--- kind: "diff" citation: "S. 1611" bill: "113-s-1611" heading: "Federal Data Center Consolidation Act of 2013" from: "rs" from_label: "Reported in Senate" to: "es" to_label: "Engrossed in Senate" sections_amended: 1 sections_added: 0 sections_removed: 0 url: "https://uscodex.org/bills/113/s/1611/changes/es" --- # S. 1611 — what changed S. 1611, Federal Data Center Consolidation Act of 2013 — 1 section amended between Reported in Senate and Engrossed in Senate. Edits are marked `struck` and `inserted`. ## Sec. 2 Federal data center consolidation initiative - (a) Definitions— In this Act: - (1) Administrator— The term Administrator means the Administrator for the Office of E-Government E–Government and Information Technology within the Office of Management and Budget. - (2) FDCCI—Covered agency— The term FDCCI covered agency means the Federal Data Center Consolidation Initiative described in the Office following (including all associated components of Management and Budget Memorandum on the Federal Data Center Consolidation Initiative, dated February 26, 2010, or any successor thereto.agency): - (b) Federal data center consolidation inventories and strategies— - (1) In general— - (A) Annual reporting— Each year, beginning in the first fiscal year after the date of enactment of this Act and for each of the 4 fiscal years thereafter, the head of each agency that is described in subparagraph (D), assisted by the Chief Information Officer of the agency, shall submit to the Administrator— - (i) a comprehensive asset inventory of the data centers owned, operated, or maintained by or on behalf of the agency, even if the center is administered by a third party; and - (ii) a multi-year strategy to achieve the optimization and consolidation of agency data center assets, that includes— - (I) performance metrics— - (aa) that are consistent with performance metrics established by the Administrator under subparagraphs (C) and (G) of paragraph (2); and - (bb) by which the quantitative and qualitative progress of the agency toward data center consolidation goals can be measured; - (II) a timeline for agency activities completed under the FDCCI, with an emphasis on benchmarks the agency can achieve by specific dates; - (III) an aggregation of year-by-year investment and cost savings calculations for the period beginning on the date of enactment of this Act and ending on the date described in subsection (e), broken down by each year, including a description of any initial costs for data center consolidation and life cycle cost savings, with an emphasis on— - (aa) meeting the Government-wide performance metrics described in subparagraphs (C) and (G) of paragraph (2); and - (bb) demonstrating agency-specific savings each fiscal year achieved through the FDCCI; and - (IV) any additional information required by the Administrator. - (B) Use of existing reporting structures— The Administrator may require agencies described in subparagraph (D) to submit any information required to be submitted under this subsection through reporting structures in use as of the date of enactment of this Act. - (C) Certification— Each year, beginning in the first fiscal year after the date of enactment of this Act and for each of the 4 fiscal years thereafter, acting through the chief information officer of the agency, shall submit a statement to the Administrator certifying that the agency has complied with the requirements of this Act. - (D) Agencies described— The agencies (including all associated components of the agency) described in this paragraph are the— - (A) [was (3)(2)(5)(3)] Department of Agriculture; - (B) [was (3)(2)(5)(4)] Department of Commerce; - (C) [was (3)(2)(5)(5)] Department of Defense; - (D) [was (3)(2)(5)(6)] Department of Education; - (E) [was (3)(2)(5)(7)] Department of Energy; - (F) [was (3)(2)(5)(8)] Department of Health and Human Services; - (G) [was (3)(2)(5)(9)] Department of Homeland Security; - (H) [was (3)(2)(5)(10)] Department of Housing and Urban Development; - (I) [was (3)(2)(5)(11)] Department of the Interior; - (J) [was (3)(2)(5)(12)] Department of Justice; - (K) [was (3)(2)(5)(13)] Department of Labor; - (L) [was (3)(2)(5)(14)] Department of State; - (M) [was (3)(2)(5)(15)] Department of Transportation; - (N) Department of Treasury; - (xiv) Department of the Treasury; - (O) [was (3)(2)(5)(17)] Department of Veterans Affairs; - (P) [was (3)(2)(5)(18)] Environmental Protection Agency; - (Q) [was (3)(2)(5)(19)] General Services Administration; - (R) [was (3)(2)(5)(20)] National Aeronautics and Space Administration; - (S) [was (3)(2)(5)(21)] National Science Foundation; - (T) [was (3)(2)(5)(22)] Nuclear Regulatory Commission; - (U) [was (3)(2)(5)(23)] Office of Personnel Management; - (V) [was (3)(2)(5)(24)] Small Business Administration; - (W) [was (3)(2)(5)(25)] Social Security Administration; and - (X) [was (3)(2)(5)(26)] United States Agency for International Development. - (3) FDCCI— The term FDCCI means the Federal Data Center Consolidation Initiative described in the Office of Management and Budget Memorandum on the Federal Data Center Consolidation Initiative, dated February 26, 2010, or any successor thereto. - (4) Government-wide data center consolidation and optimization metrics— The term Government-wide data center consolidation and optimization metrics means the metrics established by the Administrator under subsection (b)(2)(G). - (b) Federal data center consolidation inventories and strategies— - (1) In general— - (A) Annual reporting— Each year, beginning in the first fiscal year after the date of enactment of this Act and each fiscal year thereafter, the head of each covered agency, assisted by the Chief Information Officer of the agency, shall submit to the Administrator— - (i) a comprehensive inventory of the data centers owned, operated, or maintained by or on behalf of the agency; and - (ii) a multi-year strategy to achieve the consolidation and optimization of the data centers inventoried under clause (i), that includes— - (I) performance metrics— - (aa) that are consistent with the Government-wide data center consolidation and optimization metrics; and - (bb) by which the quantitative and qualitative progress of the agency toward the goals of the FDCCI can be measured; - (II) a timeline for agency activities to be completed under the FDCCI, with an emphasis on benchmarks the agency can achieve by specific dates; - (III) year-by-year calculations of investment and cost savings for the period beginning on the date of enactment of this Act and ending on the date described in subsection (e), broken down by each year, including a description of any initial costs for data center consolidation and optimization and life cycle cost savings and other improvements, with an emphasis on— - (aa) meeting the Government-wide data center consolidation and optimization metrics; and - (bb) demonstrating the amount of agency-specific cost savings each fiscal year achieved through the FDCCI; and - (IV) any additional information required by the Administrator. - (B) Use of other reporting structures— The Administrator may require a covered agency to include the information required to be submitted under this subsection through reporting structures determined by the Administrator to be appropriate. - (C) Department of Defense reporting— For any year that the Department of Defense is required to submit a performance plan for reduction of resources required for data servers and centers, as required under section 2867(b) of the National Defense Authorization Act for Fiscal Year 2012 (10 U.S.C. 2223a note), the Department of Defense— - (i) may submit to the Administrator, in lieu of the multi-year strategy required under subparagraph (A)(ii)— - (I) the defense-wide plan required under section 2867(b)(2) of the National Defense Authorization Act for Fiscal Year 2012 (10 U.S.C. 2223a note); and - (II) the report on cost savings required under section 2867(d) of the National Defense Authorization Act for Fiscal Year 2012 (10 U.S.C. 2223a note); and - (ii) shall submit the comprehensive inventory required under subparagraph (A)(i), unless the defense-wide plan required under section 2867(b)(2) of the National Defense Authorization Act for Fiscal Year 2012 (10 U.S.C. 2223a note)— - (I) contains a comparable comprehensive inventory; and - (II) is submitted under clause (i). - (D) Statement— Each year, beginning in the first fiscal year after the date of enactment of this Act and each fiscal year thereafter, the head of each covered agency, acting through the Chief Information Officer of the agency, shall— - (i) - (I) submit a statement to the Administrator stating whether the agency has complied with the requirements of this Act; and - (II) make the statement submitted under subclause (I) publically available; and - (ii) if the agency has not complied with the requirements of this Act, submit a statement to the Administrator explaining the reasons for not complying with such requirements. - (E) Agency implementation of strategies— Each agency described in subparagraph (D), covered agency, under the direction of the Chief Information Officer of the agency agency, shall— - (i) implement the consolidation strategy required under subparagraph (A)(ii); and - (ii) provide updates to the Administrator, on a quarterly basis, of— - (I) the completion of activities by the agency under the FDCCI; - (II) any progress of the agency towards meeting the Government-wide data center performance metrics described in subparagraphs (C) consolidation and (G) of paragraph (2); optimization metrics; and - (III) the actual cost savings and other improvements realized through the implementation of the FDCCI.strategy of the agency. - (F) Rule of construction— Nothing in this paragraph Act shall be construed to limit the reporting of information by any a covered agency described in subparagraph (F) to the Administrator, the Director of the Office of Management and Budget, or to Congress. - (2) Administrator responsibilities— The Administrator shall— - (A) establish the deadline, on an annual basis, for covered agencies to submit information under this section; - (B) establish a list of requirements that the covered agencies must meet to be considered in compliance with paragraph (1); - (C) ensure that each certification submitted under paragraph (1)(C) and information relating to agency progress towards meeting the Government-wide total cost of ownership optimization and data center consolidation and optimization metrics is made available in a timely manner to the general public; - (D) review the plans inventories and strategies submitted under paragraph (1) to determine whether each plan is they are comprehensive and complete; - (E) monitor the implementation of the data center plan strategy of each covered agency described in that is required under paragraph (1)(A)(ii); - (F) update, on an annual basis, the cumulative cost savings realized through the implementation of the agency plans; FDCCI; and - (G) establish Government-wide data center total cost of ownership optimization and consolidation metrics, which shall include server efficiency and other comprehensive metrics established at applicable to the discretion consolidation and optimization of the Administrator.data centers Government-wide, including metrics with respect to— - (i) costs; - (ii) efficiencies, including at least server efficiency; and - (iii) any other metrics the Administrator establishes under this subparagraph. - (3) Cost saving goal and updates for Congress— - (A) In general— Not later than 1 year after the date of enactment of this Act, the Administrator shall develop develop, and publish make publically available, a goal goal, broken down by year, for the total amount of planned cost savings by the Federal Government and optimization improvements achieved through the Federal Data Center Consolidation Initiative FDCCI during the 5-year period beginning on the date of enactment of this Act, which shall include a breakdown Act and ending on a year-by-year basis of the projected savings.date described in subsection (e). - (B) Annual update— - (i) In general— Not later than 1 year after the date on which the goal described in subparagraph (A) is determined made publically available, and each year thereafter until the end of 2018, thereafter, the Administrator shall aggregate the reported cost savings of each covered agency and optimization improvements achieved to date, by each relevant agency, date through the FDCCI as compared and compare the savings to the projected cost savings and optimization improvements developed under subparagraph (A) (based on data collected from each affected agency under paragraph (1)).(A). - (ii) Update for Congress— The goal required to be developed and published under subparagraph (A) shall be submitted to Congress and shall include an update on the progress made be accompanied by each agency described in subsection paragraph (1)(E) on—a statement describing— - (I) whether each covered agency has in fact submitted a comprehensive asset inventory, including an assessment broken down by agency, which shall include the specific numbers, utilization, and efficiency level of data centers; and - (II) whether each covered agency has submitted a comprehensive consolidation plan strategy with the key elements described in paragraph (1)(A)(ii). - (iii) Request for information— Upon request from the Committee on Homeland Security and Governmental Affairs of the Senate or the Committee on Oversight and Government Reform of the House of Representatives, the head of an agency described in paragraph (1)(E) or the Director of the Office of Management and Budget shall submit to the requesting committee any report or information submitted to the Office of Management and Budget for the purpose of preparing a report required under clause (i) or an updated progress report required under clause (ii). - (4) GAO Review— - (A) In general— During the 5-fiscal-year period following Not later than 1 year after the date of enactment of this Act, and each year thereafter, the Comptroller General of the United States shall review and verify the quality and completeness, and verify, each agency's completeness of the asset inventory and plans strategy of each covered agency required under paragraph (1)(A). - (B) Report— The Comptroller General of the United States shall, on an annual basis during the 5-fiscal-year period following the date of enactment of this Act, basis, publish a report on each review conducted under subparagraph (A) of an agency during the fiscal year for which the report is published.(A). - (c) Ensuring cybersecurity standards for data center consolidation and cloud computing— - (1) In general— In implementing a data center consolidation and optimization strategy under this Act, a covered agency shall do so in a manner that is consistent with Federal guidelines on cloud computing security, including— - (c) Ensuring cybersecurity standards for data center consolidation and cloud computing— An agency required to implement a data center consolidation plan under this Act and migrate to cloud computing shall do so in a manner that is consistent with Federal guidelines on cloud computing security, including— - (A) [was (4)(3)] applicable provisions found within the Federal Risk and Authorization Management Program (FedRAMP); and - (B) [was (4)(4)] guidance published by the National Institute of Standards and Technology. - (2) Rule of construction— Nothing in this Act shall be construed to limit the ability of the Director of the Office of Management and Budget to update or modify the Federal guidelines on cloud computing security. - (d) Classified information—Waiver of requirements— The Director of National Intelligence and the Secretary of Defense, or their respective designee, may waive the requirements applicability to any national security system, as defined in section 3542 of title 44, United States Code, of any provision of this Act for any element (or component if the Director of an element) National Intelligence or the Secretary of Defense, or their respective designee, determines that such waiver is in the intelligence community.interest of national security. Not later than 30 days after making a waiver under this subsection, the Director of National Intelligence or the Secretary of Defense, or their respective designee, shall submit to the Committee on Homeland Security and Governmental Affairs and the Select Committee on Intelligence of the Senate and the Committee on Oversight and Government Reform and the Permanent Select Committee on Intelligence of the House of Representatives a statement describing the waiver and the reasons for the waiver. - (e) Sunset— This Act is repealed effective on October 1, 2018.