•HRES 575 RH 
our allies to embrace the recommendations of ‘‘The 
Prague Proposals’’ for their 5G infrastructure. 
SEC. 2. PRAGUE PROPOSALS. 
The text of ‘‘The Prague Proposals’’ is as follows: 
(1) ‘‘POLICY’’.— 
(A) ‘‘Communication networks and services 
should be designed with resilience and security 
in mind. They should be built and maintained 
using international, open, consensus-based stand-
ards and risk-informed cybersecurity best prac-
tices. Clear globally interoperable cyber security 
guidance that would support cyber security 
products and services in increasing resilience of 
all stakeholders should be promoted.’’. 
(B) ‘‘Every country is free, in accordance 
with international law, to set its own national 
security and law enforcement requirements, 
which should respect privacy and adhere to laws 
protecting information from improper collection 
and misuse.’’. 
(C) ‘‘Laws and policies governing networks 
and connectivity services should be guided by the 
principles of transparency and equitability, tak-
ing into account the global economy and inter-
VerDate Sep 11 2014 
00:31 Jan 08, 2020
Jkt 099200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6203
E:\BILLS\HR575.RH
HR575
pamtmann on DSKBC07HB2PROD with BILLS
•HRES 575 RH 
operable rules, with sufficient oversight and re-
spect for the rule of law.’’. 
(D) ‘‘The overall risk of influence on a sup-
plier by a third country should be taken into ac-
count, notably in relation to its model of govern-
ance, the absence of cooperation agreements on 
security, or similar arrangements, such as ade-
quacy decisions, as regards data protection, or 
whether this country is a party to multilateral, 
international or bilateral agreements on cyberse-
curity, the fight against cybercrime, or data pro-
tection.’’. 
(2) ‘‘TECHNOLOGY’’.— 
(A) ‘‘Stakeholders should regularly conduct 
vulnerability assessments and risk mitigation 
within all components and network systems, 
prior to product release and during system oper-
ation, and promote a culture of find/fix/patch to 
mitigate identified vulnerabilities and rapidly 
deploy fixes or patches.’’. 
(B) ‘‘Risk assessments of supplier’s products 
should take into account all relevant factors, in-
cluding applicable legal environment and other 
aspects of supplier’s ecosystem, as these factors 
VerDate Sep 11 2014 
00:31 Jan 08, 2020
Jkt 099200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6203
E:\BILLS\HR575.RH
HR575
pamtmann on DSKBC07HB2PROD with BILLS
•HRES 575 RH 
may be relevant to stakeholders’ efforts to main-
tain the highest possible level of cyber security.’’. 
(C) ‘‘When building up resilience and secu-
rity, it should be taken into consideration that 
malicious cyber activities do not always require 
the exploitation of a technical vulnerability, e.g. 
in the event of insider attack.’’. 
(D) ‘‘In order to increase the benefits of 
global communication, States should adopt poli-
cies to enable efficient and secure network data 
flows.’’. 
(E) ‘‘Stakeholders should take into consider-
ation technological changes accompanying 5G 
networks roll out, e.g. use of edge computing and 
software 
defined 
network/network 
function 
virtualization, and its impact on overall security 
of communication channels.’’. 
(F) ‘‘Customer—whether the government, 
operator, or manufacturer—must be able to be 
informed about the origin and pedigree of com-
ponents and software that affect the security level 
of the product or service, according to state of art 
and relevant commercial and technical practices, 
including transparency of maintenance, updates, 
and remediation of the products and services.’’. 
VerDate Sep 11 2014 
00:31 Jan 08, 2020
Jkt 099200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6203
E:\BILLS\HR575.RH
HR575
pamtmann on DSKBC07HB2PROD with BILLS
•HRES 575 RH 
(3) ‘‘ECONOMY’’.— 
(A) ‘‘A diverse and vibrant communications 
equipment market and supply chain are essen-
tial for security and economic resilience.’’. 
(B) ‘‘Robust investment in research and de-
velopment benefits the global economy and tech-
nological advancement and is a way to poten-
tially increase diversity of technological solutions 
with positive effects on security of communica-
tion networks.’’. 
(C) ‘‘Communication networks and network 
services should be financed openly and trans-
parently using standard best practices in pro-
curement, investment, and contracting.’’. 
(D) ‘‘State-sponsored incentives, subsidies, 
or financing of 5G communication networks and 
service providers should respect principles of 
fairness, be commercially reasonable, conducted 
openly and transparently, based on open market 
competitive principles, while taking into account 
trade obligations.’’. 
(E) ‘‘Effective oversight on key financial 
and investment instruments influencing tele-
communication network development is crit-
ical.’’. 
VerDate Sep 11 2014 
00:31 Jan 08, 2020
Jkt 099200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6203
E:\BILLS\HR575.RH
HR575
pamtmann on DSKBC07HB2PROD with BILLS
•HRES 575 RH 
(F) ‘‘Communication networks and network 
service providers should have transparent owner-
ship, partnerships, and corporate governance 
structures.’’. 
(4) ‘‘SECURITY, PRIVACY, AND RESILIENCE’’.— 
(A) ‘‘All stakeholders including industry 
should work together to promote security and re-
silience of national critical infrastructure net-
works, systems, and connected devices.’’. 
(B) ‘‘Sharing experience and best practices, 
including assistance, as appropriate, with miti-
gation, investigation, response, and recovery 
from network attacks, compromises, or disrup-
tions should be promoted.’’. 
(C) ‘‘Security and risk assessments of ven-
dors and network technologies should take into 
account rule of law, security environment, ven-
dor malfeasance, and compliance with open, 
interoperable, secure standards, and industry 
best practices to promote a vibrant and robust 
cyber security supply of products and services to 
deal with the rising challenges.’’. 
(D) ‘‘Risk management framework in a 
manner that respects data protection principles 
VerDate Sep 11 2014 
00:31 Jan 08, 2020
Jkt 099200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6203
E:\BILLS\HR575.RH
HR575
pamtmann on DSKBC07HB2PROD with BILLS