I 
118TH CONGRESS 
1ST SESSION H. R. 6256 
To require that the Chief Information Officer of the Bureau of Information 
Resources submit an annual report that lists all the information tech-
nology procurement awards and contracts that were awarded over 
$10,000,000. 
IN THE HOUSE OF REPRESENTATIVES 
NOVEMBER 7, 2023 
Mr. BAIRD introduced the following bill; which was referred to the Committee 
on Foreign Affairs 
A BILL 
To require that the Chief Information Officer of the Bureau 
of Information Resources submit an annual report that 
lists all the information technology procurement awards 
and contracts that were awarded over $10,000,000. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. CYBERSECURITY PRIORITIZATION IN INFOR-
MATION TECHNOLOGY PROCUREMENT. 
(a) SENSE OF CONGRESS.—It is the sense of Con-
gress that— 
(1) the Department has not sufficiently empha-
sized cybersecurity in its operations or in its pro-
VerDate Sep 11 2014 
01:44 Dec 01, 2023
Jkt 049200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H6256.IH
H6256
pbinns on DSKJLVW7X2PROD with $$_JOB
curement of information technology, and that these 
shortcomings have contributed to numerous cyberse-
curity incidents at the Department; and 
(2) the Department should prioritize, to the 
highest level and to a greater extent than it already 
does, the minimization of cybersecurity risks in its 
procurement of information technology. 
(b) ANNUAL REPORT.—The Chief Information Offi-
cer in the Bureau of Information Resources Management 
shall submit to the appropriate congressional committees 
an annual report which— 
(1) describes all Department information tech-
nology procurement contracts awarded in the year 
prior to the issuance of the report, including the 
name of the awardee and the information technology 
they were contracted to procure; and 
(2) for all Department information technology 
procurement contracts awarded in the year prior to 
the issuance of the report with contract price exceed-
ing $10,000,000— 
(A) details the cybersecurity risks which 
have been or will be created by the information 
technology procured or intended to be procured 
under the contract, including the Department’s 
strategy for mitigating these risks; 
VerDate Sep 11 2014 
01:44 Dec 01, 2023
Jkt 049200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H6256.IH
H6256
pbinns on DSKJLVW7X2PROD with $$_JOB
(B) justifies the Department’s choice to 
award the contract to its particular awardee in 
light of those cybersecurity risks; and 
(C) justifies the Department’s choice to 
procure such information technology in light of 
those cybersecurity risks. 
(c) DEFINITIONS.—In this Act: 
(1) APPROPRIATE
CONGRESSIONAL
COMMIT-
TEES.—The term ‘‘appropriate congressional com-
mittees’’ means the House Committee on Foreign 
Affairs and the Senate Committee on Foreign Rela-
tions. 
(2) CYBERSECURITY INCIDENT.—The term ‘‘cy-
bersecurity incident’’ has the meaning given the 
term ‘‘incident’’ in section 3552 of title 44, United 
States Code. 
(3) CYBERSECURITY RISK.—The term ‘‘cyberse-
curity risk’’ has the meaning given that term in sec-
tion 2200 of the Homeland Security Act of 2002 (6 
U.S.C. 650), except that it refers exclusively to cy-
bersecurity risks to the Department’s information 
and information systems. 
(4) DEPARTMENT.—The term ‘‘Department’’ 
means the United States Department of State. 
VerDate Sep 11 2014 
01:44 Dec 01, 2023
Jkt 049200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H6256.IH
H6256
pbinns on DSKJLVW7X2PROD with $$_JOB
(5) INFORMATION SYSTEM.—The term ‘‘infor-
mation system’’ has the meaning given that term in 
section 3502 of title 44, United States Code. 
(6) INFORMATION
TECHNOLOGY.—The term 
‘‘information technology’’ has the meaning given 
that term in section 11101 of title 40, United States 
Code. 
Æ 
VerDate Sep 11 2014 
01:44 Dec 01, 2023
Jkt 049200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6301
E:\BILLS\H6256.IH
H6256
pbinns on DSKJLVW7X2PROD with $$_JOB