H. R. 7776—1505 
‘‘(2) DUTIES.— 
‘‘(A) IN GENERAL.—The head of the Bureau shall per-
form such duties and exercise such powers as the Secretary 
of State shall prescribe, including implementing the diplo-
matic and foreign policy aspects of the policy described 
in section 9501(a) of the Department of State Authorization 
Act of 2022. 
‘‘(B) DUTIES
DESCRIBED.—The principal duties and 
responsibilities of the head of the Bureau shall, in further-
ance of the diplomatic and foreign policy mission of the 
Department of State, be— 
‘‘(i) to serve as the principal cyberspace policy offi-
cial within the senior management of the Department 
of State and as the advisor to the Secretary of State 
for cyberspace and digital issues; 
‘‘(ii) to lead, coordinate, and execute, in coordina-
tion with other relevant bureaus and offices, the 
Department of State’s diplomatic cyberspace, and 
cybersecurity efforts (including efforts related to data 
privacy, data flows, internet governance, information 
and communications technology standards, and other 
issues that the Secretary has assigned to the Bureau); 
‘‘(iii) to coordinate with relevant Federal agencies 
and the Office of the National Cyber Director to ensure 
the diplomatic and foreign policy aspects of the cyber 
strategy in section 9501 of the Department of State 
Authorization Act of 2022 and any other subsequent 
strategy are implemented in a manner that is fully 
integrated with the broader strategy; 
‘‘(iv) to promote an open, interoperable, reliable, 
and secure information and communications technology 
infrastructure globally; 
‘‘(v) to represent the Secretary of State in inter-
agency efforts to develop and advance Federal Govern-
ment cyber priorities and activities, including efforts 
to develop credible national capabilities, strategies, and 
policies to deter and counter cyber adversaries, and 
carry out the purposes of title V of the Department 
of State Authorization Act of 2022; 
‘‘(vi) to engage civil society, the private sector, 
academia, and other public and private entities on 
relevant international cyberspace and international 
information and communications technology issues; 
‘‘(vii) to support United States Government efforts 
to uphold and further develop global deterrence frame-
works for malicious cyber activity; 
‘‘(viii) to advise the Secretary of State and coordi-
nate with foreign governments regarding responses to 
national 
security-level 
cyber 
incidents, 
including 
coordination on diplomatic response efforts to support 
allies and partners threatened by malicious cyber 
activity, in conjunction with members of the North 
Atlantic Treaty Organization and like-minded coun-
tries; 
‘‘(ix) to promote the building of foreign capacity 
relating to cyberspace policy priorities;
H. R. 7776—1506 
‘‘(x) to promote an open, interoperable, reliable, 
and secure information and communications technology 
infrastructure globally and an open, interoperable, 
secure, and reliable internet governed by the multi- 
stakeholder model; 
‘‘(xi) to promote an international environment for 
technology investments and the internet that benefits 
United States economic and national security interests; 
‘‘(xii) to promote cross-border flow of data and com-
bat 
international 
initiatives 
seeking 
to 
impose 
unreasonable 
requirements 
on 
United 
States 
businesses; 
‘‘(xiii) to promote international policies to protect 
the integrity of United States and international tele-
communications 
infrastructure 
from 
foreign-based 
threats, including cyber-enabled threats; 
‘‘(xiv) to lead engagement, in coordination with 
relevant executive branch agencies, with foreign 
governments on relevant international cyberspace, 
cybersecurity, cybercrime, and digital economy issues 
described in title V of the Department of State 
Authorization Act of 2022; 
‘‘(xv) to promote international policies, in coordina-
tion with the Department of Commerce, to secure radio 
frequency spectrum in the best interests of the United 
States; 
‘‘(xvi) to promote and protect the exercise of human 
rights, including freedom of speech and religion, 
through the internet; 
‘‘(xvii) to build capacity of United States diplomatic 
officials to engage on cyberspace issues; 
‘‘(xviii) to encourage the development and adoption 
by foreign countries of internationally recognized 
standards, policies, and best practices; 
‘‘(xix) to support efforts by the Global Engagement 
Center to counter cyber-enabled information operations 
against the United States or its allies and partners; 
and 
‘‘(xx) to conduct such other matters as the Sec-
retary of State may assign. 
‘‘(3) QUALIFICATIONS.—The head of the Bureau should be 
an individual of demonstrated competency in the fields of— 
‘‘(A) cybersecurity and other relevant cyberspace and 
information and communications technology policy issues; 
and 
‘‘(B) international diplomacy. 
‘‘(4) ORGANIZATIONAL PLACEMENT.— 
‘‘(A) INITIAL
PLACEMENT.—Except as provided in 
subparagraph (B), the head of the Bureau shall report 
to the Deputy Secretary of State. 
‘‘(B) SUBSEQUENT
PLACEMENT.—The head of the 
Bureau may report to an Under Secretary of State or 
to an official holding a higher position than Under Sec-
retary if, not later than 15 days before any change in 
such reporting structure, the Secretary of State—
H. R. 7776—1507 
‘‘(i) consults with the Committee on Foreign Rela-
tions of the Senate and the Committee on Foreign 
Affairs of the House of Representatives; and 
‘‘(ii) submits a report to such committees that— 
‘‘(I) indicates that the Secretary, with respect 
to the reporting structure of the Bureau, has con-
sulted with and solicited feedback from— 
‘‘(aa) other relevant Federal entities with 
a role in international aspects of cyber policy; 
and 
‘‘(bb) the elements of the Department of 
State with responsibility for aspects of cyber 
policy, including the elements reporting to— 
‘‘(AA) the Under Secretary of State 
for Political Affairs; 
‘‘(BB) the Under Secretary of State 
for Civilian Security, Democracy, and 
Human Rights; 
‘‘(CC) the Under Secretary of State 
for Economic Growth, Energy, and the 
Environment; 
‘‘(DD) the Under Secretary of State 
for Arms Control and International Secu-
rity Affairs; 
‘‘(EE) the Under Secretary of State 
for Management; and 
‘‘(FF) the Under Secretary of State 
for Public Diplomacy and Public Affairs; 
‘‘(II) describes the new reporting structure for 
the head of the Bureau and the justification for 
such new structure; and 
‘‘(III) includes a plan describing how the new 
reporting structure will better enable the head 
of the Bureau to carry out the duties described 
in paragraph (2), including the security, economic, 
and human rights aspects of cyber diplomacy. 
‘‘(5) SPECIAL HIRING AUTHORITIES.—The Secretary of State 
may— 
‘‘(A) appoint up to 25 employees to cyber positions 
in the Bureau without regard to the provisions of sub-
chapter I of chapter 33 of title 5, United States Code, 
regarding appointments in the competitive service; and 
‘‘(B) fix the rates of basic pay of such employees without 
regard to chapter 51 and subchapter III of chapter 53 
of such title regarding classification and General Schedule 
pay rates, provided that the rates for such positions do 
not exceed the annual rate of basic pay in effect for a 
position at level IV of the Executive Schedule under section 
5315 of title 5, United States Code. 
‘‘(6) COORDINATION.—In implementing the duties prescribed 
under paragraph (2), the head of the Bureau shall coordinate 
with the heads of other Federal agencies, including the Depart-
ment of Commerce, the Department of Homeland Security, 
and other Federal agencies that the National Cyber Director 
deems appropriate. 
‘‘(7) RULE OF CONSTRUCTION.—Nothing in this subsection 
may be construed—
H. R. 7776—1508 
‘‘(A) to preclude the head of the Bureau from being 
designated as an Assistant Secretary, if such an Assistant 
Secretary position does not increase the number of Assist-
ant Secretary positions at the Department above the 
number authorized under subsection (c)(1); or 
‘‘(B) to alter or modify the existing authorities of any 
other Federal agency or official.’’. 
(b) SENSE
OF CONGRESS.—It is the sense of Congress that 
the Bureau established under section 1(i) of the State Department 
Basic Authorities Act of 1956, as added by subsection (a), should 
have a diverse workforce composed of qualified individuals, 
including individuals belonging to an underrepresented group. 
(c) UNITED NATIONS.—The Permanent Representative of the 
United States to the United Nations should use the voice, vote, 
and influence of the United States to oppose any measure that 
is inconsistent with the policy described in section 9501(a). 
SEC. 9503. INTERNATIONAL CYBERSPACE AND DIGITAL POLICY 
STRATEGY. 
(a) STRATEGY REQUIRED.—Not later than 1 year after the date 
of the enactment of this Act, the President, acting through the 
Secretary, and in coordination with the heads of other relevant 
Federal departments and agencies, shall develop an international 
cyberspace and digital policy strategy. 
(b) ELEMENTS.—The strategy required under subsection (a) 
shall include— 
(1) a review of actions and activities undertaken to support 
the policy described in section 9501(a); 
(2) a plan of action to guide the diplomacy of the Depart-
ment with regard to foreign countries, including— 
(A) conducting bilateral and multilateral activities— 
(i) to develop and support the implementation of 
norms of responsible country behavior in cyberspace 
consistent with the commitments listed in section 
9501(b)(5); 
(ii) to reduce the frequency and severity of 
cyberattacks on United States individuals, businesses, 
governmental agencies, and other organizations; 
(iii) to reduce cybersecurity risks to United States 
and allied critical infrastructure; 
(iv) to improve allies’ and partners’ collaboration 
with the United States on cybersecurity issues, 
including information sharing, regulatory coordination 
and improvement, and joint investigatory and law 
enforcement operations related to cybercrime; and 
(v) to share best practices and advance proposals 
to strengthen civilian and private sector resiliency to 
threats and access to opportunities in cyberspace; and 
(B) reviewing the status of existing efforts in relevant 
multilateral fora, as appropriate, to obtain commitments 
on international norms regarding cyberspace; 
(3) a review of alternative concepts for international norms 
regarding cyberspace offered by foreign countries; 
(4) a detailed description, in consultation with the Office 
of the National Cyber Director and relevant Federal agencies, 
of new and evolving threats regarding cyberspace from foreign 
adversaries, state-sponsored actors, and non-state actors to—
H. R. 7776—1509 
(A) United States national security; 
(B) the Federal and private sector cyberspace infra-
structure of the United States; 
(C) intellectual property in the United States; and 
(D) the privacy and security of citizens of the United 
States; 
(5) a review of the policy tools available to the President 
to deter and de-escalate tensions with foreign countries, state- 
sponsored actors, and private actors regarding— 
(A) threats in cyberspace; 
(B) the degree to which such tools have been used; 
and 
(C) whether such tools have been effective deterrents; 
(6) a review of resources required to conduct activities 
to build responsible norms of international cyber behavior; 
(7) a review, in coordination with the Office of the National 
Cyber Director and the Office of Management and Budget, 
to determine whether the budgetary resources, technical exper-
tise, legal authorities, and personnel available to the Depart-
ment are adequate to achieve the actions and activities under-
taken by the Department to support the policy described in 
section 9501(a); 
(8) a review to determine whether the Department is prop-
erly organized and coordinated with other Federal agencies 
to achieve the objectives described in section 9501(b); and 
(9) a plan of action, developed in coordination with the 
Department of Defense and in consultation with other relevant 
Federal departments and agencies as the President may direct, 
with respect to the inclusion of cyber issues in mutual defense 
agreements. 
(c) FORM OF STRATEGY.— 
(1) PUBLIC AVAILABILITY.—The strategy required under sub-
section (a) shall be available to the public in unclassified form, 
including through publication in the Federal Register. 
(2) CLASSIFIED ANNEX.—The strategy required under sub-
section (a) may include a classified annex. 
(d) BRIEFING.—Not later than 30 days after the completion 
of the strategy required under subsection (a), the Secretary shall 
brief the Committee on Foreign Relations of the Senate, the Select 
Committee on Intelligence of the Senate, the Committee on Armed 
Services of the Senate, the Committee on Foreign Affairs of the 
House of Representatives, the Permanent Select Committee on 
Intelligence of the House of Representatives, and the Committee 
on Armed Services of the House of Representatives regarding the 
strategy, including any material contained in a classified annex. 
(e) UPDATES.—The strategy required under subsection (a) shall 
be updated— 
(1) not later than 90 days after any material change to 
United States policy described in such strategy; and 
(2) not later than 1 year after the inauguration of each 
new President. 
SEC. 9504. GOVERNMENT ACCOUNTABILITY OFFICE REPORT ON CYBER 
DIPLOMACY. 
Not later than 18 months after the date of the enactment 
of this Act, the Comptroller General of the United States shall
H. R. 7776—1510 
submit a report and provide a briefing to the appropriate congres-
sional committees that includes— 
(1) an assessment of the extent to which United States 
diplomatic processes and other efforts with foreign countries, 
including through multilateral fora, bilateral engagements, and 
negotiated cyberspace agreements, advance the full range of 
United States interests regarding cyberspace, including the 
policy described in section 9501(a); 
(2) an assessment of the Department’s organizational struc-
ture and approach to managing its diplomatic efforts to advance 
the full range of United States interests regarding cyberspace, 
including a review of— 
(A) the establishment of a Bureau within the Depart-
ment to lead the Department’s international cyber mission; 
(B) the current or proposed diplomatic mission, struc-
ture, staffing, funding, and activities of such Bureau; 
(C) how the establishment of such Bureau has impacted 
or is likely to impact the structure and organization of 
the Department; and 
(D) what challenges, if any, the Department has faced 
or will face in establishing such Bureau; and 
(3) any other matters that the Comptroller General deter-
mines to be relevant. 
SEC. 9505. REPORT ON DIPLOMATIC PROGRAMS TO DETECT AND 
RESPOND TO CYBER THREATS AGAINST ALLIES AND 
PARTNERS. 
Not later than 180 days after the date of the enactment of 
this Act, the Secretary, in coordination with the heads of other 
relevant Federal agencies, shall submit a report to the appropriate 
congressional committees that assesses the capabilities of the 
Department to provide civilian-led support for acute cyber incident 
response in ally and partner countries that includes— 
(1) a description and assessment of the Department’s 
coordination with cyber programs and operations of the Depart-
ment of Defense and the Department of Homeland Security; 
(2) recommendations on how to improve coordination and 
executive of Department involvement in programs or operations 
to support allies and partners in responding to acute cyber 
incidents; and 
(3) the budgetary resources, technical expertise, legal 
authorities, and personnel needed for the Department to formu-
late and implement the programs described in this section. 
SEC. 9506. CYBERSECURITY RECRUITMENT AND RETENTION. 
(a) SENSE
OF CONGRESS.—It is the sense of Congress that 
improving 
computer 
programming 
language 
proficiency 
will 
improve— 
(1) the cybersecurity effectiveness of the Department; and 
(2) the ability of foreign service officers to engage with 
foreign audiences on cybersecurity matters. 
(b) TECHNOLOGY TALENT ACQUISITION.— 
(1) ESTABLISHMENT.—The Secretary shall establish posi-
tions within the Bureau of Global Talent Management that 
are solely dedicated to the recruitment and retention of Depart-
ment personnel with backgrounds in cybersecurity, engineering, 
data science, application development, artificial intelligence,
H. R. 7776—1511 
critical and emerging technology, and technology and digital 
policy. 
(2) GOALS.—The goals of the positions described in para-
graph (1) shall be— 
(A) to fulfill the critical need of the Department to 
recruit and retain employees for cybersecurity, digital, and 
technology positions; 
(B) to actively recruit relevant candidates from aca-
demic institutions, the private sector, and related indus-
tries; 
(C) to work with the Office of Personnel Management 
and the United States Digital Service to develop and imple-
ment best strategies for recruiting and retaining technology 
talent; and 
(D) to inform and train supervisors at the Department 
on the use of the authorities listed in subsection (c)(1). 
(3) IMPLEMENTATION PLAN.—Not later than 180 days after 
the date of the enactment of this Act, the Secretary shall 
submit a plan to the appropriate congressional committees 
that describes how the objectives and goals set forth in para-
graphs (1) and (2) will be implemented. 
(4) AUTHORIZATION OF APPROPRIATIONS.—There is author-
ized to be appropriated $750,000 for each of the fiscal years 
2023 through 2027 to carry out this subsection. 
(c) ANNUAL REPORT ON HIRING AUTHORITIES.—Not later than 
1 year after the date of the enactment of this Act, and annually 
thereafter for the following 5 years, the Secretary shall submit 
a report to the appropriate congressional committees that includes— 
(1) a list of the hiring authorities available to the Depart-
ment to recruit and retain personnel with backgrounds in cyber-
security, engineering, data science, application development, 
artificial intelligence, critical and emerging technology, and 
technology and digital policy; 
(2) a list of which hiring authorities described in paragraph 
(1) have been used during the previous 5 years; 
(3) the number of employees in qualified positions hired, 
aggregated by position and grade level or pay band; 
(4) the number of employees who have been placed in 
qualified positions, aggregated by bureau and offices within 
the Department; 
(5) the rate of attrition of individuals who begin the hiring 
process and do not complete the process and a description 
of the reasons for such attrition; 
(6) the number of individuals who are interviewed by sub-
ject matter experts and the number of individuals who are 
not interviewed by subject matter experts; and 
(7) recommendations for— 
(A) reducing the attrition rate referred to in paragraph 
(5) by 5 percent each year; 
(B) additional hiring authorities needed to acquire 
needed technology talent; 
(C) hiring personnel to hold public trust positions until 
such personnel can obtain the necessary security clearance; 
and 
(D) informing and training supervisors within the 
Department on the use of the authorities listed in para-
graph (1).
H. R. 7776—1512 
(d) INCENTIVE PAY
FOR CYBERSECURITY PROFESSIONALS.—To 
increase the number of qualified candidates available to fulfill the 
cybersecurity needs of the Department, the Secretary shall— 
(1) include computer programming languages within the 
Recruitment Language Program; and 
(2) provide appropriate language incentive pay. 
(e) REPORT.—Not later than 1 year after the date of the enact-
ment of this Act, and annually thereafter for the following 5 years, 
the Secretary shall provide a list to the appropriate congressional 
committees that identifies— 
(1) the computer programming languages included within 
the Recruitment Language Program and the language incentive 
pay rate; and 
(2) the number of individuals benefitting from the inclusion 
of such computer programming languages in the Recruitment 
Language Program and language incentive pay. 
SEC. 9507. SHORT COURSE ON EMERGING TECHNOLOGIES FOR SENIOR 
OFFICIALS. 
(a) IN GENERAL.—Not later than 1 year after the date of the 
enactment of this Act, the Secretary shall develop and begin pro-
viding, for senior officials of the Department, a course addressing 
how the most recent and relevant technologies affect the activities 
of the Department. 
(b) THROUGHPUT OBJECTIVES.—The Secretary should ensure 
that— 
(1) during the first year that the course developed pursuant 
to subsection (a) is offered, not fewer than 20 percent of senior 
officials are certified as having passed such course; and 
(2) in each subsequent year, until the date on which 80 
percent of senior officials are certified as having passed such 
course, an additional 10 percent of senior officials are certified 
as having passed such course. 
SEC. 9508. ESTABLISHMENT AND EXPANSION OF REGIONAL TECH-
NOLOGY OFFICER PROGRAM. 
(a) REGIONAL TECHNOLOGY OFFICER PROGRAM.— 
(1) ESTABLISHMENT.—The Secretary shall establish a pro-
gram, which shall be known as the ‘‘Regional Technology Officer 
Program’’ (referred to in this section as the ‘‘Program’’). 
(2) GOALS.—The goals of the Program shall include the 
following: 
(A) Promoting United States leadership in technology 
abroad. 
(B) Working with partners to increase the deployment 
of critical and emerging technology in support of democratic 
values. 
(C) Shaping diplomatic agreements in regional and 
international fora with respect to critical and emerging 
technologies. 
(D) Building diplomatic capacity for handling critical 
and emerging technology issues. 
(E) Facilitating the role of critical and emerging tech-
nology in advancing the foreign policy objectives of the 
United States through engagement with research labs, 
incubators, and venture capitalists. 
(F) Maintaining the advantages of the United States 
with respect to critical and emerging technologies.
H. R. 7776—1513 
(b) IMPLEMENTATION PLAN.—Not later than 180 days after the 
date of the enactment of this Act, the Secretary shall submit an 
implementation plan to the appropriate congressional committees 
that outlines strategies for— 
(1) advancing the goals described in subsection (a)(2); 
(2) hiring Regional Technology Officers and increasing the 
competitiveness of the Program within the Foreign Service 
bidding process; 
(3) expanding the Program to include a minimum of 15 
Regional Technology Officers; and 
(4) assigning not fewer than 2 Regional Technology Officers 
to posts within— 
(A) each regional bureau of the Department; and 
(B) the Bureau of International Organization Affairs. 
(c) ANNUAL BRIEFING REQUIREMENT.—Not later than 180 days 
after the date of the enactment of this Act, and annually thereafter 
for the following 5 years, the Secretary shall brief the appropriate 
congressional committees regarding the status of the implementa-
tion plan required under subsection (b). 
(d) AUTHORIZATION OF APPROPRIATIONS.—There is authorized 
to be appropriated up to $25,000,000 for each of the fiscal years 
2023 through 2027 to carry out this section. 
SEC. 9509. VULNERABILITY DISCLOSURE POLICY AND BUG BOUNTY 
PROGRAM REPORT. 
(a) DEFINITIONS.—In this section: 
(1) BUG BOUNTY PROGRAM.—The term ‘‘bug bounty pro-
gram’’ means a program under which an approved individual, 
organization, or company is temporarily authorized to identify 
and report vulnerabilities of internet-facing information tech-
nology of the Department in exchange for compensation. 
(2) INFORMATION
TECHNOLOGY.—The term ‘‘information 
technology’’ has the meaning given such term in section 11101 
of title 40, United States Code. 
(b) VULNERABILITY DISCLOSURE POLICY.— 
(1) IN GENERAL.—Not later than 180 days after the date 
of the enactment of this Act, the Secretary shall design, estab-
lish, and make publicly known a Vulnerability Disclosure Policy 
(referred to in this section as the ‘‘VDP’’) to improve Department 
cybersecurity by— 
(A) creating Department policy and infrastructure to 
receive reports of and remediate discovered vulnerabilities 
in line with existing policies of the Office of Management 
and Budget and the Department of Homeland Security 
Binding Operational Directive 20–01 or any subsequent 
directive; and 
(B) providing a report on such policy and infrastructure 
to Congress. 
(2) ANNUAL REPORTS.—Not later than 180 days after the 
establishment of the VDP pursuant to paragraph (1), and 
annually thereafter for the following 5 years, the Secretary 
shall submit a report on the VDP to the Committee on Foreign 
Relations of the Senate, the Committee on Homeland Security 
and Governmental Affairs of the Senate, the Select Committee 
on Intelligence of the Senate, the Committee on Foreign Affairs 
of the House of Representatives, the Committee on Homeland 
Security of the House of Representatives, and the Permanent
H. R. 7776—1514 
Select Committee on Intelligence of the House of Representa-
tives that includes information relating to— 
(A) 
the 
number 
and 
severity 
of 
all 
security 
vulnerabilities reported; 
(B) the number of previously unidentified security 
vulnerabilities remediated as a result; 
(C) the current number of outstanding previously 
unidentified security vulnerabilities and Department of 
State remediation plans; 
(D) the average time between the reporting of security 
vulnerabilities and remediation of such vulnerabilities; 
(E) the resources, surge staffing, roles, and responsibil-
ities within the Department used to implement the VDP 
and complete security vulnerability remediation; 
(F) how the VDP identified vulnerabilities are incor-
porated 
into 
existing 
Department 
vulnerability 
prioritization and management processes; 
(G) any challenges in implementing the VDP and plans 
for expansion or contraction in the scope of the VDP across 
Department information systems; and 
(H) any other topic that the Secretary determines to 
be relevant. 
(c) BUG BOUNTY PROGRAM REPORT.— 
(1) IN GENERAL.—Not later than 180 days after the date 
of the enactment of this Act, the Secretary shall submit a 
report to Congress that describes any ongoing efforts by the 
Department or a third-party vendor under contract with the 
Department to establish or carry out a bug bounty program 
that identifies security vulnerabilities of internet-facing 
information technology of the Department. 
(2) REPORT.—Not later than 180 days after the date on 
which any bug bounty program is established, the Secretary 
shall submit a report to the Committee on Foreign Relations 
of the Senate, the Committee on Homeland Security and 
Governmental Affairs of the Senate, the Committee on Foreign 
Affairs of the House of Representatives, and the Committee 
on Homeland Security of the House of Representatives 
regarding such program, including information relating to— 
(A) the number of approved individuals, organizations, 
or companies involved in such program, disaggregated by 
the number of approved individuals, organizations, or 
companies that— 
(i) registered; 
(ii) were approved; 
(iii) submitted security vulnerabilities; and 
(iv) received compensation; 
(B) 
the 
number 
and 
severity 
of 
all 
security 
vulnerabilities reported as part of such program; 
(C) the number of previously unidentified security 
vulnerabilities remediated as a result of such program; 
(D) the current number of outstanding previously 
unidentified 
security 
vulnerabilities 
and 
Department 
remediation plans for such outstanding vulnerabilities; 
(E) the average length of time between the reporting 
of security vulnerabilities and remediation of such 
vulnerabilities;
H. R. 7776—1515 
(F) the types of compensation provided under such 
program; 
(G) the lessons learned from such program; 
(H) the public accessibility of contact information for 
the Department regarding the bug bounty program; 
(I) the incorporation of bug bounty program identified 
vulnerabilities into existing Department vulnerability 
prioritization and management processes; and 
(J) any challenges in implementing the bug bounty 
program and plans for expansion or contraction in the 
scope of the bug bounty program across Department 
information systems. 
TITLE XCVI—PUBLIC DIPLOMACY 
SEC. 9601. UNITED STATES PARTICIPATION IN INTERNATIONAL FAIRS 
AND EXPOSITIONS. 
(a) DEFINED TERM.—In this section, the term ‘‘appropriate 
committees of Congress’’ means— 
(1) the Committee on Foreign Relations of the Senate; 
(2) the Committee on Appropriations of the Senate; 
(3) the Committee on Foreign Affairs of the House of Rep-
resentatives; and 
(4) the Committee on Appropriations of the House of Rep-
resentatives. 
(b) AUTHORIZATION OF APPROPRIATIONS.—Consistent with sec-
tion 204 of the Admiral James W. Nance and Meg Donovan Foreign 
Relations Authorization Act, Fiscal Years 2000 and 2001 (22 U.S.C. 
2452b), subject to subsections (c) and (d), there is authorized to 
be appropriated to the Department up to $25,000,000 for each 
of the fiscal years 2023 and 2024 for United States participation 
in international fairs and expositions abroad, including for the 
construction and operation of a United States pavilion at Expo 
2025 Osaka. 
(c) 
COST-SHARE
REQUIREMENT.—Amounts 
made 
available 
pursuant to subsection (b) to the Department for a United States 
pavilion or other major exhibit at an international fair or exposition 
abroad shall be made available on a cost-matching basis, to the 
maximum extent practicable, from sources other than the United 
States Government. 
(d) NOTIFICATION.— 
(1) IN GENERAL.—No funds made available pursuant to 
subsection (b) to the Department for a United States pavilion 
or other major exhibit at an international fair or exposition 
abroad may be obligated until at least 15 days after the appro-
priate committees of Congress have been notified of such 
intended obligation. 
(2) MATTERS
TO
BE
INCLUDED.—Each notification under 
paragraph (1) shall include— 
(A) a description of the source of such funds, including 
any funds reprogrammed or transferred by the Department 
to be made available for such pavilion or other major 
exhibit abroad; 
(B) an estimate of the amount of investment such 
pavilion or other major exhibit abroad could bring to the 
United States; and
H. R. 7776—1516 
(C) a description of the strategy of the Department 
to identify and obtain such matching funds from sources 
other than the United States Government, in accordance 
with subsection (c). 
(e) FINAL REPORT.—Not later than 180 days after the date 
on which a United States pavilion or other major exhibit abroad 
is opened at an international fair or exposition in accordance with 
this section, the Secretary shall submit a report to the appropriate 
committees of Congress that includes— 
(1) the number of United States businesses that partici-
pated in such pavilion or other major exhibit; and 
(2) the dollar amount and source of any matching funds 
obtained by the Department. 
SEC. 9602. UNDER SECRETARY FOR PUBLIC DIPLOMACY AND PUBLIC 
AFFAIRS. 
(a) FINANCIAL AND HUMAN RESOURCES COORDINATION.—Section 
1(b)(3) of the State Department Basic Authorities Act of 1956 (22 
U.S.C. 2651a) is amended— 
(1) in subparagraph (D), by striking ‘‘and’’ at the end; 
(2) in subparagraph (E), by striking the period at the 
end and inserting ‘‘; and’’; and 
(3) by adding at the end the following: 
‘‘(F) coordinate the allocation and management of the 
financial and human resources for public diplomacy, 
including for— 
‘‘(i) the Bureau of Educational and Cultural 
Affairs; 
‘‘(ii) the Bureau of Global Public Affairs; 
‘‘(iii) the Office of Policy, Planning, and Resources 
for Public Diplomacy and Public Affairs; 
‘‘(iv) the Global Engagement Center; and 
‘‘(v) the public diplomacy functions within the 
regional and functional bureaus.’’. 
(b) SENSE OF CONGRESS ON THE IMPORTANCE OF FILLING THE 
POSITION OF UNDER SECRETARY FOR PUBLIC DIPLOMACY AND PUBLIC 
AFFAIRS.—It is the sense of Congress that since a vacancy in the 
position of Under Secretary of State for Public Diplomacy and 
Public Affairs is detrimental to the national security interests of 
the United States, the President should expeditiously nominate 
a qualified individual to such position whenever such vacancy occurs 
to ensure that the bureaus reporting to such position are able 
to fulfill their mission of— 
(1) expanding and strengthening relationships between the 
people of the United States and citizens of other countries; 
and 
(2) engaging, informing, and understanding the perspec-
tives of foreign audiences. 
SEC. 9603. REPORT ON PUBLIC DIPLOMACY. 
Not later than 120 days after the date of the enactment of 
this Act, the Secretary shall submit to the appropriate congressional 
committees a report that includes— 
(1) an evaluation of the May 2019 merger of the Bureau 
of Public Affairs and the Bureau of International Information 
Programs to form the Bureau of Global Public Affairs with 
respect to—
H. R. 7776—1517 
(A) the efficacy of the current configuration of the 
bureaus reporting to the Under Secretary of State for Public 
Diplomacy and Public Affairs in achieving the mission of 
the Department; 
(B) the metrics before and after such merger, including 
personnel data, disaggregated by position and location, con-
tent production, opinion polling, program evaluations, and 
media appearances; 
(C) the results of a survey of public diplomacy practi-
tioners to determine their opinion of the efficacy of such 
merger and any adjustments that still need to be made; 
and 
(D) a plan for evaluating and monitoring, not less 
frequently than once every 2 years, the programs, activities, 
messaging, professional development efforts, and structure 
of the Bureau of Global Public Affairs, and submitting 
a summary of each such evaluation to the appropriate 
congressional committees; and 
(2) a review of recent outside recommendations for modern-
izing diplomacy at the Department with respect to public diplo-
macy efforts, including— 
(A) efforts in each of the bureaus reporting to the 
Under Secretary of State for Public Diplomacy and Public 
Affairs to address issues of diversity and inclusion in their 
work, structure, data collection, programming, and per-
sonnel, including any collaboration with the Chief Diversity 
and Inclusion Officer; 
(B) proposals to collaborate with think tanks and aca-
demic institutions working on public diplomacy issues to 
implement recent outside recommendations; and 
(C) additional authorizations and appropriations nec-
essary to implement such recommendations. 
SEC. 
9604. 
PROMOTING 
PEACE, 
EDUCATION, 
AND 
CULTURAL 
EXCHANGE THROUGH MUSIC DIPLOMACY. 
(a) SENSE OF CONGRESS.—It is the sense of Congress that— 
(1) music is an important conveyer of culture and can 
be used to communicate values and build understanding 
between communities; 
(2) musical artists play a valuable role in cross-cultural 
exchange, and their works and performances can promote 
peacebuilding and conflict resolution efforts; 
(3) the music industry in the United States has made 
important contributions to American society and culture, and 
musicians and industry professionals in the United States can 
offer valuable expertise to young musical artists around the 
world; and 
(4) the United States Government should promote exchange 
programs, especially programs that leverage the expertise and 
resources of the private sector, that give young musical artists 
from around the world the chance— 
(A) to improve their skills; 
(B) share ideas; 
(C) learn about American culture; and 
(D) develop the necessary skills to support conflict 
resolution and peacebuilding efforts in their communities 
and broader societies.
H. R. 7776—1518 
(b) AUTHORIZATION OF MUSIC-RELATED EXCHANGE PROGRAMS.— 
The Mutual Educational and Cultural Exchange Act of 1961 (22 
U.S.C. 2451 et seq.; commonly known as the Fulbright-Hays Act) 
is amended— 
(1) in section 102(a)(2) (22 U.S.C. 2452(a)(2))— 
(A) in clause (iii), by inserting ‘‘and’’ at the end; and 
(B) in clause (iv)— 
(i) by inserting ‘‘, including in coordination and 
consultation with the private sector,’’ before ‘‘similar’’; 
and 
(ii) by striking the period at the end and inserting 
‘‘; and’’; and 
(2) in section 112(a) (22 U.S.C. 2460(a))— 
(A) in paragraph (8), by striking ‘‘and’’ at the end; 
(B) in paragraph (9), by striking the period at the 
end and inserting ‘‘; and’’; and 
(C) by adding at the end the following: 
‘‘(10) exchange programs, including in coordination and 
consultation with the private sector, focused on music and 
the performing arts that provide opportunities for foreign 
nationals and Americans to build cross-cultural understanding 
and advance peace abroad.’’. 
(c) PRIVATE SECTOR PARTNERSHIPS.— 
(1) IN GENERAL.—The Secretary should continue— 
(A) to partner with the private sector in support of 
music-related exchange programs implemented by the 
Bureau of Educational and Cultural Affairs (referred to 
in this section as the ‘‘ECA’’); 
(B) to leverage private sector expertise in developing 
and implementing such programs; and 
(C) to expand networking and mentorship opportunities 
for program participants. 
(2) AUTHORIZATION OF CERTAIN PARTNERSHIPS.—The Sec-
retary is authorized to partner with the private sector to recog-
nize musicians— 
(A) whose works or performances have advanced peace 
abroad; and 
(B) who could contribute to networking and mentorship 
opportunities for participants of music-related exchange 
programs implemented by ECA. 
(d) STRATEGY.— 
(1) IN
GENERAL.—Not later than 1 year after the date 
of the enactment of this Act, the Secretary shall submit a 
strategy to the appropriate congressional committees, the Com-
mittee on Appropriations of the Senate, and the Committee 
on Appropriations of the House of Representatives for 
advancing United States foreign policy goals, including conflict 
resolution and peacebuilding efforts, through music-related 
exchange programs implemented by ECA. Such strategy shall 
include— 
(A) a description of clearly defined annual goals, tar-
gets, and planned outcomes for each music-related 
exchange program; 
(B) a plan to monitor and evaluate each music-related 
exchange program and progress made toward achieving 
such goals, targets, and planned outcomes, including meas-
urable benchmarks;