I 
118TH CONGRESS 
2D SESSION 
H. R. 9290 
To direct the Chief Information Officer of the Department of Defense and 
the Director of the Defense Information Systems Agency to jointly pro-
vide to the Committees on Armed Services of the Senate and House 
of Representatives a briefing on the plan of the Department of Defense 
to transition away from the Joint Regional Security Stacks, and for 
other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
AUGUST 2, 2024 
Ms. SLOTKIN introduced the following bill; which was referred to the 
Committee on Armed Services 
A BILL 
To direct the Chief Information Officer of the Department 
of Defense and the Director of the Defense Information 
Systems Agency to jointly provide to the Committees 
on Armed Services of the Senate and House of Rep-
resentatives a briefing on the plan of the Department 
of Defense to transition away from the Joint Regional 
Security Stacks, and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
VerDate Sep 11 2014 
06:24 Sep 05, 2024
Jkt 049200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H9290.IH
H9290
kjohnson on DSK7ZCZBW3PROD with $$_JOB
SECTION 1. BRIEFING ON DEPARTMENT OF DEFENSE PLAN 
TO TRANSITION AWAY FROM JOINT RE-
GIONAL SECURITY STACKS. 
(a) FINDINGS.—Congress makes the following find-
ings: 
(1) the Department of Defense faces aggressive 
timelines to meet zero trust goals by 2027 that align 
to its Zero Trust Strategy; and 
(2) a central part of this evolution will be the 
migration away from the legacy Joint Regional Se-
curity Stacks. 
(b) SENSE OF CONGRESS.—It is the sense of Con-
gress that— 
(1) it is paramount that the successor to the 
Joint Regional Security Stacks incorporates least 
privilege access, continuous trust verification, and 
continuous security inspection while protecting all 
data and securing all applications regardless of user 
location or device; 
(2) in order to achieve goals within the specified 
timelines of the Department of Defense, the military 
departments, combatant commands, and other com-
ponents of the Department should leverage scalable, 
IL–5 certified solutions that went through an open 
vendor selection process and comprehensive proto-
typing before production; and 
VerDate Sep 11 2014 
05:32 Sep 06, 2024
Jkt 049200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H9290.IH
H9290
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(3) if such components instead pursue their 
own bespoke solutions to this common need, they 
must plan to navigate the transition from the Joint 
Regional Security Stacks and certification timeline 
constraints without negatively affecting the resilience 
of the Department of Defense information networks. 
(c) BRIEFING.—Not later than 120 days after the 
date of the enactment of this Act, the Chief Information 
Officer of the Department of Defense and the Director 
of the Defense Information Systems Agency, shall jointly 
provide to the Committees on Armed Services of the Sen-
ate and House of Representatives a briefing on the plan 
of the Department of Defense to transition away from the 
Joint Regional Security Stacks, with a focus on how leg-
acy seats will gain access to zero trust-aligned continuous 
trust verification and security inspection regardless of user 
location or device. 
Æ 
VerDate Sep 11 2014 
06:24 Sep 05, 2024
Jkt 049200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6301
E:\BILLS\H9290.IH
H9290
kjohnson on DSK7ZCZBW3PROD with $$_JOB