.S.C. 247d), or other similar exi-
gent circumstance; and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01712
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1713 
HR 6395 PCS
‘‘(2) submits to the congressional defense com-
mittees a notice of the waiver and a description of 
such determination.’’. 
(b) CLERICAL AMENDMENT.—The table of sections 
at the beginning of such chapter is amended by adding 
at the end the following new item: 
‘‘499b. Exercises of nuclear command, control, and communications system.’’. 
SEC. 1643. INDEPENDENT STUDIES ON NUCLEAR WEAPONS 
PROGRAMS OF CERTAIN FOREIGN STATES. 
(a) STUDY.—Not later than 60 days after the date 
of the enactment of this Act, the Secretary of Defense 
shall seek to enter into a contract with a federally funded 
research and development center to conduct a study on 
the nuclear weapons programs of covered foreign coun-
tries. 
(b) MATTERS INCLUDED.—The study under sub-
section (a) shall compile open-source data to conduct an 
analysis of the following for each covered foreign country: 
(1) The activities, budgets, and policy docu-
ments, regarding the nuclear weapons program. 
(2) The known research and development activi-
ties with respect to nuclear weapons. 
(3) The inventories of nuclear weapons and de-
livery vehicles with respect to both deployed and 
nondeployed weapons. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01713
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1714 
HR 6395 PCS
(4) The capabilities of such nuclear weapons 
and delivery vehicles. 
(5) The physical sites used for nuclear proc-
essing, testing, and weapons integration. 
(6) The human capital of the scientific and 
technical workforce involved in nuclear programs, in-
cluding with respect to matters relating to the edu-
cation, knowledge, and technical capabilities of that 
workforce. 
(7) The known deployment areas for nuclear 
weapons. 
(8) Information with respect to the nuclear 
command and control system. 
(9) The factors and motivations driving the nu-
clear weapons program and the nuclear command 
and control system. 
(10) Any other information that the federally 
funded research and development center determines 
appropriate. 
(c) SUBMISSION
TO
DOD.—Not later than 14 
months after the date of the enactment of this Act, and 
each year thereafter for the following 2 years, the federally 
funded research and development center shall submit to 
the Secretary the study under subsection (a) and any up-
dates to the study. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01714
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1715 
HR 6395 PCS
(d) SUBMISSION TO CONGRESS.—Not later than 30 
days after the date on which the Secretary receives the 
study under subsection (a) or updates to the study, the 
Secretary shall submit to the appropriate congressional 
committees the study or such updates, without change. 
(e) PUBLIC RELEASE.—The federally funded re-
search and development center shall maintain an internet 
website on which the center— 
(1) publishes the study under subsection (a) by 
not later than 30 days after the date on which the 
Secretary receives the study under subsection (c); 
and 
(2) provides on an ongoing basis commentaries, 
analyses, updates, and other information regarding 
the nuclear weapons of covered foreign countries. 
(f) FORM.—The study under subsection (a) shall be 
in unclassified form. 
(g) MODIFICATION TO REPORT ON NUCLEAR FORCES 
OF THE UNITED STATES AND NEAR-PEER COUNTRIES.— 
Section 1676 of the National Defense Authorization Act 
for Fiscal Year 2020 (Public Law 116–92; 133 Stat. 
1778) is amended— 
(1) in subsection (a), by striking ‘‘Not later 
than February 15, 2020, the Secretary of Defense, 
in coordination with the Director of National Intel-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01715
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1716 
HR 6395 PCS
ligence, shall’’ and inserting ‘‘Not later than Feb-
ruary 15, 2020, and each year thereafter through 
2023, the Secretary of Defense and the Director of 
National Intelligence shall jointly’’; and 
(2) in subsection (b), by adding at the end the 
following new paragraph: 
‘‘(4) With respect to the current and planned 
nuclear systems specified in paragraphs (1) through 
(3), the factors and motivations driving the develop-
ment and deployment of the systems.’’. 
(h) DEFINITIONS.—In this section: 
(1) The term ‘‘appropriate congressional com-
mittees’’ means— 
(A) the congressional defense committees; 
(B) the Committee on Foreign Affairs and 
the Permanent Select Committee on Intelligence 
of the House of Representatives; and 
(C) the Committee on Foreign Relations 
and the Select Committee on Intelligence of the 
Senate. 
(2) The term ‘‘covered foreign country’’ means 
each of the following: 
(A) China. 
(B) North Korea. 
(C) Russia. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01716
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1717 
HR 6395 PCS
(3) The term ‘‘open-source data’’ includes data 
derived from, found in, or related to any of the fol-
lowing: 
(A) Geospatial information. 
(B) Seismic sensors. 
(C) Commercial data. 
(D) Public government information. 
(E) Academic journals and conference pro-
ceedings. 
(F) Media reports. 
(G) Social media. 
SEC. 1644. ROLE OF SECRETARY OF DEFENSE AND SEC-
RETARY OF ENERGY ON NUCLEAR WEAPONS 
COUNCIL. 
(a) MEMBERSHIP.—Subsection (a) of section 179 of 
title 10, United States Code, is amended— 
(1) by redesignating paragraphs (1) through 
(6) as paragraphs (3) through (8), respectively; and 
(2) by inserting before paragraph (3), as so re-
designated, the following new paragraphs: 
‘‘(1) The Secretary of Defense. 
‘‘(2) The Secretary of Energy.’’. 
(b) CHAIRMAN; MEETINGS.—Subsection (b) of sec-
tion 179 of title 10, United States Code, is amended to 
read as follows: 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01717
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1718 
HR 6395 PCS
‘‘(b) CHAIRMAN; MEETINGS.—(1) The Council shall 
be co-chaired by the Secretary of Defense and the Sec-
retary of Energy. Any reference in any statute or regula-
tion to the Chairman of the Council shall be deemed to 
be a reference to the Secretary of Defense and the Sec-
retary of Energy jointly. 
‘‘(2) The Council shall meet not less often than once 
every three months. To the extent possible, not later than 
seven days before a meeting, the Chairman shall dissemi-
nate to each member of the Council the agenda and docu-
ments for such meeting.’’. 
SEC. 1645. LIMITATION ON AVAILABILITY OF FUNDS RELAT-
ING TO UPDATES ON MEETINGS HELD BY NU-
CLEAR WEAPONS COUNCIL. 
Section 179(g) of title 10, United States Code, is 
amended to read as follows: 
‘‘(g) SEMIANNUAL UPDATES
ON COUNCIL MEET-
INGS.—(1) Not later than February 1 and August 1 of 
each year, the Council shall provide to the congressional 
defense committees a semiannual update including, with 
respect to the six-month period preceding the update— 
‘‘(A) the dates on which the Council met; and 
‘‘(B) except as provided by paragraph (2), a 
summary of any decisions made by the Council pur-
suant to subsection (d) at each such meeting and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01718
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1719 
HR 6395 PCS
the rationale for and options that informed such de-
cisions. 
‘‘(2) The Council shall not be required to include in 
a semiannual update under paragraph (1) the matters de-
scribed in subparagraph (B) of that paragraph with re-
spect to decisions of the Council relating to the budget 
of the President for a fiscal year if the budget for that 
fiscal year has not been submitted to Congress under sec-
tion 1105 of title 31 as of the date of the semiannual up-
date. 
‘‘(3) The Council may provide a semiannual update 
under paragraph (1) either in the form of a briefing or 
a written report. 
‘‘(4)(A) If by February 1 of any year the Council has 
not provided the semiannual update under paragraph (1) 
required by that date, not more than 50 percent of the 
funds authorized to be appropriated for that year for the 
Office of the Under Secretary of Defense for Acquisition 
and Sustainment may be obligated or expended until the 
date on which such semiannual update has been provided. 
‘‘(B) If by August 1 of any year the Council has not 
provided the semiannual update under paragraph (1) re-
quired by that date, not more than 90 percent of the funds 
authorized to be appropriated for that year for the Office 
of the Under Secretary of Defense for Acquisition and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01719
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1720 
HR 6395 PCS
Sustainment may be obligated or expended until the date 
on which such semiannual update has been provided.’’. 
SEC. 1646. BRIEFING ON NUCLEAR WEAPONS STORAGE AND 
MAINTENANCE 
FACILITIES 
OF 
THE 
AIR 
FORCE. 
Not later than 90 days after the date of the enact-
ment of this Act, the Secretary of the Air Force shall pro-
vide to the congressional defense committees a briefing on 
the efforts by the Secretary to harden and modernize the 
nuclear weapons storage and maintenance facilities of the 
Air Force. The briefing shall include the plans of the Sec-
retary with respect to the following: 
(1) Verifying that the Air Force is deploying 
tested and field-proven physical security designs of 
such facilities, including with respect to forced entry, 
blast and ballistic resistant barrier systems, that in-
corporate multiple reactive countermeasures for pro-
tection against the dedicated adversary threat classi-
fication level. 
(2) Streamlining the procurement of the infra-
structure to protect ground-based strategic deterrent 
weapons by ensuring that the physical security de-
signs of such facilities are appropriately tailored to 
the threat. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01720
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1721 
HR 6395 PCS
(3) Ensuring that competitive procedures are 
used in awarding a contract for the physical security 
design of such facilities that include a fair consider-
ation of such designs that are successfully used at 
other similar facilities. 
(4) Ensuring that the physical security design 
for which such contract is awarded— 
(A) meets the security requirements of all 
planned modernization projects for the nuclear 
weapons storage and maintenance facilities of 
the Air Force; and 
(B) do not result in higher and additional 
costs to shore up existing infrastructure at such 
facilities. 
Subtitle E—Missile Defense 
Programs 
SEC. 1651. EXTENSION AND MODIFICATION OF REQUIRE-
MENT FOR COMPTROLLER GENERAL OF THE 
UNITED STATES REVIEW AND ASSESSMENT 
OF MISSILE DEFENSE ACQUISITION PRO-
GRAMS. 
Section 232(a) of the National Defense Authorization 
Act for Fiscal Year 2012 (Public Law 112–81; 125 Stat. 
1339), as amended by section 1688 of the National De-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01721
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1722 
HR 6395 PCS
fense Authorization Act for Fiscal Year 2016 (Public Law 
114–92; 129 Stat. 1144), is amended— 
(1) in paragraph (1), by striking ‘‘through 
2020’’ and inserting ‘‘through 2025’’; and 
(2) in paragraph (2)— 
(A) by striking ‘‘through 2021’’ and insert-
ing ‘‘through 2026’’; and 
(B) by adding at the end the following new 
sentence: ‘‘In carrying out this subsection, the 
Comptroller General shall review emergent 
issues relating to such programs and account-
ability and, in consultation with the congres-
sional defense committees, either include any 
findings from the review in the reports sub-
mitted under this paragraph or provide to such 
committees a briefing on the findings.’’. 
SEC. 1652. EXTENSION OF TRANSITION OF BALLISTIC MIS-
SILE DEFENSE PROGRAMS TO MILITARY DE-
PARTMENTS. 
Section 1676(b)(1) of the National Defense Author-
ization Act for Fiscal Year 2018 (Public Law 115–91; 10 
U.S.C. 2431 note) is amended by striking ‘‘2021’’ and in-
serting ‘‘2023’’. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01722
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1723 
HR 6395 PCS
SEC. 1653. DEVELOPMENT OF HYPERSONIC AND BALLISTIC 
MISSILE TRACKING SPACE SENSOR PAYLOAD. 
(a) FINDINGS; SENSE OF CONGRESS.— 
(1) FINDINGS.—Congress finds the following: 
(A) Subsection (d) of section 1683 of the 
National Defense Authorization Act for Fiscal 
Year 2018 (Public Law 115–91; 10 U.S.C. 
2431 note), as amended by section 1683 of the 
National Defense Authorization Act for Fiscal 
Year 2020 (Public Law 116–92), requires the 
Director of the Missile Defense Agency to de-
velop a hypersonic and ballistic tracking space 
sensor payload to address missile defense track-
ing requirements. 
(B) The budget of the President for fiscal 
year 2021 submitted under section 1105 of title 
31, United States Code, did not provide any 
funding for the Missile Defense Agency to con-
tinue the development of such sensor payload. 
(2) SENSE OF CONGRESS.—It is the sense of 
Congress that— 
(A) regardless of the overall architecture 
for a missile defense tracking space layer, the 
Director of the Missile Defense Agency should 
remain 
the 
material 
developer 
for 
the 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01723
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1724 
HR 6395 PCS
hypersonic and ballistic tracking space sensor 
payload to ensure that— 
(i) unique hypersonic and ballistic 
missile tracking requirements are met; and 
(ii) the system can be integrated into 
the existing missile defense system com-
mand and control, battle management, and 
communications system; and 
(B) the Secretary of Defense should ensure 
transparency of funding for this effort to en-
sure proper oversight can be conducted on this 
critical capability. 
(b) LIMITATION.—Subsection (d) of section 1683 of 
the National Defense Authorization Act for Fiscal Year 
2018 (Public Law 115–91; 10 U.S.C. 2431 note), as 
amended by section 1683 of the National Defense Author-
ization Act for Fiscal Year 2020 (Public Law 116–92), 
is amended by adding at the end the following new para-
graph: 
‘‘(3) LIMITATION.—Of the funds authorized to 
be appropriated by the National Defense Authoriza-
tion Act for Fiscal Year 2021 or otherwise made 
available for fiscal year 2021 for operation and 
maintenance, Defense-wide, for the Space Defense 
Agency, not more than 50 percent may be obligated 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01724
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1725 
HR 6395 PCS
or expended until the date on which the Secretary 
submits the certification under paragraph (2)(B).’’. 
(c) COORDINATION.—Subsection (a) of such section 
is amended by striking ‘‘the Commander of the Air Force 
Space Command and’’ and inserting ‘‘the Chief of Space 
Operations, the Commander of the United States Space 
Command, the Commander of the United States Northern 
Command, and’’. 
SEC. 1654. ANNUAL CERTIFICATION ON HYPERSONIC AND 
BALLISTIC MISSILE TRACKING SPACE SEN-
SOR PAYLOAD. 
(a) FINDING; SENSE OF CONGRESS.— 
(1) FINDING.—Congress finds that the budget 
submitted by the President under section 1105(a) of 
title 31, United States Code, for fiscal year 2021 
does not fully fund an operational capability for the 
hypersonic and ballistic missile tracking space sensor 
within the tracking layer of the persistent space- 
based sensor architecture of the Space Development 
Agency, despite such space sensor being a require-
ment by the combatant commanders and being high-
lighted as a needed capability against both 
hypersonic and ballistic threats in the Missile De-
fense Review published in 2019. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01725
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1726 
HR 6395 PCS
(2) SENSE OF CONGRESS.—It is the sense of 
Congress 
that 
the 
Missile 
Defense 
Agency 
hypersonic and ballistic missile tracking space sensor 
must be prioritized within the persistent space-based 
sensor architecture of the Space Development Agen-
cy to ensure the delivery of capabilities to the 
warfighter as soon as possible. 
(b) ANNUAL CERTIFICATION.—Subsection (d) of sec-
tion 1683 of the National Defense Authorization Act for 
Fiscal Year 2018 (Public Law 115–91; 10 U.S.C. 2431 
note), as amended by section 1653, is further amended 
by adding at the end the following new paragraph: 
‘‘(4) ANNUAL CERTIFICATION.—On an annual 
basis until the date on which the hypersonic and bal-
listic tracking space sensor payload achieves full 
operational capability, the Secretary of Defense, 
without delegation, shall submit to the appropriate 
congressional committees a certification that— 
‘‘(A) the most recent future-years defense 
program submitted under section 221 of title 
10, United States Code, includes estimated ex-
penditures and proposed appropriations in 
amounts necessary to ensure the development 
and deployment of such space sensor payload as 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01726
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1727 
HR 6395 PCS
a component of the sensor architecture devel-
oped under subsection (a); and 
‘‘(B) the Commander of the United States 
Space Command has validated both the ballistic 
and hypersonic tracking requirements of, and 
the timeline to deploy, such space sensor pay-
load.’’. 
SEC. 1655. ALIGNMENT OF THE MISSILE DEFENSE AGENCY 
WITHIN THE DEPARTMENT OF DEFENSE. 
(a) FINDINGS.—Congress finds the following: 
(1) Since the Missile Defense Agency was 
aligned to be under the authority, direction, and 
control of the Under Secretary of Defense for Re-
search and Engineering pursuant to section 205(b) 
of title 10, United States Code, the advanced tech-
nology development budget requests in the defense 
budget materials (as defined in section 231(f) of 
title 10, United States Code) have decreased by 
more than 650 percent, from a request for 
$292,000,000 for fiscal year 2018 (the highest such 
request) to a request for $45,000,000 for fiscal year 
2021. 
(2) The overwhelming majority of the budget of 
the Missile Defense Agency is invested in programs 
that would be categorized as acquisition category 1 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01727
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1728 
HR 6395 PCS
efforts if such programs were administered under 
the acquisition standards under Department of De-
fense Directive 5000. 
(b) SENSE OF CONGRESS.—It is the sense of Con-
gress that, in light of the findings under subsection (a), 
upon the completion of the independent review of the orga-
nization of the Missile Defense Agency required by section 
1688 of the National Defense Authorization Act for Fiscal 
Year 2020 (Public Law 116–92; 133 Stat. 1787), the Sec-
retary of Defense should reassess the alignment of the 
Agency within the Department of Defense to ensure that 
missile defense efforts are being given proper oversight 
and that the Agency is focused on delivering capability to 
address current and future threats. 
(c) REPORT.—Not later than February 28, 2021, the 
Secretary of Defense shall submit to the congressional de-
fense committees a report on the alignment of the Missile 
Defense Agency within the Department of Defense. The 
report shall include— 
(1) a description of the risks and benefits of 
both— 
(A) continuing the alignment of the Agen-
cy under the authority, direction, and control of 
the Under Secretary of Defense for Research 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01728
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1729 
HR 6395 PCS
and Engineering pursuant to section 205(b) of 
title 10, United States Code; and 
(B) realigning the Agency to be under the 
authority, direction, and control of the Under 
Secretary of Defense for Acquisition and 
Sustainment; and 
(2) if the Agency were to be realigned, the ac-
tions that would need to be taken to realign the 
Agency to be under the authority, direction, and 
control of the Under Secretary of Defense for Acqui-
sition and Sustainment or another element of the 
Department of Defense. 
SEC. 1656. ANALYSIS OF ALTERNATIVES FOR HOMELAND 
MISSILE DEFENSE MISSIONS. 
(a) ANALYSIS OF ALTERNATIVES.— 
(1) REQUIREMENT.—Not later than 90 days 
after the date of the enactment of this Act, the Di-
rector of Cost Assessment and Program Evaluation, 
in coordination with the Secretary of the Navy, the 
Secretary of the Army, and the Director of the Mis-
sile Defense Agency, shall conduct an analysis of al-
ternatives with respect to a complete architecture for 
using the regional terminal high altitude area de-
fense system and the Aegis ballistic missile defense 
system to conduct homeland defense missions. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01729
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1730 
HR 6395 PCS
(2) SCOPE.—The analysis of alternatives under 
paragraph (1) shall include the following: 
(A) The sensors needed for the architec-
ture described in such paragraph. 
(B) An assessment of the locations of each 
system included in the analysis to provide simi-
lar coverage as the ground-based midcourse de-
fense system, including, with respect to such 
systems that are land-based, by giving pref-
erence to locations with completed environ-
mental impact analyses conducted pursuant to 
section 227 of the National Defense Authoriza-
tion Act for Fiscal Year 2013 (Public Law 
112–239; 126 Stat. 1678), to the extent prac-
ticable. 
(C) The acquisition objectives for intercep-
tors of the terminal high altitude area defense 
system and standard missile–3 interceptors for 
homeland defense purposes. 
(D) Any improvements needed to the mis-
sile defense system command and control, battle 
management, and communications system. 
(E) 
The 
manning, 
training, 
and 
sustainment needed to support such architec-
ture. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01730
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1731 
HR 6395 PCS
(F) A detailed schedule for the develop-
ment, testing, production, and deployment of 
such systems. 
(G) A lifecycle cost estimate of such archi-
tecture. 
(H) A comparison of the capabilities, costs, 
schedules, and policies with respect to— 
(i) deploying regional systems de-
scribed in subsection (a) to conduct home-
land defense missions; and 
(ii) deploying future ground-based 
midcourse defense systems for such mis-
sions. 
(3) SUBMISSION.—Not later than 90 days after 
the date of the enactment of this Act, the Secretary 
of Defense shall submit to the congressional defense 
committees a report containing— 
(A) the analysis of alternatives under para-
graph (1); and 
(B) a certification by the Secretary that 
such analysis is sufficient. 
(b) ASSESSMENT.—Not later than February 28, 
2021, the Director of the Defense Intelligence Agency, and 
the head of any other element of the intelligence commu-
nity that the Secretary of Defense determines appropriate, 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01731
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1732 
HR 6395 PCS
shall submit to the congressional defense committees an 
assessment of the following: 
(1) How the development and deployment of re-
gional terminal high altitude area defense systems 
and Aegis ballistic missile defense systems to con-
duct longer-range missile defense missions would be 
perceived by near-peer foreign countries and rogue 
nations. 
(2) How such near-peer foreign countries and 
rogue nations would likely respond to such deploy-
ments. 
SEC. 1657. NEXT GENERATION INTERCEPTORS. 
(a) NOTIFICATION OF CHANGED REQUIREMENTS.— 
During the acquisition and development process of the 
next generation interceptor program, not later than 7 days 
after the date on which any changes are made to the re-
quirements for such program that are established in the 
equivalent to capability development documentation, the 
Director of the Missile Defense Agency shall notify the 
congressional defense committees of such changes. 
(b) BRIEFING ON CONTRACT.—Not later than 14 
days after the date on which the Director awards a con-
tract for the next generation interceptor, the Director 
shall provide the congressional defense committees a brief-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01732
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1733 
HR 6395 PCS
ing on such contract, including with respect to the cost, 
schedule, performance, and requirements of the contract. 
(c) REPORT ON GROUND-BASED MIDCOURSE DE-
FENSE SYSTEM.— 
(1) REQUIREMENT.—Not later than 90 days 
after the date of the enactment of this Act, the Sec-
retary of Defense, in coordination with the Under 
Secretary of Defense for Policy, the Director of the 
Missile Defense Agency, and the Commander of the 
United States Northern Command, shall submit to 
the congressional defense committees a report on the 
ground-based midcourse defense system. 
(2) MATTERS
INCLUDED.—The report under 
paragraph (1) shall include the following: 
(A) An explanation of how contracts in ex-
istence as of the date of the report could be 
used 
to 
reestablish 
improvements 
and 
sustainment for kill vehicles and boosters for 
the ground-based midcourse defense system. 
(B) An explanation of how such system 
could be improved through service life exten-
sions or pre-planned product improvements to 
address some of the requirements of the next 
generation interceptor by 2026, including an 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01733
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1734 
HR 6395 PCS
identification of the costs, schedule, and any 
risks. 
(C) A description of the costs and schedule 
with respect to restarting booster production to 
field 20 additional interceptors by 2026. 
(D) An analysis of policy implications with 
respect to the requirements for the ground- 
based midcourse defense system. 
SEC. 1658. OVERSIGHT OF NEXT GENERATION INTER-
CEPTOR PROGRAM. 
(a) FINDINGS; SENSE OF CONGRESS.— 
(1) FINDINGS.—Congress finds that the Sec-
retary of Defense discovered major technical prob-
lems with the redesigned kill vehicle program, which 
led to cancelling the program in August 2019 and 
caused significant delays to the improved defense of 
the United States against rogue nation ballistic mis-
sile threats and wasted $1,200,000,000. 
(2) SENSE OF CONGRESS.—It is the sense of 
Congress that the Secretary of Defense should en-
sure robust oversight and accountability for the ac-
quisition of the future next generation interceptor 
program to avoid making the same errors that were 
experienced in the redesigned kill vehicle effort. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01734
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1735 
HR 6395 PCS
(b) INDEPENDENT COST ASSESSMENT AND VALIDA-
TION.— 
(1) ASSESSMENT.—The Director of Cost As-
sessment and Program Evaluation shall conduct an 
independent cost assessment of the next generation 
interceptor program. 
(2) VALIDATION.—The Under Secretary of De-
fense for Acquisition and Sustainment shall validate 
the preliminary cost assessment conducted under 
paragraph (1) that will be used to inform the award 
of the contract for the next generation interceptor. 
(3) SUBMISSION.—Not later than the date on 
which the Director of the Missile Defense Agency 
awards a contract for the next generation inter-
ceptor, the Secretary of Defense shall submit to the 
congressional defense committees a report containing 
the preliminary independent cost assessment under 
paragraph (1) and the validation under paragraph 
(2). 
(c) FLIGHT TESTS.—In addition to the requirements 
of section 2399 of title 10, United States Code, the Direc-
tor of the Missile Defense Agency may not make any deci-
sion regarding the initial production, or equivalent, of the 
next generation interceptor unless the Director has— 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01735
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1736 
HR 6395 PCS
(1) certified to the congressional defense com-
mittees that the Director has conducted not fewer 
than two successful intercept flight tests of the next 
generation interceptor; and 
(2) provided to such committees a briefing on 
the details of such tests, including with respect to 
the operational realism of such tests. 
SEC. 1659. MISSILE DEFENSE COOPERATION BETWEEN THE 
UNITED STATES AND ISRAEL. 
(a) SENSE OF CONGRESS.—It is the sense of Con-
gress that— 
(1) the strong and enduring relationship be-
tween the United States and Israel is in the national 
security interest of both countries; 
(2) the memorandum of understanding signed 
by the United States and Israel on September 14, 
2016, including the provisions of the memorandum 
relating to missile and rocket defense cooperation, 
continues to be a critical component of the bilateral 
relationship; 
(3) the United States and Israel should con-
tinue government-to-government collaboration and 
information sharing of technical data to investigate 
the potential operational use of Israeli missile de-
fense systems for United States purposes; and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01736
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1737 
HR 6395 PCS
(4) in addition to the existing Israeli missile de-
fense interceptor systems, there is potential for de-
veloping and incorporating directed energy platforms 
to assist the missile defense capabilities of both the 
United States and Israel. 
(b) COOPERATION.—The Secretary of Defense may 
seek to extend existing cooperation with Israel to carry 
out, on a joint basis with Israel, research, development, 
test, and evaluation activities to establish directed energy 
capabilities that address missile threats to the United 
States, the deployed members of the Armed Forces of the 
United States, or Israel. The Secretary shall ensure that 
any such activities are conducted— 
(1) in accordance with Federal law and the 
Convention on Prohibitions or Restrictions on the 
Use of Certain Conventional Weapons which may be 
deemed to be Excessively Injurious or to have Indis-
criminate Effects, signed at Geneva October 10, 
1980; and 
(2) in a manner that appropriately protects sen-
sitive information and the national security interests 
of the United States and the national security inter-
ests of Israel. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01737
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1738 
HR 6395 PCS
SEC. 1660. REPORT ON DEFENSE OF GUAM FROM INTE-
GRATED AIR AND MISSILE THREATS. 
(a) REPORT.—Not later than 120 days after the date 
of the enactment of this Act, the Secretary of Defense 
shall submit to the congressional defense committees a re-
port containing a study on the defense of Guam from inte-
grated air and missile threats, including such threats from 
ballistic, hypersonic, and cruise missiles. 
(b) ELEMENTS.—The report under subsection (a) 
shall include the following: 
(1) The identification of existing deployed land- 
and sea-based air and missile defense programs of 
record within the military departments and Defense 
Agencies, including with respect to interceptors, ra-
dars, and ground-, ship-, air,- and space-based sen-
sors that could be used either alone or in coordina-
tion with other systems to counter the threats speci-
fied in subsection (a) with an initial operational ca-
pability by 2025. 
(2) A plan of how such programs would be used 
to counter such threats with an initial operational 
capability by 2025. 
(3) A plan of which programs currently in de-
velopment but not yet deployed could enhance or 
substitute for existing programs in countering such 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01738
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1739 
HR 6395 PCS
threats with an initial operational capability by 
2025. 
(4) An analysis of which military department, 
Defense Agency, or combatant command would have 
operational control of the mission to counter such 
threats. 
(5) A cost analysis of the various options de-
scribed in paragraphs (1) and (3), including a 
breakdown of the cost of weapons systems consid-
ered under the various scenarios (including any costs 
to modify the systems), the cost benefits gained 
through economies of scale, and the cost of any mili-
tary construction required. 
(6) An analysis of the policy implications re-
garding deploying additional missile defense systems 
on Guam, and how such deployments could affect 
strategic stability, including likely responses from 
both rogue nations and near-peer competitors. 
(c) CONSULTATION.—The Secretary shall carry out 
this section in consultation with each of the following: 
(1) The Director of the Missile Defense Agency. 
(2) The Commander of the United States Indo- 
Pacific Command. 
(3) The Commander of the United States 
Northern Command. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01739
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1740 
HR 6395 PCS
(4) Any other official whom the Secretary of 
Defense determines for purposes of this section has 
significant technical, policy, or military expertise. 
(d) FORM.—The report submitted under subsection 
(a) shall be in unclassified form, but may contain a classi-
fied annex. 
(e) BRIEFING.—Not later than 30 days after the date 
on which the Secretary submits to the congressional de-
fense committees the report under subsection (a), the Sec-
retary shall provide to such committees a briefing on the 
report. 
SEC. 1661. REPORT ON CRUISE MISSILE DEFENSE. 
Not later than January 15, 2021, the Commander 
of the United States Northern Command, in coordination 
with the Director of the Missile Defense Agency, shall sub-
mit to the congressional defense committees a report con-
taining— 
(1) an identification of any vulnerability of the 
contiguous United States to known cruise missile 
threats; and 
(2) a plan to mitigate any such vulnerability. 
Subtitle F—Other Matters 
SEC. 1671. CONVENTIONAL PROMPT GLOBAL STRIKE. 
(a) INTEGRATION.—Section 1697(a) of the National 
Defense Authorization Act for Fiscal Year 2020 (Public 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01740
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1741 
HR 6395 PCS
Law 116–92; 133 Stat. 1791) is amended by adding at 
the end the following new sentence: ‘‘The Secretary shall 
initiate such transfer of technologies to DDG–1000 class 
destroyers by not later than January 1, 2021.’’. 
(b) REPORT
ON STRATEGIC HYPERSONIC WEAP-
ONS.— 
(1) REQUIREMENT.—Not later than 120 days 
after the date of the enactment of this Act, the 
Chairman of the Joint Chiefs of Staff, in coordina-
tion with the Under Secretary of Defense for Policy, 
shall submit to the congressional defense committees 
a report on strategic hypersonic weapons. 
(2) MATTERS
INCLUDED.—The report under 
paragraph (1) shall include the following: 
(A) A discussion of the authority to use 
strategic hypersonic weapons and if, and how, 
such authorities would be delegated to the com-
manders of the combatant commands or to the 
Chiefs of the Armed Forces. 
(B) An assessment of escalation and mis-
calculation risks (including the risk that adver-
saries may detect initial launch but not reliably 
detect the entire boost-glide trajectory), how 
such risks will be addressed and minimized with 
regards to the use of strategic hypersonic weap-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01741
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1742 
HR 6395 PCS
ons, and whether any risk escalation exercises 
have been conducted or are planned for the po-
tential use of hypersonic weapons. 
(C) A description of any updates needed to 
war plans with the introduction of strategic 
hypersonic weapons. 
(D) Identification of the element of the 
Department of Defense that has responsibility 
for establishing targeting requirements for stra-
tegic hypersonic weapons. 
(E) A description of how the requirements 
for land- and sea-based strategic hypersonic 
weapons will be addressed with the Joint Re-
quirements Oversight Council, and how such re-
quirements will be formally provided to the mili-
tary departments procuring such weapons 
through an acquisition program described under 
section 804 of the National Defense Authoriza-
tion Act for Fiscal Year 2016 (10 U.S.C. 2302 
note). 
(F) A basing strategy for land-based 
launch platforms and a description of the ac-
tions needed to be taken for future deployment 
of such platforms. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01742
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1743 
HR 6395 PCS
(3) FORM.—The report under paragraph (1) 
shall be submitted in unclassified form, but may in-
clude a classified annex. 
(c) ANNUAL REPORTS ON ACQUISITION.— 
(1) ARMY
AND
NAVY
PROGRAMS.—Except as 
provided by paragraph (3), not later than 30 days 
after the date on which the budget of the President 
for each of fiscal years 2022 through 2025 is sub-
mitted to Congress pursuant to section 1105 of title 
31, United States Code, the Secretary of the Army 
and the Secretary of the Navy shall jointly submit 
to the congressional defense committees a report on 
the conventional prompt global strike programs of 
the Army and the Navy, including— 
(A) the total costs to the respective mili-
tary departments for such programs; 
(B) the strategy for such programs with 
respect to manning, training, and equipping, in-
cluding cost estimates; and 
(C) a testing strategy and schedule for 
such programs. 
(2) CERTIFICATIONS.—Not later than 60 days 
after the date on which the budget of the President 
for each of fiscal years 2022 through 2025 is sub-
mitted to Congress pursuant to section 1105 of title 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01743
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1744 
HR 6395 PCS
31, United States Code, the Director of Cost Assess-
ment and Program Evaluation shall submit to the 
congressional defense committees a certification re-
garding the sufficiency, including any anomalies, 
with respect to— 
(A) the total program costs of the conven-
tional prompt global strike programs of the 
Army and the Navy; and 
(B) the testing strategy for such programs. 
(3) TERMINATION.—The requirement to submit 
a report under paragraph (1) shall terminate on the 
date on which the Secretary of Defense determines 
that the conventional prompt global strike programs 
of the Army and the Navy are unable to be acquired 
under the authority of section 804 of the National 
Defense Authorization Act for Fiscal Year 2016 (10 
U.S.C. 2302 note). 
SEC. 1672. SUBMISSION OF REPORTS UNDER MISSILE DE-
FENSE REVIEW AND NUCLEAR POSTURE RE-
VIEW. 
Not later than 30 days after the date of the enact-
ment of this Act, the Secretary of Defense shall submit 
to the congressional defense committees— 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01744
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1745 
HR 6395 PCS
(1) each report produced by the Department of 
Defense pursuant to the Missile Defense Review 
published in 2019; and 
(2) each report produced by the Department 
pursuant to the Nuclear Posture Review published 
in 2018. 
SEC. 1673. REPORT ON CONSIDERATION OF RISKS OF INAD-
VERTENT ESCALATION TO NUCLEAR WAR. 
(a) REPORT.—Not later than January 31, 2021, the 
Under Secretary of Defense for Policy shall submit to the 
Committees on Armed Services of the House of Represent-
atives and the Senate a report— 
(1) detailing the efforts of the Department of 
Defense with respect to developing and imple-
menting guidance to ensure that the risks of inad-
vertent escalation to a nuclear war are considered 
within the decision-making processes of the Depart-
ment regarding relevant activities (such as devel-
oping contingency plans, managing military crises 
and conflicts, and supporting the Department of 
State in the development, negotiation, and imple-
mentation of cooperative risk-reduction measures); 
and 
(2) identifying the capabilities and factors 
taken into account in developing such guidance. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01745
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1746 
HR 6395 PCS
(b) FORM.—The report under subsection (a) shall be 
submitted in unclassified form, but may include a classi-
fied annex. 
(c) BRIEFING.—Not later than December 1, 2020, 
the Under Secretary shall provide to the Committees on 
Armed Services of the House of Representatives and the 
Senate a briefing on the progress and findings made in 
carrying out subsection (a). 
SEC. 1674. LIMITATION ON AVAILABILITY OF FUNDS RELAT-
ING TO REPORTS ON MISSILE SYSTEMS AND 
ARMS CONTROL TREATIES. 
(a) LIMITATION.— 
(1) IN
GENERAL.—Beginning on October 1, 
2020, if the Secretary of Defense has not submitted 
the covered reports, not more than 25 percent of the 
funds specified in paragraph (2) may be obligated or 
expended until the date on which the covered reports 
have been submitted. 
(2) FUNDS SPECIFIED.—The funds specified in 
this paragraph are the funds authorized to be appro-
priated by the William M. (Mac) Thornberry Na-
tional Defense Authorization Act for Fiscal Year 
2021 or otherwise made available for fiscal year 
2021 for the immediate office of the Secretary of 
Defense. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01746
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1747 
HR 6395 PCS
(b) COVERED REPORTS DEFINED.—In this section, 
the term ‘‘covered reports’’ means— 
(1) the report under section 1698(b) of the Na-
tional Defense Authorization Act for Fiscal Year 
2020 (Public Law 116–92; 133 Stat. 1792); and 
(2) the assessment under section 1236(b) of the 
National Defense Authorization Act for Fiscal Year 
2020 (Public Law 116–92; 133 Stat. 1650). 
SEC. 1675. CYBERSECURITY AND INFRASTRUCTURE SECU-
RITY AGENCY REVIEW. 
(a) IN GENERAL.—The Director of the Cybersecurity 
and Infrastructure Security Agency of the Department of 
Homeland Security shall conduct a review of the ability 
of the Cybersecurity and Infrastructure Security Agency 
to carry out its mission requirements, as well as the rec-
ommendations detailed in the U.S. Cyberspace Solarium 
Commission’s Report regarding the Agency. 
(b) ELEMENTS OF REVIEW.—The review conducted 
in accordance with subsection (a) shall include the fol-
lowing elements: 
(1) An assessment of how additional budget re-
sources could be used by the Cybersecurity and In-
frastructure Security Agency for projects and pro-
grams that— 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01747
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1748 
HR 6395 PCS
(A) support the national risk management 
mission; 
(B) support public and private-sector cy-
bersecurity; 
(C) promote public-private integration; and 
(D) provide situational awareness of cyber-
security threats. 
(2) A force structure assessment of the Cyber-
security and Infrastructure Security Agency, includ-
ing— 
(A) a determination of the appropriate size 
and composition of personnel to carry out the 
mission requirements of the Agency, as well as 
the recommendations detailed in the U.S. 
Cyberspace Solarium Commission’s Report re-
garding the Agency; 
(B) as assessment of whether existing per-
sonnel are appropriately matched to the 
prioritization of threats in the cyber domain 
and risks to critical infrastructure; 
(C) an assessment of whether the Agency 
has the appropriate personnel and resources 
to— 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01748
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1749 
HR 6395 PCS
(i) perform risk assessments, threat 
hunting, and incident response to support 
both private and public cybersecurity; 
(ii) carry out its responsibilities re-
lated to the security of Federal information 
and Federal information systems (as such 
term is defined in section 3502 of title 44, 
United States Code); and 
(iii) carry out its critical infrastruc-
ture responsibilities, including national risk 
management; 
(D) an assessment of whether current 
structure, personnel, and resources of regional 
field offices are sufficient to carry out Agency 
responsibilities and mission requirements; and 
(E) an assessment of current Cybersecu-
rity and Infrastructure Security Agency facili-
ties, including a review of the suitability of such 
facilities to fully support current and projected 
mission requirements nationally and regionally, 
and recommendations regarding future facility 
requirements. 
(c) SUBMISSION OF REVIEW.—Not later than 1 year 
after the date of the enactment of this Act, the Secretary 
of Homeland Security shall submit to the Committee on 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01749
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1750 
HR 6395 PCS
Homeland Security of the House of Representatives and 
the Committee on Homeland Security and Governmental 
Affairs of the Senate a report detailing the result of the 
review conducted in accordance with subsection (a), in-
cluding recommendations to address any identified gaps. 
(d) GENERAL
SERVICES
ADMINISTRATION
RE-
VIEW.— 
(1) SUBMISSION OF ASSESSMENT.—Upon sub-
mission to the Committee on Homeland Security of 
the House of Representatives and the Committee on 
Homeland Security and Governmental Affairs of the 
Senate of the report required under subsection (c), 
the Director of the Cybersecurity and Infrastructure 
Security Agency of the Department of Homeland Se-
curity shall submit to the Administrator of the Gen-
eral Services Administration the results of the as-
sessment required under subsection (b)(2)(E). 
(2) REVIEW.—The Administrator of the Gen-
eral Services Administration shall— 
(A) conduct a review of Cybersecurity and 
Infrastructure Security Agency assessment re-
quired under subsection (b)(2)(E); and 
(B) make recommendations regarding re-
sources needed to procure or build a new facil-
ity or augment existing facilities to ensure suffi-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01750
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1751 
HR 6395 PCS
cient size and accommodations to fully support 
current and projected mission requirements, in-
cluding the integration of personnel from the 
private sector and other Federal departments 
and agencies. 
(3) SUBMISSION OF REVIEW.—Not later than 
30 days after receipt of the assessment under para-
graph (1), the Administrator of the General Services 
Administration shall submit to the President, the 
Secretary of Homeland Security, the Committee on 
Homeland Security and Governmental Affairs of the 
Senate, and the Committee on Homeland Security of 
the House of Representatives the review required 
under paragraph (2). 
TITLE XVII—REPORTS AND 
OTHER MATTERS 
Subtitle A—Studies and Reports 
SEC. 1701. REVIEW OF SUPPORT OF SPECIAL OPERATIONS 
TO COMBAT TERRORISM. 
(a) REVIEW.—The Comptroller General of the United 
States shall conduct a review of all support provided, or 
planned to be provided, under section 127e of title 10, 
United States Code. Such review shall include an analysis 
of each of the following: 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01751
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1752 
HR 6395 PCS
(1) The strategic alignment between such sup-
port and relevant Executive orders, global campaign 
plans, theatre campaign plans, execute orders, and 
other guiding documents for currency, relevancy, 
and efficacy. 
(2) The extent to which United States Special 
Operations Command has the processes and proce-
dures to manage, integrate, and synchronize the au-
thority under section 127e of title 10, United States 
Code, in support of the objectives and priorities 
specified by the documents listed in (a)(1) as well as 
the objectives and priorities of— 
(A) the geographic combatant commands; 
(B) theatre elements of United States Spe-
cial Operations Command; 
(C) relevant chiefs of mission and other 
appropriate positions in the Department of 
State; and 
(D) any other interagency organization af-
fected by the use of such authority. 
(3) For the activities carried out pursuant to 
such authority, the extent to which United States 
Special Operations Command has the processes and 
procedures to— 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01752
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1753 
HR 6395 PCS
(A) determine the professionalism, cohe-
sion, and institutional capacity of the military 
in the country where forces receiving support 
are based; 
(B) determine the adherence of the forces 
receiving support to human rights norms and 
the laws of armed conflict; 
(C) establish measures of effectiveness; 
(D) assess such activities against estab-
lished measures of effectiveness as identified in 
subparagraph (C); 
(E) establish criteria to determine the suc-
cessful completion of such activities; 
(F) deconflict and synchronize activities 
conducted under such authority with other rel-
evant funding authorities; 
(G) deconflict and synchronize activities 
conducted under such authorities with other rel-
evant activities conducted by organizations re-
lated to, but outside the purview of, the Depart-
ment of Defense; and 
(H) track the training, support, and facili-
tation provided to forces receiving support, and 
the significant activities undertaken by such 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01753
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1754 
HR 6395 PCS
forces as a result of such training, support, and 
facilitation. 
(4) The extent to which United States Special 
Operations Command has processes and procedures 
to manage the sunset, termination, or transition of 
activities carried out pursuant to such authority, in-
cluding— 
(A) accountability with respect to equip-
ment provided; and 
(B) integrity of the tactics, techniques, and 
procedures developed. 
(5) The extent to which United States Special 
Operations Command has and uses processes and 
procedures to— 
(A) report to Congress biannually on the 
matters referred to in paragraph (3); and 
(B) notify Congress with respect to the in-
tent to sunset, terminate, or transition activities 
carried out pursuant to such authority. 
(6) Any other issues the Comptroller General 
determines appropriate with respect to the authority 
under section 127e of title 10, United States Code. 
(b) BRIEFING.—Not later than 180 days after the 
date of the enactment of this Act, the Comptroller General 
shall provide for the Committees on Armed Services of the 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01754
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1755 
HR 6395 PCS
Senate and House of Representatives a briefing on the 
progress of the review required under subsection (a). 
(c) REPORT.—Not later than 1 year after the date 
of the enactment of this Act, the Comptroller General shall 
submit to the Committees on Armed Services of the Sen-
ate and House of Representatives a report on the findings 
of the review required under subsection (a) and the rec-
ommendations of the Comptroller General pursuant to 
such review. 
(d) SUPPORT DEFINED.—In this section, the term 
‘‘support’’ includes— 
(1) personnel who provide capacity for— 
(A) training and equipment; 
(B) training, advice, and assistance; or 
(C) advice, assistance, and accompaniment 
capacity; 
(2) financial assistance; and 
(3) equipment and weapons. 
SEC. 1702. FFRDC STUDY OF EXPLOSIVE ORDNANCE DIS-
POSAL AGENCIES. 
(a) IN GENERAL.—The Secretary of Defense shall 
enter into an agreement with a federally funded research 
and development corporation under which such corpora-
tion shall conduct a study of the responsibilities, authori-
ties, policies, programs, resources, organization, and ac-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01755
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1756 
HR 6395 PCS
tivities of the explosive ordnance disposal agencies of the 
Department of Defense, Defense Agencies, and military 
departments. In carrying out the study, the federally fund-
ed research and development corporation shall solicit input 
from relevant nonprofit organizations, such as the Na-
tional Defense Industrial Association EOD Committee, 
United States Army EOD Association, United States 
Bomb Technician Association and the EOD Warrior 
Foundation. 
(b) ELEMENTS OF STUDY.—The study conducted 
under subsection (a) shall include, for the Department of 
Defense, each Defense Agency, and each the military de-
partments, each of the following: 
(1) An identification and evaluation of— 
(A) technology research, development, and 
acquisition activities related to explosive ord-
nance disposal, including an identification and 
evaluation of— 
(i) current and future technology and 
related industrial base gaps; and 
(ii) any technical or operational risks 
associated with such technology or related 
industrial base gaps; 
(B) recruiting, training, education, assign-
ment, promotion, and retention of military and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01756
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1757 
HR 6395 PCS
civilian personnel with responsibilities relating 
to explosive ordnance disposal; 
(C) administrative and operational force 
structure with respect to explosive ordnance dis-
posal, including an identification and assess-
ment of risk associated with force structure ca-
pacity or capability gaps, if any; and 
(D) the demand for, and activities con-
ducted in support of, domestic and international 
military explosive ordnance disposal operations, 
including— 
(i) support provided to Department of 
Defense agencies and other Federal agen-
cies; and 
(ii) an identification and assessment 
of risk associated with the prioritization 
and availability of explosive ordnance dis-
posal support among supported agencies 
and operations. 
(2) Recommendations, if any, for changes to— 
(A) the organization and distribution of re-
sponsibilities and authorities relating to explo-
sive ordnance disposal; 
(B) the explosive ordnance disposal force 
structure, management, prioritization, and op-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01757
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1758 
HR 6395 PCS
erating concepts in support of the explosive ord-
nance disposal requirements of the Armed 
Forces and other Federal agencies; and 
(C) resource investment strategies and 
technology prioritization for explosive ordnance 
disposal, including science and technology, 
prototyping, experimentation, test and evalua-
tion, and related 5-year funding profiles. 
(c) REPORT TO CONGRESS.— 
(1) IN GENERAL.—Not later than August 31, 
2021, the Secretary of Defense shall submit to the 
congressional defense committees a report on the 
study conducted under subsection (a). Such report 
shall include the comments on the study, if any, of 
the Secretary of Defense, the directors of each of the 
Defense Agencies, and the Secretaries of each of the 
military departments. 
(2) FORM OF REPORT.—The report submitted 
under paragraph (1) shall be submitted in unclassi-
fied form, but may contain a classified annex. 
SEC. 1703. REPORT ON THE HUMAN RIGHTS OFFICE AT 
UNITED STATES SOUTHERN COMMAND. 
(a) SENSE OF CONGRESS.—It is the sense of Con-
gress that— 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01758
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1759 
HR 6395 PCS
(1) the promotion of human rights and the pro-
tection of civilians abroad is an ethical, legal, and 
strategic interest of the United States; 
(2) the Human Rights Office at the United 
States Southern Command plays an essential role in 
the 
promotion 
of 
human 
rights 
and 
the 
professionalization of foreign security forces in the 
area of responsibility of the United States Southern 
Command; 
(3) the Secretary of Defense should ensure the 
status of the Human Rights Office at the United 
States Southern Command and, to the extent pos-
sible, ensure the United States Southern Command 
has the assets necessary to support the activities of 
the Human Rights Office; and 
(4) the Secretary of Defense should ensure the 
development, at each of the combatant commands, of 
an office responsible for— 
(A) advising the commander of the com-
batant command on the promotion of human 
rights and protection of civilians; and 
(B) integrating such promotion and protec-
tion into command strategy. 
(b) REPORT.—Not later than 90 days after the date 
of the enactment of this Act, the Secretary of Defense 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01759
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1760 
HR 6395 PCS
shall submit to the congressional defense committees a re-
port on— 
(1) the activities of the Human Rights Office at 
the United States Southern Command to provide 
and promote— 
(A) analysis and policy support to the 
Commander of the United States Southern 
Command regarding human rights and the pro-
tection of civilians; 
(B) education of employees of the Depart-
ment of Defense regarding human rights and 
protection of civilians pursuant to the document 
promulgated by the United States Southern 
Command on July 1, 1998, titled ‘‘Regulation 
1-20’’ (relating to policy and procedures for 
human rights administration); 
(C) integration of the promotion of human 
rights and protection of civilians into the strat-
egy, planning, training, and exercises of the 
United States Southern Command, including 
into programs of the armed forces of partner 
countries through the Human Rights Initiative 
program of such Command; 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01760
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1761 
HR 6395 PCS
(D) promotion of human rights and the 
protection of civilians through security coopera-
tion activities; 
(E) implementation of section 362 of title 
10, United States Code; and 
(F) countering trafficking in persons; and 
(2) the resources necessary over the period of 
the future years defense plan for fiscal year 2022 
under section 221 of title 10, United States Code, 
for the United States Southern Command to support 
the activities of the Human Rights Office at such 
Command. 
(c) FORM.—The report under subsection (b) shall be 
submitted in unclassified form. 
SEC. 1704. REPORT ON JOINT TRAINING RANGE EXERCISES 
FOR THE PACIFIC REGION. 
(a) REPORT.—Not later than March 15, 2021, the 
Chairman of the Joint Chiefs of Staff, in coordination 
with the Commander of United States Indo-Pacific Com-
mand, the Secretary of the Army, the Secretary of the 
Navy, and the Secretary of the Air Force, shall submit 
to the congressional defense committees a report con-
taining a plan to integrate combined, joint, and multi-do-
main, training and experimentation in the Pacific region, 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01761
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1762 
HR 6395 PCS
including existing ranges, training areas, and test facili-
ties, to achieve the following objectives: 
(1) Support future combined and joint exercises 
and training to test operational capabilities and 
weapon systems. 
(2) Employ multi-domain training to validate 
joint operational concepts. 
(3) Integrate allied and partner countries into 
national-level exercises. 
(b) MATTERS.—The report under subsection (a) shall 
address the following: 
(1) Integration of cyber, space, and electro-
magnetic spectrum domains. 
(2) Mobile and fixed range instrumentation 
packages for experimentation and training. 
(3) Digital, integrated command and control for 
air defense systems. 
(4) Command, control, communications, com-
puter, and information (C41) systems. 
(5) War gaming, modeling, and simulations 
packages. 
(6) Intelligence support systems. 
(7) Manpower management, execution, collec-
tion, and analysis required for the incorporation of 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01762
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1763 
HR 6395 PCS
space and cyber activities into the training range ex-
ercise plan contained in such report. 
(8) Connectivity requirements to support all do-
main integration and training. 
(9) Any training range upgrades or infrastruc-
ture improvements necessary to integrate legacy 
training and exercise facilities into integrated, oper-
ational sites. 
(10) Exercises led by the United States Indo- 
Pacific Command, within the area of operations of 
the Command, that integrate allied and partnered 
countries and link to the national-level exercises of 
the United States. 
(11) Incorporation of any other functional and 
geographic combatant commands required to sup-
port the United States Indo-Pacific Command. 
(c) FORM.—The report under subsection (a) may be 
submitted in classified form, and shall include an unclassi-
fied summary. 
SEC. 1705. STUDY ON CHINESE POLICIES AND INFLUENCE 
IN THE DEVELOPMENT OF INTERNATIONAL 
STANDARDS FOR EMERGING TECHNOLOGIES. 
(a) IN GENERAL.—Not later than 180 days after the 
date of the enactment of this Act, the Director of the Na-
tional Institute of Standards and Technology shall enter 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01763
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1764 
HR 6395 PCS
into an agreement with an appropriate non-governmental 
entity with relevant expertise, as determined by the Direc-
tor, to conduct a study and make recommendations with 
respect to the impact of the policies of the People’s Repub-
lic of China and coordination among industrial entities 
within the People’s Republic of China on international 
bodies engaged in developing and setting international 
standards for emerging technologies. The study may in-
clude— 
(1) an assessment of how the role of the Peo-
ple’s Republic of China in international standards 
setting organizations has grown over the previous 10 
years, including in leadership roles in standards- 
drafting technical committees, and the quality or 
value of that participation; 
(2) an assessment of the impact of the stand-
ardization strategy of the People’s Republic of 
China, as identified in the ‘‘Chinese Standard 2035’’ 
on international bodies engaged in developing and 
setting standards for select emerging technologies, 
such as advanced communication technologies or 
cloud computing and cloud services; 
(3) an examination of whether international 
standards for select emerging technologies are being 
designed to promote interests of the People’s Repub-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01764
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1765 
HR 6395 PCS
lic of China that are expressed in the ‘‘Made in 
China 2025’’ plan to the exclusion of other partici-
pants; 
(4) an examination of how the previous prac-
tices that the People’s Republic of China has utilized 
while participating in international standards setting 
organizations may foretell how the People’s Republic 
of China will engage in international standardization 
activities of critical technologies like artificial intel-
ligence and quantum information science, and what 
may be the consequences; 
(5) recommendations on how the United States 
can take steps to mitigate influence of the People’s 
Republic of China and bolster United States public 
and private sector participation in international 
standards-setting bodies; and 
(6) any other areas the Director, in consulta-
tion with the entity selected to conduct the study, 
believes is important to address. 
(b) REPORT TO CONGRESS.—The agreement entered 
into under subsection (a) shall require the entity con-
ducting the study to, not later than 2 years after the date 
of the enactment of this Act— 
(1) submit to the Committee on Science, Space, 
and Technology of the House of Representatives and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01765
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1766 
HR 6395 PCS
the Committee on Commerce, Science, and Trans-
portation of the Senate a report containing the find-
ings and recommendations of the review conducted 
under subsection (a); and 
(2) make a copy of such report available on a 
publicly accessible website. 
SEC. 1706. SENSE OF CONGRESS AND STRATEGY ON CATA-
STROPHIC CRITICAL INFRASTRUCTURE FAIL-
URE RESPONSE. 
(a) SENSE OF CONGRESS.—It is the sense of Con-
gress that— 
(1) the occurrence of a catastrophic critical in-
frastructure failure event, in which key networks fa-
cilitating the delivery of essential services such as 
electricity, water, or communications fail for an ex-
tended duration, would constitute a significant 
threat to the national security and common welfare 
of the United States; 
(2) such a catastrophic critical infrastructure 
failure event could occur by various means, including 
but not limited to those linked to natural phe-
nomenon (including earthquakes, hurricanes, or geo-
magnetic disturbances) or military conflict (includ-
ing cyberattacks, electromagnetic pulse effects, or ki-
netic assault); and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01766
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1767 
HR 6395 PCS
(3) the Department of the Defense should 
strengthen its preparedness for catastrophic critical 
infrastructure failure events, including with respect 
to preemptive infrastructure enhancements, the fa-
cilitation of resiliency and relief efforts in the after-
math thereto, and the mitigation of impacts of such 
an event on activities of the Department. 
(b) STRATEGY.— 
(1) IN GENERAL.—Not later than 1 year after 
the date of the enactment of this Act, the Secretary 
of Defense shall submit to the congressional defense 
committees a report that includes an analysis of 
each of the following: 
(A) Particular threat scenarios involving 
catastrophic 
critical 
infrastructure 
failure 
events which the Secretary believes could be 
adequately addressed by existing Department of 
Defense plans and resources. 
(B) Particular threat scenarios involving 
catastrophic 
critical 
infrastructure 
failure 
events which the Secretary believes could not 
currently be adequately addressed by existing 
Department of Defense plans and resources. 
(C) Unique challenges, with respect to ac-
tivities and operations of the Department of 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01767
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1768 
HR 6395 PCS
Defense, presented by catastrophic critical in-
frastructure 
failure 
events 
involving 
geo-
magnetic disturbance or electromagnetic pulse 
events. 
(D) Strategies to increase future prepared-
ness with respect to any threat scenarios identi-
fied pursuant to subparagraph (B). 
(2) FORM.—The report under paragraph (1) 
may be submitted in classified form, but if so sub-
mitted, shall be accompanied by an unclassified sum-
mary. 
SEC. 1707. GAO STUDY ON THE SCHOOL-TO-PRISON PIPE-
LINE. 
(a) IN GENERAL.—The Comptroller General of the 
United States shall conduct a study on the school to prison 
pipeline in order to— 
(1) highlight this issue; 
(2) offer proof of concept to States that evi-
dence-based interventions, such as restorative prac-
tices, are— 
(A) more effective than punitive, exclu-
sionary measures; 
(B) improve student achievement; and 
(C) enhance public safety and student-well- 
being; and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01768
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1769 
HR 6395 PCS
(3) determine the long-term benefits of replac-
ing a punitive approach to discipline with restorative 
practices in schools, by analyzing the potential sav-
ings generated by helping children stay in school and 
out of the criminal justice system. 
(b) COST-BENEFIT ANALYSIS.—The study conducted 
under subsection (a) shall include a cost-benefit analysis 
to determine the effectiveness and impact of school re-
source officers and local law enforcement personnel on 
school climate and student discipline. 
(c) REPORT.—Upon the conclusion of the study 
under subsection (a), the Comptroller General of the 
United States shall prepare and submit to Congress a re-
port regarding the study and the conclusions and rec-
ommendations generated from the study. 
SEC. 1708. DEPARTMENT OF VETERANS AFFAIRS REPORT 
ON UNCLAIMED PROPERTY. 
(a) REPORT REQUIRED.—Not later than 180 days 
after the date of the enactment of this Act, the Secretary 
of Veterans Affairs shall submit to Congress a report on 
the unclaimed property in the possession of the Depart-
ment of Veterans Affairs. 
(b) REVIEW OF REPORT.—The Comptroller General 
of the United States shall conduct a review of the report 
submitted under subsection (a). 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01769
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1770 
HR 6395 PCS
(c) UNCLAIMED PROPERTY DEFINED.—The term 
‘‘unclaimed property’’ includes any intangible personal 
property, including money, liquidated obligations, choses 
in action, accounts, entrusted funds, deposits, evidences 
of debt or instruments held by any Federal agency, officer 
or employee thereof (except bonuses, gratuities, and sums 
held by the Social Security Administration), which has re-
mained unclaimed by the owner. 
SEC. 1709. REPORT REGARDING VETERANS WHO RECEIVE 
BENEFITS UNDER LAWS ADMINISTERED BY 
THE SECRETARY OF VETERANS AFFAIRS. 
(a) REPORT.—Not later than 180 days after the date 
of the enactment of this Act, the Secretary of Veterans 
Affairs shall publish a report regarding veterans who re-
ceive benefits under laws administered by the Secretary, 
including the Transition Assistance Program under sec-
tions 1142 and 1144 of title 10, United States Code. 
(b) DATA.—The data regarding veterans published in 
the report under subsection (a)— 
(1) shall be disaggregated by— 
(A) sex; 
(B) sexual orientation; 
(C) gender identity; 
(D) minority group member status; and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01770
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1771 
HR 6395 PCS
(E) minority group member status listed 
by sex; and 
(2) may not include any personally identifiable 
information. 
(c) MATTERS INCLUDED.—The report under sub-
section (a) shall include— 
(1) identification of any disparities in the use of 
benefits under laws administered by the Secretary; 
(2) an analysis of the cause of such disparities, 
and recommendations to address such disparities; 
and 
(3) identification of veterans who are deter-
mined to be ineligible for benefits due to discharge 
status. 
(d) MINORITY GROUP MEMBER DEFINED.—In this 
section, the term ‘‘minority group member’’ has the mean-
ing given that term in section 544 of title 38, United 
States Code. 
SEC. 1710. GAO REPORT ON ZTE COMPLIANCE WITH SET-
TLEMENT AGREEMENT. 
(a) IN GENERAL.—Not later than 180 days after the 
date of the enactment of this Act, the Comptroller General 
of the United States shall submit to Congress a report 
on the compliance of Zhongxing Telecommunications 
Equipment Corporation and ZTE Kangxun Telecommuni-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01771
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1772 
HR 6395 PCS
cations Ltd. (collectively referred to in this section as 
‘‘ZTE’’) with the Superseding Settlement Agreement and 
Superseding Order reached with the Department of Com-
merce on June 8, 2018 (in this section referred to as the 
‘‘agreement’’). 
(b) MATTERS TO BE INCLUDED.—The report re-
quired by subsection (a) shall include a comprehensive 
analysis of the following: 
(1) The level of compliance by ZTE, past and 
present, with the obligations of ZTE under the 
agreement. 
(2) The transparency and candor of ZTE in 
representing such level of compliance. 
(3) Efforts by the United States Government to 
monitor, report on, and ensure compliance by ZTE 
with the agreement. 
(4) Whether any actions taken by ZTE since 
June 8, 2018, constitute a material breach of the 
obligations of ZTE under the agreement. 
(5) Recommended courses of action for the 
United States Government to improve compliance by 
ZTE with the agreement or to respond to a material 
breach of the obligations of ZTE under the agree-
ment. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01772
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1773 
HR 6395 PCS
SEC. 1710A. GAO STUDY OF CYBERSECURITY INSURANCE. 
(a) STUDY.—The Comptroller General of the United 
States shall conduct a study to assess and analyze the 
state and availability of insurance coverage in the United 
States for cybersecurity risks, which shall include— 
(1) identifying the number and dollar volume of 
cyber insurance policies currently in force and the 
percentage of businesses, and specifically small busi-
nesses, that have cyber insurance coverage; 
(2) assessing the extent to which States have 
established minimum standards for the scope of 
cyber insurance policies; and 
(3) identifying any barriers to modeling and un-
derwriting cybersecurity risks. 
(b) REPORT.—Not later than the expiration of the 
180-day period beginning on the date of the enactment 
of this Act, the Comptroller General shall submit a report 
to the Congress setting forth the findings and conclusions 
of the study conducted pursuant to subsection (a), which 
shall include recommendations on whether or not Federal 
intervention would help facilitate the growth and develop-
ment of insurers offering coverage for cybersecurity risks, 
the availability and affordability of such coverage, and pol-
icyholder education regarding such coverage. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01773
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1774 
HR 6395 PCS
SEC. 1710B. REPORT ON RECOGNITION OF AFRICAN AMER-
ICAN SERVICEMEMBERS IN DEPARTMENT OF 
DEFENSE NAMING PRACTICES. 
Not later than 180 days after the date of the enact-
ment of this Act, the Secretary of Defense shall submit 
to the congressional defense committees a report con-
taining the following information: 
(1) A description of current Department of De-
fense naming conventions for military installations, 
infrastructure, vessels, and weapon systems. 
(2) A list of all military installations (including 
reserve component facilities), infrastructure (includ-
ing reserve component infrastructure), vessels, and 
weapon systems that are currently named after Afri-
can Americans who served in the Armed Forces. 
(3) An explanation of the steps being taken to 
recognize the service of African Americans who have 
served in the Armed Forces with honor, heroism, 
and distinction by increasing the number of military 
installations, infrastructure, vessels, and weapon sys-
tems named after deserving African American mem-
bers of the Armed Forces. 
SEC. 1710C. REPORT ON GOVERNMENT POLICE TRAINING 
AND EQUIPPING PROGRAMS. 
(a) REPORT.—Not later than 1 year after the date 
of the enactment of this Act, the President shall submit 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01774
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1775 
HR 6395 PCS
to Congress a report on United States Government police 
training and equipping programs outside the United 
States. 
(b) ELEMENTS.—The report required under para-
graph (1) shall include the following: 
(1) A list of all United States Government de-
partments and agencies involved in implementing po-
lice training and equipping programs. 
(2) A description of the scope, size, and compo-
nents of all police training and equipping programs 
for fiscal years 2023, 2024, and 2025, including, for 
each such program— 
(A) the name of each country that received 
assistance under the program; 
(B) for each training activity, the number 
of foreign personnel provided training, their 
units of operation, location of the training, cost 
of the activity, the United States unit involved, 
and the nationality and unit of non-United 
States training personnel, if any, involved in 
each activity; 
(C) the purpose and objectives of the pro-
gram; 
(D) the funding and personnel levels for 
the program in each such fiscal year; 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01775
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1776 
HR 6395 PCS
(E) the authority under which the program 
is conducted; 
(F) the name of the United States Govern-
ment department or agency with lead responsi-
bility for the program and the mechanisms for 
oversight of the program; and 
(G) the metrics for measuring the results 
of the program. 
(3) An assessment of the requirements for po-
lice training and equipping programs, and what 
changes, if any, are required to improve the capacity 
of the United States Government to meet such re-
quirements. 
(4) An evaluation of the appropriate role of 
United States Government departments and agen-
cies in coordinating on and carrying out police train-
ing and equipping programs. 
(5) An evaluation of the appropriate role of 
contractors in carrying out police training and 
equipping programs, and what modifications, if any, 
are needed to improve oversight of such contractors. 
(6) Recommendations for legislative modifica-
tions, if any, to existing authorities relating to police 
training and equipping programs. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01776
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1777 
HR 6395 PCS
(c) FORM OF REPORT.—The report required under 
this section shall be submitted in unclassified form, but 
may include a classified annex. 
(d) PUBLIC AVAILABILITY INTERNET.—All unclassi-
fied portions of the report required under this section shall 
be made publicly available on an appropriate internet 
website. 
(e) DEFINITION.—In this section, the term ‘‘police’’ 
includes national police, gendarmerie, counter-narcotics 
police, counterterrorism police, formed police units, border 
security, and customs. 
SEC. 1710D. DEEPFAKE REPORT. 
(a) DEFINITIONS.—In this section: 
(1) DIGITAL
CONTENT
FORGERY.—The term 
‘‘digital content forgery’’ means the use of emerging 
technologies, including artificial intelligence and ma-
chine learning techniques, to fabricate or manipulate 
audio, visual, or text content with the intent to mis-
lead. 
(2) SECRETARY.—The term ‘‘Secretary’’ means 
the Secretary of Homeland Security. 
(b) REPORTS
ON
DIGITAL
CONTENT
FORGERY 
TECHNOLOGY.— 
(1) IN GENERAL.—Not later than 1 year after 
the date of enactment of this Act and annually 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01777
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1778 
HR 6395 PCS
thereafter for 5 years, the Secretary, acting through 
the Under Secretary for Science and Technology of 
the Department of Homeland Security, and with re-
spect to subparagraphs (F) through (H) of para-
graph (2), in consultation with the Director of Na-
tional Intelligence, shall research the state of digital 
content forgery technology and produce a report on 
such technology. 
(2) CONTENTS.—Each report produced under 
paragraph (1) shall include the following: 
(A) An assessment of the underlying tech-
nologies used to create or propagate digital con-
tent forgeries, including the evolution of such 
technologies. 
(B) A description of the types of digital 
content forgeries, including those used to com-
mit fraud, cause harm, or violate civil rights 
recognized under Federal law. 
(C) An assessment of how foreign govern-
ments, and the proxies and networks thereof, 
use, or could use, digital content forgeries to 
harm national security. 
(D) An assessment of how non-govern-
mental entities in the United States use, or 
could use, digital content forgeries. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01778
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1779 
HR 6395 PCS
(E) An assessment of the uses, applica-
tions, dangers, and benefits, including the im-
pact on individuals, of deep learning tech-
nologies used to generate high fidelity artificial 
content of events that did not occur. 
(F) An analysis of the methods used to de-
termine whether content is genuinely created by 
a human or through digital content forgery 
technology, and an assessment of any effective 
heuristics used to make such a determination, 
as well as recommendations on how to identify 
and address suspect content and elements to 
provide warnings to users of such content. 
(G) A description of the technological 
countermeasures that are, or could be, used to 
address concerns with digital content forgery 
technology. 
(H) Proposed research and development 
activities for the Science and Technology Direc-
torate of the Department of Homeland Security 
to undertake related to the identification of 
forged digital content and related counter-
measures. 
(I) Any additional information the Sec-
retary determines appropriate. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01779
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1780 
HR 6395 PCS
(3) CONSULTATION AND PUBLIC HEARINGS.— 
In producing each report required under paragraph 
(1), the Secretary may— 
(A) consult with any other agency of the 
Federal Government that the Secretary con-
siders necessary; and 
(B) conduct public hearings to gather, or 
otherwise allow interested parties an oppor-
tunity to present, information and advice rel-
evant to the production of the report. 
(4) FORM OF REPORT.—Each report required 
under paragraph (1) shall be produced in unclassi-
fied form, but may contain a classified annex. 
(5) APPLICABILITY OF FOIA.—Nothing in this 
section, or in a report produced under this section, 
may be construed to allow the disclosure of informa-
tion or a record that is exempt from public disclo-
sure under section 552 of title 5, United States 
Code (commonly known as the ‘‘Freedom of Infor-
mation Act’’). 
(6) APPLICABILITY
OF
THE
PAPERWORK
RE-
DUCTION ACT.—Subchapter I of chapter 35 of title 
44, United States Code (commonly known as the 
‘‘Paperwork Reduction Act’’), shall not apply to this 
section. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01780
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1781 
HR 6395 PCS
SEC. 1710E. STUDY ON UNEMPLOYMENT RATE OF WOMEN 
VETERANS WHO SERVED ON ACTIVE DUTY IN 
THE ARMED FORCES AFTER SEPTEMBER 11, 
2001. 
(a) STUDY.— 
(1) IN
GENERAL.—Not later than 180 days 
after the date of the enactment of this Act, the Sec-
retary of Veterans Affairs, in consultation with the 
Bureau of Labor Statistics of the Department of 
Labor, shall conduct a study on why Post-9/11 Vet-
erans who are women are at higher risk of unem-
ployment than all other groups of women veterans 
and their non- veteran counterparts. 
(2) CONDUCT OF STUDY.— 
(A) IN
GENERAL.—The Secretary shall 
conduct the study under paragraph (1) pri-
marily through the Center for Women Veterans 
under section 318 of title 38, United States 
Code. 
(B) CONSULTATION.—-In carrying out the 
study conducted under paragraph (1), the Sec-
retary may consult with— 
(i) the Department of Labor; 
(ii) other Federal agencies, such as 
the Department of Defense, the Office of 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01781
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1782 
HR 6395 PCS
Personnel Management, and the Small 
Business Administration; 
(iii) foundations; and 
(iv) entities in the private sector. 
(3) ELEMENTS
OF
STUDY.—The study con-
ducted under paragraph (1) shall include, with re-
spect to Post-9/11 Veterans who are women, at a 
minimum, an analysis of the following: 
(A) Rank at time of separation from the 
Armed Forces. 
(B) Geographic location upon such separa-
tion. 
(C) Educational level upon such separa-
tion. 
(D) The percentage of such veterans who 
enrolled in an education or employment training 
program of the Department of Veterans Affairs 
or the Department of Labor after such separa-
tion. 
(E) Industries that have employed such 
veterans. 
(F) Military occupational specialties avail-
able to such veterans. 
(G) Barriers to employment of such vet-
erans. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01782
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1783 
HR 6395 PCS
(H) Causes to fluctuations in employment 
of such veterans. 
(I) Current employment training programs 
of the Department of Veterans Affairs or the 
Department of Labor that are available to such 
veterans. 
(J) Economic indicators that impact unem-
ployment of such veterans. 
(K) Health conditions of such veterans 
that could impact employment. 
(L) Whether there are differences in the 
analyses conducted under subparagraphs (A) 
through (K) based on the race of such veteran. 
(M) The difference between unemployment 
rates of Post-9/11 Veterans who are women 
compared to unemployment rates of Post-9/11 
Veterans who are men, including an analysis of 
potential causes of such difference. 
(b) REPORT.— 
(1) IN GENERAL.—Not later than 90 days after 
completing the study under subsection (a), the Sec-
retary shall submit to the Committee on Veterans’ 
Affairs of the Senate and the Committee on Vet-
erans’ Affairs of the House of Representatives a re-
port on such study. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01783
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1784 
HR 6395 PCS
(2) ELEMENTS.—The report required by para-
graph (1) shall include the following: 
(A) The analyses conducted under sub-
section (a)(3). 
(B) A description of the methods used to 
conduct the study under subsection (a). 
(C) Such other matters relating to the un-
employment rates of Post-9/11 Veterans who 
are women as the Secretary considers appro-
priate. 
(c) POST-9/11 VETERAN DEFINED.—In this section, 
the term ‘‘Post-9/11 Veteran’ ’’ means a veteran who 
served on active duty in the Armed Forces on or after 
September 11, 2001. 
SEC. 1710F. REPORT ON THE OKLAHOMA CITY NATIONAL 
MEMORIAL. 
Not later than 180 days after the date of the enact-
ment of this Act, the Secretary of Interior shall submit 
to Congress a report containing the following information: 
(1) A description of the current status of the 
Oklahoma City National Memorial, an affiliated site 
of the National Park System. 
(2) A summary of non-Federal funding that has 
been raised in accordance with section 7(2) of the 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01784
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1785 
HR 6395 PCS
Oklahoma City National Memorial Act of 1997 (16 
U.S.C. 450ss–5(2)). 
SEC. 1710G. REPORTS ON MILITARY SERVICE ACADEMIES. 
Not later than 180 days after the date of the enact-
ment of this Act, the superintendent of each military serv-
ice academy shall submit to the Secretary of Defense and 
the congressional defense committees a report that in-
cludes, with respect to the academy overseen by the super-
intendent, the following: 
(1) Anonymized equal opportunity claims and 
determinations involving the academy over the past 
20 years. 
(2) Results of a climate survey of cadets or 
midshipmen (as the case may be) conducted by an 
external entity. 
(3) A review of educational and extracurricular 
instruction at the academy, including— 
(A) a review of courses to ensure the inclu-
sion of minority communities in authorship and 
course content; and 
(B) a review of faculty and staff demo-
graphics to determine diversity recruitment 
practices at the academy. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01785
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1786 
HR 6395 PCS
SEC. 1710H. INDEPENDENT STUDY ON IDENTIFYING AND 
ADDRESSING THREATS THAT INDIVIDUALLY 
OR COLLECTIVELY AFFECT NATIONAL SECU-
RITY, FINANCIAL SECURITY, OR BOTH. 
(a) INDEPENDENT STUDY.—Not later than 30 days 
after the date of the enactment of this Act, the Director 
of National Intelligence, in coordination with the Sec-
retary of the Treasury in the Secretary’s capacity as the 
Chair of the Financial Stability Oversight Council and the 
heads of other relevant departments and agencies, shall 
seek to enter into a contract with a federally funded re-
search and development center under which the center will 
conduct a study on identifying and addressing threats that 
individually or collectively affect national security, finan-
cial security, or both. 
(b) ELEMENTS
OF STUDY.—In carrying out the 
study referred to in subsection (a), the selected Federally 
funded research and development center shall be contrac-
tually obligated to— 
(1) identify threats that individually or collec-
tively affect national security, financial security, or 
both, including— 
(A) foreign entities and governments ac-
quiring financial interests in domestic compa-
nies that have access to critical or sensitive na-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01786
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1787 
HR 6395 PCS
tional security materials, technologies, or infor-
mation; 
(B) other currencies being used in lieu of 
the United States Dollar in international trans-
actions; 
(C) foreign influence in companies seeking 
to access capital markets by conducting initial 
public offerings in other countries; 
(D) the use of financial instruments, mar-
kets, payment systems, or digital assets in ways 
that appear legitimate but may be part of a for-
eign malign strategy to weaken or undermine 
the economic security of the United States; 
(E) the use of entities, such as corpora-
tions, companies, limited liability companies, 
limited partnerships, business trusts, business 
associations, or other similar entities to obscure 
or hide the foreign beneficial owner of such en-
tities; and 
(F) any other known or potential threats 
that individually or collectively affect national 
security, financial security, or both currently or 
in the foreseeable future. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01787
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1788 
HR 6395 PCS
(2) assess the extent to which the United States 
Government is currently able to identify and charac-
terize the threats identified under paragraph (1); 
(3) assess the extent to which the United States 
Government is currently able to mitigate the risk 
posed by the threats identified under paragraph (1); 
(4) assess whether current levels of information 
sharing and cooperation between the United States 
Government and allies and partners has been helpful 
or can be improved upon in order for the United 
States Government to identify, characterize, and 
mitigate the threats identified under paragraph (1); 
and 
(5) recommend opportunities, and any such au-
thorities or resources required, to improve the effi-
ciency and effectiveness of the United States Gov-
ernment in identifying the threats identified under 
paragraph (1) and mitigating the risk posed by such 
threats. 
(c) SUBMISSION TO DIRECTOR OF NATIONAL INTEL-
LIGENCE.—Not later than 180 days after the date of the 
enactment of this Act, the federally funded research and 
development center selected to conduct the study under 
subsection (a) shall submit to the Director of National In-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01788
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1789 
HR 6395 PCS
telligence a report on the results of the study in both clas-
sified and unclassified form. 
(d) SUBMISSION TO CONGRESS.— 
(1) IN GENERAL.—Not later than 30 days after 
the date on which the Director of National Intel-
ligence receives the report under subsection (c), the 
Director shall submit to the appropriate committees 
of Congress an unaltered copy of the report in both 
classified and unclassified form, and such comments 
as the Director, in coordination with the Secretary 
of Treasury in his capacity as the Chair of the Fi-
nancial Stability Oversight Council and the heads of 
other relevant departments and agencies, may have 
with respect to the report. 
(2) 
APPROPRIATE
COMMITTEES
OF
CON-
GRESS.—In this subsection, the term ‘‘appropriate 
committees of Congress’’ means— 
(A) the Committee on Armed Services, the 
Select Committee on Intelligence, and the Com-
mittee on Banking, Housing, and Urban Af-
fairs, the Committee on Foreign Relations, and 
the Committee on Appropriations of the Senate; 
and 
(B) the Committee on Armed Services, the 
Permanent Select Committee on Intelligence, 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01789
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1790 
HR 6395 PCS
and the Committee on Financial Services, the 
Committee on Foreign Affairs, and the Com-
mittee on Appropriations of the House of Rep-
resentatives. 
SEC. 1710I. MARITIME SECURITY AND DOMAIN AWARENESS. 
(a) PROGRESS REPORT ON MARITIME SECURITY.— 
(1) IN
GENERAL.—Not later than 180 days 
after the date of the enactment of this Act, the Sec-
retary of Defense, in coordination with the Secretary 
of State, the Secretary of the Department in which 
the Coast Guard is operating, and the heads of other 
appropriate Federal agencies, shall submit to the 
congressional defense committees a report on the 
steps taken since December 20, 2019, to make fur-
ther use of the following mechanisms to combat IUU 
fishing: 
(A) Inclusion of counter-IUU fishing in ex-
isting shiprider agreements to which the United 
States is a party. 
(B) Entry into shiprider agreements that 
include counter-IUU fishing with priority flag 
states and countries in priority regions with 
which the United States does not already have 
such agreements. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01790
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1791 
HR 6395 PCS
(C) Inclusion of counter-IUU fishing in the 
mission of the Combined Maritime Forces. 
(D) Inclusion of counter-IUU fishing exer-
cises in the annual at-sea exercises conducted 
by the Department of Defense, in coordination 
with the United States Coast Guard. 
(E) Development of partnerships similar to 
the Oceania Maritime Security Initiative and 
the Africa Maritime Law Enforcement Partner-
ship in other priority regions. 
(2) ELEMENT.—The report required by para-
graph (1) shall include a description of specific steps 
taken by the Secretary of the Navy with respect to 
each mechanism described in paragraph (1), includ-
ing a detailed description of any security cooperation 
engagement undertaken to combat IUU fishing by 
such mechanisms and resulting coordination between 
the Department of the Navy and the Coast Guard. 
(b) ASSESSMENT
OF SERVICE COORDINATION
ON 
MARITIME DOMAIN AWARENESS.— 
(1) IN GENERAL.—Not later than 90 days after 
the date of the enactment of this Act, the Secretary 
of the Navy shall enter into an agreement with the 
Secretary of the department in which the Coast 
Guard is operating, in consultation with the Sec-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01791
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1792 
HR 6395 PCS
retary of Commerce, to assess the available commer-
cial solutions for collecting, sharing, and dissemi-
nating among United States maritime services and 
partner countries maritime domain awareness infor-
mation relating to illegal maritime activities, includ-
ing IUU fishing. 
(2) ELEMENTS.—The assessment carried out 
pursuant to an agreement under paragraph (1) 
shall— 
(A) build on the ongoing Coast Guard as-
sessment related to autonomous vehicles; 
(B) consider appropriate commercially and 
academically available technological solutions; 
and 
(C) consider any limitation related to af-
fordability, 
exportability, 
maintenance, 
and 
sustainment requirements and any other factor 
that may constrain the suitability of such solu-
tions for use in a joint and combined environ-
ment, including the potential provision of such 
solutions to one or more partner countries. 
(3) SUBMITTAL TO CONGRESS.—Not later than 
1 year after entering into an agreement under para-
graph (1), the Secretary of the Navy shall submit to 
the Committee on Armed Services, the Committee 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01792
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1793 
HR 6395 PCS
on Commerce, Science, and Transportation, and the 
Committee on Appropriations of the Senate and the 
Committee on Armed Services, the Committee on 
Natural Resources, the Committee on Transpor-
tation and Infrastructure, the Committee on Foreign 
Affairs, and the Committee on Appropriations of the 
House of Representatives the assessment prepared 
in accordance with the agreement. 
(c) REPORT ON USE OF FISHING FLEETS BY FOR-
EIGN GOVERNMENTS.— 
(1) IN
GENERAL.—Not later than 180 days 
after the date of the enactment of this Act, the Di-
rector of the Office of Naval Intelligence shall sub-
mit to the Committee on Armed Services, the Com-
mittee on Commerce, Science, and Transportation, 
and the Committee on Appropriations of the Senate 
and the Committee on Armed Services, the Com-
mittee on Natural Resources, the Committee on 
Transportation and Infrastructure, the Committee 
on Foreign Affairs, and the Committee on Appro-
priations of the House of Representatives a report 
on the use by governments of foreign countries of 
distant-water fishing fleets as extensions of the offi-
cial maritime security forces of such countries. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01793
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1794 
HR 6395 PCS
(2) ELEMENT.—The report required by para-
graph (1) shall include the following: 
(A) An analysis of the manner in which 
fishing fleets are leveraged in support of the 
naval operations and policies of foreign coun-
tries more generally. 
(B) A consideration of— 
(i) threats posed, on a country-by- 
country basis, to the fishing vessels and 
other vessels of the United States and 
partner countries; 
(ii) risks to Navy and Coast Guard 
operations of the United States, and the 
naval and coast guard operations of part-
ner countries; and 
(iii) the broader challenge to the inter-
ests of the United States and partner 
countries. 
(3) FORM.—The report required by paragraph 
(1) shall be in unclassified form, but may include a 
classified annex. 
(d) DEFINITIONS.—In this section, any term that is 
also used in the Maritime SAFE Act (Public Law 116– 
92) shall have the meaning given such term in that Act. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01794
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1795 
HR 6395 PCS
SEC. 1710J. COMPTROLLER GENERAL REPORT ON DEPART-
MENT OF DEFENSE PROCESSES FOR RE-
SPONDING TO CONGRESSIONAL REPORTING 
REQUIREMENTS. 
(a) COMPTROLLER GENERAL ANALYSIS.—Not later 
than 1 year after the date of the enactment of this Act, 
the Comptroller General of the United States shall submit 
to the Committees on Armed Services of the Senate and 
House of Representatives a report containing an analysis 
of Department of Defense processes for responding to con-
gressional reporting requirements in the annual National 
Defense Authorization Acts, or the accompanying com-
mittee reports. 
(b) CRITERIA FOR EVALUATION.—The analysis re-
quired under subsection (a) shall include an evaluation of 
funding and changes to policies and business practices by 
the Department for improving the effectiveness, efficiency, 
and public transparency of the Department’s compliance 
with congressional reporting requirements. 
(c) CONTENTS OF REPORT.—The report required by 
subsection (a) shall include each of the following: 
(1) A description of— 
(A) current laws, guidance, policies for De-
partment of Defense compliance with congres-
sional oversight reporting requirements; and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01795
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1796 
HR 6395 PCS
(B) recent direction from the congressional 
defense committees for the Department con-
cerning how it designs, modifies, tracks, deliv-
ers, and inventories completed reports. 
(2) A review and evaluation of the cost and ef-
fectiveness of— 
(A) the methods the Department of De-
fense uses to track and respond to reporting re-
quirements; and 
(B) the ways in which the Department of 
Defense ensures suitability of content and time-
liness. 
(3) An analysis of options for modernizing the 
preparation and delivery process for reports that in-
cludes— 
(A) the coordination of Department of De-
fense business practices and internal policies 
with legislative processes; and 
(B) a determination of the feasibility of 
maintaining a congressional tracking database 
that makes unclassified reports publicly avail-
able in a searchable online database that identi-
fies, for each report included in the database— 
(i) the deadline on which the required 
report was required to be submitted; 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01796
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1797 
HR 6395 PCS
(ii) the date on which the report was 
received; 
(iii) the classification level of the com-
pleted report; 
(iv) the form in which the report was 
submitted; 
(v) the standard legislative citation 
and hyperlink to original legislative lan-
guage that required the report; 
(vi) the total cost associated with the 
report; 
(vii) a brief summary of the report; 
(viii) a unique identifier for the re-
port; and 
(ix) the subject and sub-subject codes 
associated with the report. 
SEC. 1710K. REPORT ON PREDATORY SOCIAL MEDIA AND 
THE MILITARY COMMUNITY. 
(a) IN GENERAL.—The Comptroller General of the 
United States shall submit to Congress a report on risks 
facing service members, military families, and separated 
veterans on social media. 
(b) CONTENTS.—The report required under sub-
section (a) shall include an analysis of the following: 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01797
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1798 
HR 6395 PCS
(1) Content related to predatory loans or finan-
cial or educational products. 
(2) Content related unproven or unnecessary 
medical treatments or procedures. 
(3) Content related to ethnic or racial violent 
extremism. 
(4) The risks to readiness, morale, and national 
security posed by such content. 
(5) The ways in which social media algorithms 
may amplify such content. 
(6) The steps taken by social media companies 
and executive agencies to address the risks posed by 
the content described in paragraphs (1), (2), and 
(3). 
(c) FORM.—The report required under subsection (a) 
shall be submitted in an unclassified form but may include 
a classified annex. 
(d) EXECUTIVE AGENCY DEFINED.—In this section, 
the term ‘‘executive agency’’ means an executive depart-
ment or independent establishment in the executive branch 
of the Federal Government. 
SEC. 1710L. REPORT ON TRANSFORMING BUSINESS PROC-
ESSES FOR REVOLUTIONARY CHANGE. 
(a) REPORT REQUIRED.—Not later than 180 days 
after the date of the enactment of this Act, the Secretary 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01798
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1799 
HR 6395 PCS
of Defense shall submit to the congressional defense com-
mittees a report on the efforts of the Secretary to imple-
ment the recommendations set forth in the study con-
ducted by the Defense Business Board titled ‘‘Trans-
forming Department of Defense’s Core Business Processes 
for Revolutionary Change’’. 
(b) ELEMENTS.—The report required under sub-
section (a) shall include— 
(1) a description of the actions carried out by 
the Secretary of Defense to implement the rec-
ommendations set forth in the study described in 
subsection (a); 
(2) identification of the specific recommenda-
tions, if any, that have been implemented by the 
Secretary; 
(3) the amount of any cost savings achieved as 
a result of implementing such recommendations; 
(4) identification of any recommendations that 
have not been implemented; and 
(5) alternative recommendations that may help 
the 
Department 
of 
Defense 
achieve 
$125,000,000,000 in cost savings over the period of 
5 fiscal years beginning after the year in which the 
report is submitted. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01799
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1800 
HR 6395 PCS
SEC. 1710M. REVIEW AND REPORT OF EXPERIMENTATION 
WITH TICKS AND INSECTS. 
(a) REVIEW.—The Comptroller General of the United 
States shall conduct a review of whether the Department 
of Defense experimented with ticks, other insects, airborne 
releases of tick-borne bacteria, viruses, pathogens, or any 
other tick-borne agents regarding use as a biological weap-
on between the years of 1950 and 1977. 
(b) REPORT.—If the Comptroller General of the 
United States finds that any experiment described under 
subsection (a) occurred, the Comptroller General shall 
submit to the Committees on Armed Services of the House 
of Representatives and the Senate a report on— 
(1) the scope of such experiment; and 
(2) whether any ticks, insects, or other vector- 
borne agents used in such experiment were released 
outside of any laboratory by accident or experiment 
design. 
SEC. 1710N. REPORT ON AGILE PROGRAM AND PROJECT 
MANAGEMENT. 
(a) REPORT.—Not later than 1 year after the date 
of the enactment of this Act, the Comptroller General of 
the United States shall submit to the Committee on 
Armed Services of the Senate and the Committee on 
Armed Services of the House of Representatives a publicly 
available report on agile program and project management 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01800
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1801 
HR 6395 PCS
within the Department of Defense. The report shall in-
clude the following: 
(1) A review of all statutory provisions enabling 
the use of agile program and project management 
within the Department of Defense. 
(2) An evaluation of the implementation of stat-
utory provisions enabling the use of agile program 
and project management within the Department of 
Defense and Armed Forces. 
(3) An evaluation of the agile program and 
project methodologies used within the Department of 
Defense and Armed Forces. 
(4) An evaluation of the how agile program and 
project methodologies have enabled efforts to pre-
pare the Department of Defense and Armed Forces 
for the future of work. 
(5) An evaluation of the enterprise scalability of 
the agile program and project methodologies used 
within the Department of Defense and Armed 
Forces, including how well agile methods are inte-
grated into the enterprise when used at scale. 
(6) An analysis of the impediments to the fur-
ther adoption and enterprise scalability of agile pro-
gram and project management including statutory 
impediments, as well as existing policy, guidance, 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01801
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1802 
HR 6395 PCS
and instruction of the Department of Defense and 
Armed Forces. 
(7) An analysis of the impact of further adop-
tion and enterprise scalability of agile program and 
project management on the future of work within 
the Department of Defense and Armed Forces. 
(8) Such other information as the Comptroller 
General determines appropriate. 
(b) INTERIM BRIEFING.—Not later than March 1, 
2021, the Comptroller General shall provide to the Com-
mittee on Armed Services of the Senate and the Com-
mittee on Armed Services of the House of Representatives 
a briefing on the topics to be covered by the report under 
subsection (a), including and preliminary data and any 
issues or concerns of the Comptroller General relating to 
the report. 
(c) ACCESS TO RELEVANT DATA.—For purposes of 
this section, the Secretary of Defense shall ensure that 
the Comptroller General has access to all relevant data. 
Subtitle B—Electronic Message 
Preservation 
SEC. 1711. SHORT TITLE. 
This subtitle may be cited as the ‘‘Electronic Message 
Preservation Act’’. 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01802
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1803 
HR 6395 PCS
SEC. 1712. PRESERVATION OF ELECTRONIC MESSAGES AND 
OTHER RECORDS. 
(a) REQUIREMENT FOR PRESERVATION OF ELEC-
TRONIC MESSAGES.—Chapter 29 of title 44, United 
States Code, is amended by adding at the end the fol-
lowing new section: 
‘‘§ 2912. Preservation of electronic messages and 
other records 
‘‘(a) REGULATIONS REQUIRED.—The Archivist shall 
promulgate regulations governing Federal agency preser-
vation of electronic messages that are determined to be 
records. Such regulations shall, at a minimum— 
‘‘(1) require the electronic capture, manage-
ment, and preservation of such electronic records in 
accordance with the records disposition requirements 
of chapter 33; 
‘‘(2) require that such electronic records are 
readily accessible for retrieval through electronic 
searches; and 
‘‘(3) include timelines for Federal agency imple-
mentation of the regulations that ensure compliance 
as expeditiously as practicable. 
‘‘(b) ENSURING COMPLIANCE.—The Archivist shall 
promulgate regulations that— 
‘‘(1) establish mandatory minimum functional 
requirements for electronic records management sys-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01803
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1804 
HR 6395 PCS
tems to ensure compliance with the requirements in 
paragraphs (1) and (2) of subsection (a); and 
‘‘(2) establish a process to ensure that the elec-
tronic records management system of each Federal 
agency meets the functional requirements estab-
lished under paragraph (1). 
‘‘(c) 
COVERAGE
OF
OTHER
ELECTRONIC 
RECORDS.—To the extent practicable, the regulations pro-
mulgated under subsections (a) and (b) shall also include 
requirements for the capture, management, and preserva-
tion of other electronic records. 
‘‘(d) COMPLIANCE BY FEDERAL AGENCIES.—Each 
Federal agency shall comply with the regulations promul-
gated under subsections (a) and (b). 
‘‘(e) REVIEW OF REGULATIONS REQUIRED.—The Ar-
chivist shall periodically review and, as necessary, amend 
the regulations promulgated under subsections (a) and 
(b).’’. 
(b) DEADLINE FOR REGULATIONS.— 
(1) PRESERVATION
OF
ELECTRONIC
MES-
SAGES.—Not later than 120 days after the date of 
the enactment of this Act, the Archivist shall pro-
mulgate the regulations required under section 
2912(a) of title 44, United States Code, as added by 
subsection (a). 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01804
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1805 
HR 6395 PCS
(2) ENSURING COMPLIANCE.—Not later than 2 
years after the date of the enactment of this Act, the 
Archivist shall promulgate the regulations required 
under section 2912(b) of title 44, United States 
Code, as added by subsection (a). 
(c) REPORTS
ON IMPLEMENTATION
OF REGULA-
TIONS.— 
(1) AGENCY REPORT TO ARCHIVIST.—Not later 
than 1 year after the date of the enactment of this 
Act, the head of each Federal agency shall submit 
to the Archivist a report on the agency’s compliance 
with the regulations promulgated under section 2912 
of title 44, United States Code, as added by sub-
section (a), and shall make the report publicly avail-
able on the website of the agency. 
(2) ARCHIVIST
REPORT
TO
CONGRESS.—Not 
later than 90 days after receipt of all reports re-
quired by paragraph (1), the Archivist shall submit 
to the Committee on Homeland Security and Gov-
ernmental Affairs of the Senate and the Committee 
on Oversight and Reform of the House of Represent-
atives a report on Federal agency compliance with 
the regulations promulgated under section 2912(a) 
of title 44, United States Code, as added by sub-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01805
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1806 
HR 6395 PCS
section (a), and shall make the report publicly avail-
able on the website of the agency. 
(3) FEDERAL AGENCY DEFINED.—In this sub-
section, the term ‘‘Federal agency’’ has the meaning 
given that term in section 2901 of title 44, United 
States Code. 
(d) CLERICAL AMENDMENT.—The table of sections 
at the beginning of chapter 29 of title 44, United States 
Code, is amended by adding after the item relating to sec-
tion 2911 the following new item: 
‘‘2912. Preservation of electronic messages and other records.’’. 
(e) DEFINITIONS.—Section 2901 of title 44, United 
States Code, is amended— 
(1) by striking ‘‘and’’ at the end of paragraph 
(14); and 
(2) by striking paragraph (15) and inserting 
the following new paragraphs: 
‘‘(15) the term ‘electronic messages’ means 
electronic mail and other electronic messaging sys-
tems that are used for purposes of communicating 
between individuals; and 
‘‘(16) the term ‘electronic records management 
system’ means software designed to manage elec-
tronic records, including by— 
‘‘(A) categorizing and locating records; 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01806
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1807 
HR 6395 PCS
‘‘(B) ensuring that records are retained as 
long as necessary; 
‘‘(C) identifying records that are due for 
disposition; and 
‘‘(D) ensuring the storage, retrieval, and 
disposition of records.’’. 
SEC. 1713. PRESIDENTIAL RECORDS. 
(a) ADDITIONAL REGULATIONS RELATING TO PRESI-
DENTIAL RECORDS.— 
(1) IN
GENERAL.—Section 2206 of title 44, 
United States Code, is amended— 
(A) by striking ‘‘and’’ at the end of para-
graph (3); 
(B) by striking the period at the end of 
paragraph (4) and inserting ‘‘; and’’; and 
(C) by adding at the end the following: 
‘‘(5) provisions for establishing standards nec-
essary for the economical and efficient management 
of electronic Presidential records during the Presi-
dent’s term of office, including— 
‘‘(A) records management controls nec-
essary for the capture, management, and pres-
ervation of electronic messages; 
‘‘(B) records management controls nec-
essary to ensure that electronic messages are 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01807
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1808 
HR 6395 PCS
readily accessible for retrieval through elec-
tronic searches; and 
‘‘(C) a process to ensure the electronic 
records management system to be used by the 
President for the purposes of complying with 
the requirements in subparagraphs (A) and 
(B).’’. 
(2) DEFINITIONS.—Section 2201 of title 44, 
United States Code, is amended by adding at the 
end the following new paragraphs: 
‘‘(6) The term ‘electronic messages’ has the 
meaning given that term under section 2901(15). 
‘‘(7) The term ‘electronic records management 
system’ has the meaning given that term under sec-
tion 2901(16).’’. 
(b) CERTIFICATION OF PRESIDENT’S MANAGEMENT 
OF PRESIDENTIAL RECORDS.— 
(1) CERTIFICATION REQUIRED.—Chapter 22 of 
title 44, United States Code, is amended by adding 
at the end the following new section: 
‘‘§ 2210. Certification of the President’s management 
of Presidential records 
‘‘(a) ANNUAL CERTIFICATION.—The Archivist shall 
annually certify whether the electronic records manage-
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01808
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1809 
HR 6395 PCS
ment controls established by the President meet require-
ments under sections 2203(a) and 2206(5). 
‘‘(b) REPORT TO CONGRESS.—The Archivist shall re-
port annually to the Committee on Homeland Security and 
Governmental Affairs of the Senate and the Committee 
on Oversight and Reform of the House of Representatives 
on the status of the certification.’’. 
(2) CLERICAL AMENDMENT.—The table of sec-
tions at the beginning of chapter 22 of title 44, 
United States Code, is amended by adding at the 
end the following new item: 
‘‘2210. Certification of the President’s management of Presidential 
records.’’. 
(c) REPORT TO CONGRESS.—Section 2203(g) of title 
44, United States Code, is amended by adding at the end 
the following new paragraph: 
‘‘(5) One year following the conclusion of a Presi-
dent’s term of office, or if a President serves consecutive 
terms 1 year following the conclusion of the last term, the 
Archivist shall submit to the Committee on Homeland Se-
curity and Governmental Affairs of the Senate and the 
Committee on Oversight and Reform of the House of Rep-
resentatives a report on— 
‘‘(A) the volume and format of electronic Presi-
dential records deposited into that President’s Presi-
dential archival depository; and 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01809
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS
1810 
HR 6395 PCS
‘‘(B) whether the electronic records manage-
ment controls of that President met the require-
ments under sections 2203(a) and 2206(5).’’. 
(d) EFFECTIVE DATE.—The amendments made by 
this section shall take effect 1 year after the date of the 
enactment of this Act. 
Subtitle C—Space Technology Ad-
vancement Report (STAR) Act of 
2020 
SEC. 1721. SHORT TITLE. 
This subtitle may be cited as the ‘‘Space Technology 
Advancement Report (STAR) Act of 2020’’. 
SEC. 1722. FINDINGS. 
Congress finds the following: 
(1) As stated in the United States-China Eco-
nomic and Security Commission’s 2019 Report to 
Congress, the United States retains many advan-
tages over the People’s Republic of China (PRC) in 
space, including— 
(A) the organization and technical exper-
tise of its space program; 
(B) the capabilities of the National Aero-
nautics and Space Administration for human 
spaceflight and exploration; 
(C) its vibrant commercial space sector; 
VerDate Sep 11 2014 
00:33 Aug 06, 2020
Jkt 099200
PO 00000
Frm 01810
Fmt 6652
Sfmt 6201
E:\BILLS\H6395.PCS
H6395
tkelley on DSKBCP9HB2PROD with BILLS