II 118th CONGRESS 1st Session S. 2871 IN THE SENATE OF THE UNITED STATES September 20, 2023 Mr. Daines (for himself and Ms. Rosen ) introduced the following bill; which was read twice and referred to the Committee on Homeland Security and Governmental Affairs A BILL To advance Federal Government innovation through the implementation and use of multi-cloud computing software technology, and for other purposes.

1. Short title This Act may be cited as the Multi-Cloud Innovation and Advancement Act of 2023 . 2. Definitions In this Act: (1) Agency The term agency has the meaning given the term in section 3502 of title 44, United States Code. (2) Cloud computing The term cloud computing has the meaning given the term in Special Publication 800–145 of the National Institute of Standards and Technology, or any successor document. (3) Comptroller General The term Comptroller General means the Comptroller General of the United States. (4) Director The term Director means the Director of the Office of Management and Budget. (5) Information and communications technology The term information and communications technology — (A) has the meaning given the term in subpart 2.101 of the Federal Acquisition Regulation, or any successor regulation; and (B) includes associated services. (6) Multi-cloud technology The term multi-cloud technology means architecture and services that allow for data, application, and program portability, usability, and interoperability between infrastructure, platforms, and hosted applications of multiple cloud computing vendors and between public, private, and edge cloud environments in a manner that securely delivers operational and management consistency, comprehensive visibility, and resiliency. (7) Relevant committees of Congress The term relevant committees of Congress means the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Oversight and Accountability of the House of Representatives. 3. Use of multi-cloud technology (a) In general Not later than 1 year after the date of enactment of this Act, the Director, in consultation with the Administrator of General Services, the Director of the National Institute of Standards and Technology, the Secretary of Homeland Security, the Administrator of the United States Digital Service, and the Administrator of the Office of Electronic Government, shall— (1) identify and evaluate any impediments to the adoption of multi-cloud technology by agencies; (2) identify best practices for how agencies can implement multi-cloud technology to allow for data portability and interoperability across multiple cloud computing vendors; (3) evaluate the adoption by agencies of cybersecurity frameworks to support multi-cloud technology; and (4) develop written guidance for agencies based on the results of the identification described in paragraph (2) that— (A) describes how agencies should use multi-cloud technology to allow for applications, data, and programs to be portable and interoperable between public, private, and edge cloud environments; and (B) outlines a roadmap for the implementation of multi-cloud technology across agencies not later than January 1, 2025. (b) Briefing Not later than 1 year after the date of enactment of this Act, the Director shall submit to the relevant committees of Congress— (1) a copy of the written guidance developed under subsection (a)(4); (2) a briefing on the implementation of multi-cloud technology by agencies; and (3) any recommendations relating to the expansion or extension of the implementation described in paragraph (2). 4. Workforce development study and technical capabilities assessment (a) In general Not later than 1 year after the date of enactment of this Act, the Comptroller General shall submit to Congress and make publicly available a report that— (1) assesses the state of the digital skills and expertise gap within the Federal workforce relating to information and communications technology, with particular attention to the skills and expertise gap relating to cloud computing and multi-cloud technology; (2) assesses the capability of the Federal acquisition workforce to effectively research, solicit, evaluate, acquire, and manage multi-cloud technology from vendors, with particular attention to flexible or modular contracting practices that facilitate the inherently complex and dynamic nature of multi-cloud technology procurement; (3) estimates any costs associated with additional Federal workforce training as a result of the increased adoption of multi-cloud technologies; and (4) includes any recommendations to address any gap identified as a result of the assessment described in paragraph (1) relating to— (A) Federal workforce development activities, including training, certifications, staffing levels, and partnerships; and (B) policies and hiring practices for agencies. (b) Technical assessment Not later than 1 year after the date of enactment of this Act, the Comptroller General shall submit to Congress and make publicly available a report that— (1) assesses the technical capabilities of existing agency networks to support multi-cloud technology; (2) evaluates any technical capability impediments of agencies that delay the adoption of multi-cloud technology; and (3) includes any recommendations relating to policies and best practices for agencies to address any impediments identified as a result of the assessment described in paragraph (1) and the evaluation described in paragraph (2). 5. Report to Congress Not later than 2 years after the date of enactment of this Act, the Comptroller General shall submit to Congress and make publicly available a report assessing how agencies have implemented the guidance developed under section 3(a)(4) to deploy and secure multi-cloud technology architecture that includes multiple cloud computing software vendors.