Supply Chain Security Training Act of 2021

Bill: 117-s-2201
Sponsor: full_name: Sen. Peters, Gary C. [D-MI]
Introduced: 2021-06-23
Policy area: Government Operations and Politics
Subjects: Computer security and identity theft

Computers and information technology

Congressional oversight

Employment and training programs

Federal officials

Intelligence activities, surveillance, classified information

Public contracts and procurement

Telephone and wireless communication
Latest action: action_date: 2022-06-16
text: Became Public Law No: 117-145.

Summaries:
action_date: 2021-06-23
action_desc: Introduced in Senate
text: <p><strong>Supply Chain Security Training Act of 2021</strong></p> <p>This bill requires the Federal Acquisition Institute to develop a training program for officials with supply chain risk management responsibilities at executive agencies.</p> <p>The program shall be designed to prepare such personnel to perform supply chain risk management activities and identify and mitigate supply chain security threats that arise throughout the acquisition life cycle, including for the acquisition of information and communications technology. </p> <p>The Office of Management and Budget shall promulgate guidance to federal agencies requiring executive agency adoption and use of the program.</p>

action_date: 2021-10-26
action_desc: Reported to Senate
text: <p><strong>Supply Chain Security Training Act of 2021</strong></p> <p>This bill requires the Federal Acquisition Institute to develop a training program for officials with supply chain risk management responsibilities at federal agencies (defined to include the legislative and judicial branches, as well as the executive branch, of the federal government).</p> <p>The program shall be designed to prepare such personnel to perform supply chain risk management activities and identify and mitigate supply chain security threats that arise throughout the acquisition life cycle, including for the acquisition of information and communications technology. </p> <p>The Office of Management and Budget shall (1) promulgate guidance to federal agencies requiring executive agency adoption and use of the program, and (2) make the guidance available to federal agencies of the legislative and judicial branches.</p>

action_date: 2022-01-11
action_desc: Passed Senate
text: <p><strong>Supply Chain Security Training Act of 2021</strong></p> <p>This bill requires the Federal Acquisition Institute to develop a training program for officials with supply chain risk management responsibilities at federal agencies (defined to include the legislative and judicial branches, as well as the executive branch, of the federal government).</p> <p>The program shall be designed to prepare such personnel to perform supply chain risk management activities and identify and mitigate supply chain security risks that arise throughout the acquisition life cycle, including for the acquisition of information and communications technology. </p> <p>The Office of Management and Budget shall (1) promulgate guidance to federal agencies requiring executive agency adoption and use of the program, and (2) make the guidance available to federal agencies of the legislative and judicial branches.</p>

action_date: 2022-05-10
action_desc: Passed House
text: <p><strong>Supply Chain Security Training Act of 2021</strong></p> <p>This bill requires the Federal Acquisition Institute to develop a training program for officials with supply chain risk management responsibilities at federal agencies (defined to include the legislative and judicial branches, as well as the executive branch, of the federal government).</p> <p>The program shall be designed to prepare such personnel to perform supply chain risk management activities and identify and mitigate supply chain security risks that arise throughout the acquisition life cycle, including for the acquisition of information and communications technology. </p> <p>The Office of Management and Budget shall (1) promulgate guidance to federal agencies requiring executive agency adoption and use of the program, and (2) make the guidance available to federal agencies of the legislative and judicial branches.</p>

action_date: 2022-06-16
action_desc: Public Law
text: <p><strong>Supply Chain Security Training Act of 2021</strong></p> <p>This bill requires the Federal Acquisition Institute to develop a training program for officials with supply chain risk management responsibilities at federal agencies (defined to include the legislative and judicial branches, as well as the executive branch, of the federal government).</p> <p>The program shall be designed to prepare such personnel to perform supply chain risk management activities and identify and mitigate supply chain security risks that arise throughout the acquisition life cycle, including for the acquisition of information and communications technology. </p> <p>The Office of Management and Budget shall (1) promulgate guidance to federal agencies requiring executive agency adoption and use of the program, and (2) make the guidance available to federal agencies of the legislative and judicial branches.</p>

tv_txt: II 117th CONGRESS 1st Session S. 2201 IN THE SENATE OF THE UNITED STATES June 23, 2021 Mr. Peters (for himself and Mr. Johnson ) introduced the following bill; which was read twice and referred to the Committee on Homeland Security and Governmental Affairs A BILL To manage supply chain risk through counterintelligence training, and for other purposes.

1. Short title This Act may be cited as the Supply Chain Security Training Act of 2021 . 2. Training program to manage supply chain risk (a) In general Not later than 180 days after the date of the enactment of this Act, the Administrator of General Services, through the Federal Acquisition Institute, shall develop a training program for officials with supply chain risk management responsibilities at executive agencies. (b) Content The training program shall be designed to prepare such personnel to perform supply chain risk management activities and identify and mitigate supply chain security threats that arise throughout the acquisition lifecycle, including for the acquisition of information and communications technology. The training program shall— (1) include, considering the protection of classified and other sensitive information, information on current, specific supply chain security threats; and (2) be updated as determined to be necessary by the Administrator. (c) Coordination and consultation In developing the training program, the Administrator shall— (1) coordinate with the Federal Acquisition Security Council, the Secretary of Homeland Security, and the Director of the Office of Personnel Management; and (2) consult with the Director of the Department of Defense’s Defense Acquisition University and the Director of National Intelligence. (d) Guidance Not later than 180 days after the training program is developed under subsection (a), the Director of the Office of Management and Budget shall promulgate guidance to Federal agencies requiring executive agency adoption and use of the training program. Such guidance shall— (1) allow executive agencies to incorporate the training program into existing agency training programs; and (2) provide guidance on how to identify executive agency officials with supply chain risk management responsibilities. 3. Reports on implementation of program Not later than 180 days after the completion of the first course, and annually thereafter for the next three years, the Administrator of General Services shall submit to the appropriate congressional committees and leadership a report on implementation of the training program required under section 2. 4. Definitions In this Act: (1) Appropriate congressional committees and leadership The term appropriate congressional committees means— (A) the Committee on Homeland Security and Governmental Affairs and the Committee on Armed Services of the Senate; and (B) the Committee on Oversight and Reform and the Committee on Armed Services of the House of Representatives. (2) Information and communications technology The term information and communications technology has the meaning given the term in section 4713(k) of title 41, United States Code. (3) Executive agency The term executive agency has the meaning given the term in section 133 of title 41, United States Code. (4) Training program The term training program means the training program developed pursuant to section 2(a).

tv_txt: II Calendar No. 153 117th CONGRESS 1st Session S. 2201 [Report No. 117–43] IN THE SENATE OF THE UNITED STATES June 23, 2021 Mr. Peters (for himself and Mr. Johnson ) introduced the following bill; which was read twice and referred to the Committee on Homeland Security and Governmental Affairs October 26, 2021 Reported by Mr. Peters , with amendments Omit the part struck through and insert the part printed in italic A BILL To manage supply chain risk through counterintelligence training, and for other purposes.

1. Short title This Act may be cited as the Supply Chain Security Training Act of 2021 . 2. Training program to manage supply chain risk (a) In general Not later than 180 days after the date of the enactment of this Act, the Administrator of General Services, through the Federal Acquisition Institute, shall develop a training program for officials with supply chain risk management responsibilities at executive Federal agencies. (b) Content The training program shall be designed to prepare such personnel to perform supply chain risk management activities and identify and mitigate supply chain security threats that arise throughout the acquisition lifecycle, including for the acquisition of information and communications technology. The training program shall— (1) include, considering the protection of classified and other sensitive information, information on current, specific supply chain security threats; and (2) be updated as determined to be necessary by the Administrator. (c) Coordination and consultation In developing the training program, the Administrator shall— (1) coordinate with the Federal Acquisition Security Council, the Secretary of Homeland Security, and the Director of the Office of Personnel Management; and (2) consult with the Director of the Department of Defense’s Defense Acquisition University and the Director of National Intelligence. (d) Guidance (1) In general Not later than 180 days after the training program is developed under subsection (a), the Director of the Office of Management and Budget shall promulgate guidance to Federal agencies requiring executive agency adoption and use of the training program. Such guidance shall— (1) (A) allow executive agencies to incorporate the training program into existing agency training programs; and (2) (B) provide guidance on how to identify executive agency officials with supply chain risk management responsibilities. (2) Availability The Director of the Office of Management and Budget shall make the guidance promulgated under paragraph (1) available to Federal agencies of the legislative and judicial branches. 3. Reports on implementation of program Not later than 180 days after the completion of the first course, and annually thereafter for the next three years, the Administrator of General Services shall submit to the appropriate congressional committees and leadership a report on implementation of the training program required under section 2. 4. Definitions In this Act: (1) Appropriate congressional committees and leadership The term appropriate congressional committees means— (A) the Committee on Homeland Security and Governmental Affairs and the Committee on Armed Services of the Senate; and (B) the Committee on Oversight and Reform and the Committee on Armed Services of the House of Representatives. (2) Information and communications technology The term information and communications technology has the meaning given the term in section 4713(k) of title 41, United States Code. (3) Executive agency The term executive agency has the meaning given the term in section 133 of title 41, United States Code. (4) Federal agency The term Federal agency means any agency, committee, commission, office, or other establishment in the executive, legislative, or judicial branch of the Federal Government. (4) (5) Training program The term training program means the training program developed pursuant to section 2(a).

October 26, 2021 Reported with amendments

tv_txt: 117th CONGRESS 2d Session S. 2201 IN THE SENATE OF THE UNITED STATES AN ACT To manage supply chain risk through counterintelligence training, and for other purposes.

1. Short title This Act may be cited as the Supply Chain Security Training Act of 2021 . 2. Training program to manage supply chain risk (a) In general Not later than 180 days after the date of the enactment of this Act, the Administrator of General Services, through the Federal Acquisition Institute, shall develop a training program for officials with supply chain risk management responsibilities at Federal agencies. (b) Content The training program shall be designed to prepare such personnel to perform supply chain risk management activities and identify and mitigate supply chain security risks that arise throughout the acquisition lifecycle, including for the acquisition of information and communications technology. The training program shall— (1) include, considering the protection of classified and other sensitive information, information on current, specific supply chain security threats and vulnerabilities; and (2) be updated as determined to be necessary by the Administrator. (c) Coordination and consultation In developing and determining updates to the training program, the Administrator shall— (1) coordinate with the Federal Acquisition Security Council, the Secretary of Homeland Security, and the Director of the Office of Personnel Management; and (2) consult with the Director of the Department of Defense’s Defense Acquisition University, the Director of National Intelligence, and the Director of the National Institute of Standards and Technology. (d) Guidance (1) In general Not later than 180 days after the training program is developed under subsection (a), the Director of the Office of Management and Budget shall promulgate guidance to Federal agencies requiring executive agency adoption and use of the training program. Such guidance shall— (A) allow executive agencies to incorporate the training program into existing agency training programs; and (B) provide guidance on how to identify executive agency officials with supply chain risk management responsibilities. (2) Availability The Director of the Office of Management and Budget shall make the guidance promulgated under paragraph (1) available to Federal agencies of the legislative and judicial branches. 3. Reports on implementation of program Not later than 180 days after the completion of the first course, and annually thereafter for the next three years, the Administrator of General Services shall submit to the appropriate congressional committees and leadership a report on implementation of the training program required under section 2. 4. Definitions In this Act: (1) Appropriate congressional committees and leadership The term appropriate congressional committees means— (A) the Committee on Homeland Security and Governmental Affairs and the Committee on Armed Services of the Senate; and (B) the Committee on Oversight and Reform and the Committee on Armed Services of the House of Representatives. (2) Information and communications technology The term information and communications technology has the meaning given the term in section 4713(k) of title 41, United States Code. (3) Executive agency The term executive agency has the meaning given the term in section 133 of title 41, United States Code. (4) Federal agency The term Federal agency means any agency, committee, commission, office, or other establishment in the executive, legislative, or judicial branch of the Federal Government. (5) Training program The term training program means the training program developed pursuant to section 2(a).

Passed the Senate January 11 (legislative day, January 10), 2022. Secretary

tv_txt: One Hundred Seventeenth Congress of the United States of America 2d Session Begun and held at the City of Washington on Monday, the third day of January, two thousand and twenty two S. 2201 IN THE SENATE OF THE UNITED STATES AN ACT To manage supply chain risk through counterintelligence training, and for other purposes.

1. Short title This Act may be cited as the Supply Chain Security Training Act of 2021 . 2. Training program to manage supply chain risk (a) In general Not later than 180 days after the date of the enactment of this Act, the Administrator of General Services, through the Federal Acquisition Institute, shall develop a training program for officials with supply chain risk management responsibilities at Federal agencies. (b) Content The training program shall be designed to prepare such personnel to perform supply chain risk management activities and identify and mitigate supply chain security risks that arise throughout the acquisition lifecycle, including for the acquisition of information and communications technology. The training program shall— (1) include, considering the protection of classified and other sensitive information, information on current, specific supply chain security threats and vulnerabilities; and (2) be updated as determined to be necessary by the Administrator. (c) Coordination and consultation In developing and determining updates to the training program, the Administrator shall— (1) coordinate with the Federal Acquisition Security Council, the Secretary of Homeland Security, and the Director of the Office of Personnel Management; and (2) consult with the Director of the Department of Defense’s Defense Acquisition University, the Director of National Intelligence, and the Director of the National Institute of Standards and Technology. (d) Guidance (1) In general Not later than 180 days after the training program is developed under subsection (a), the Director of the Office of Management and Budget shall promulgate guidance to Federal agencies requiring executive agency adoption and use of the training program. Such guidance shall— (A) allow executive agencies to incorporate the training program into existing agency training programs; and (B) provide guidance on how to identify executive agency officials with supply chain risk management responsibilities. (2) Availability The Director of the Office of Management and Budget shall make the guidance promulgated under paragraph (1) available to Federal agencies of the legislative and judicial branches. 3. Reports on implementation of program Not later than 180 days after the completion of the first course, and annually thereafter for the next three years, the Administrator of General Services shall submit to the appropriate congressional committees and leadership a report on implementation of the training program required under section 2. 4. Definitions In this Act: (1) Appropriate congressional committees and leadership The term appropriate congressional committees means— (A) the Committee on Homeland Security and Governmental Affairs and the Committee on Armed Services of the Senate; and (B) the Committee on Oversight and Reform and the Committee on Armed Services of the House of Representatives. (2) Information and communications technology The term information and communications technology has the meaning given the term in section 4713(k) of title 41, United States Code. (3) Executive agency The term executive agency has the meaning given the term in section 133 of title 41, United States Code. (4) Federal agency The term Federal agency means any agency, committee, commission, office, or other establishment in the executive, legislative, or judicial branch of the Federal Government. (5) Training program The term training program means the training program developed pursuant to section 2(a).

Speaker of the House of Representatives Vice President of the United States and President of the Senate