DHS Software Supply Chain Risk Management Act of 2021

Bill: 117-hr-4611
Sponsor: Rep. Torres, Ritchie [D-NY-15]
Introduced: 2021-07-21 in the House
Policy area: Government Operations and Politics
Subjects: Administrative law and regulatory procedures
Computer security and identity theft
Computers and information technology
Congressional oversight
Department of Homeland Security
Government information and archives
Government studies and investigations
Public contracts and procurement

Summary:
action_date: 2021-07-21
text: 

DHS Software Supply Chain Risk Management Act of 2021
 
 
This bill requires the Management Directorate of the Department of Homeland Security (DHS) to issue guidance regarding new and existing contracts relating to the procurement of information and communications technology or services.
 
The bill requires contractors to submit to DHS a bill of materials, a certification that each item in the bill of materials is free from certain security vulnerabilities, a notification of any identified vulnerability, and a plan to mitigate any identified vulnerability.

action_date: 2021-09-14
text: 

DHS Software Supply Chain Risk Management Act of 2021
 
 
This bill requires the Management Directorate of the Department of Homeland Security (DHS) to issue guidance regarding new and existing contracts relating to the procurement of information and communications technology or services.
 
The bill requires contractors to submit to DHS a bill of materials, a certification that each item in the bill of materials is free from certain security vulnerabilities or defects affecting the security of the end product or service, a notification of any identified vulnerability or defect, and a plan to mitigate, repair, or resolve any identified vulnerability or defect.
 
The Government Accountability Office must report to specified congressional committees with (1) a review of this bill's implementation; (2) information regarding DHS engagement with industry; (3) an assessment of how guidance issued pursuant to this bill complies with Executive Order 14208, relating to improving the nation's cybersecurity; and (4) any recommendations related to improving the supply chain for covered contracts.

action_date: 2021-10-20
text: 

DHS Software Supply Chain Risk Management Act of 2021
 
 
This bill requires the Management Directorate of the Department of Homeland Security (DHS) to issue guidance regarding new and existing contracts relating to the procurement of information and communications technology or services.
 
The bill requires contractors to submit to DHS a bill of materials, a certification that each item in the bill of materials is free from certain security vulnerabilities or defects affecting the security of the end product or service, a notification of any identified vulnerability or defect, and a plan to mitigate, repair, or resolve any identified vulnerability or defect.
 
The Government Accountability Office must report to specified congressional committees with (1) a review of this bill's implementation; (2) information regarding DHS engagement with industry; (3) an assessment of how guidance issued pursuant to this bill complies with Executive Order 14208, relating to improving the nation's cybersecurity; and (4) any recommendations related to improving the supply chain for covered contracts. 


Legislative actions:
action_date: 2021-10-21
text: Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
action_date: 2021-10-20
text: Motion to reconsider laid on the table Agreed to without objection.
action_date: 2021-10-20
text: On motion to suspend the rules and pass the bill, as amended Agreed to by the Yeas and Nays: (2/3 required): 412 - 2 (Roll no. 319). (text: CR 9/29/2021 H5535)
action_date: 2021-10-20
text: Passed/agreed to in House: On motion to suspend the rules and pass the bill, as amended Agreed to by the Yeas and Nays: (2/3 required): 412 - 2 (Roll no. 319).(text: CR 9/29/2021 H5535)
action_date: 2021-10-20
text: Considered as unfinished business. (consideration: CR H5698-5699)
action_date: 2021-09-29
text: At the conclusion of debate, the Yeas and Nays were demanded and ordered. Pursuant to the provisions of clause 8, rule XX, the Chair announced that further proceedings on the motion would be postponed.
action_date: 2021-09-29
text: DEBATE - The House proceeded with forty minutes of debate on H.R. 4611.
action_date: 2021-09-29
text: Considered under suspension of the rules. (consideration: CR H5535-5536)
action_date: 2021-09-29
text: Mr. Thompson (MS) moved to suspend the rules and pass the bill, as amended.
action_date: 2021-09-14
text: Placed on the Union Calendar, Calendar No. 85.
action_date: 2021-09-14
text: Reported (Amended) by the Committee on Homeland Security. H. Rept. 117-120.
action_date: 2021-09-14
text: Reported (Amended) by the Committee on Homeland Security. H. Rept. 117-120.
action_date: 2021-07-28
text: Ordered to be Reported (Amended) by Voice Vote.
action_date: 2021-07-28
text: Committee Consideration and Mark-up Session Held.
action_date: 2021-07-28
text: Subcommittee on Oversight, Management, and Accountability Discharged.
action_date: 2021-07-22
text: Referred to the Subcommittee on Oversight, Management, and Accountability.
action_date: 2021-07-21
text: Referred to the House Committee on Homeland Security.
action_date: 2021-07-21
text: Introduced in House
action_date: 2021-07-21
text: Introduced in House