Section 1 Short title
This Act may be cited as the “Mitigating Foreign Influence in Classified Government Contracts”.
Mitigating Foreign Influence in Classified Government Contracts
A BILL
To direct the Director of the Information Security Oversight Office to assess foreign influence in the National Industrial Security Program and to develop a single, integrated strategy to better identify and mitigate such foreign influence, and for other purposes.
Sec. 2 Definitions
In this Act:
Appropriate committees of Congress— The term appropriate committees of Congress means—
the Committee on Homeland Security and Governmental Affairs, the Committee on Armed Services, and the Select Committee on Intelligence of the Senate; and
the Committee on Oversight and Accountability, the Committee on Armed Services, and the Permanent Select Committee on Intelligence of the House of Representatives.
Cognizant security agencies; entity; foreign interest— The terms cognizant security agencies, entity, and foreign interest have the meanings given those term in section 2004.4 of title 32, Code of Federal Regulations.
Director— The term Director means the Director of the Information Security Oversight Office.
NISPPAC— The term NISPPAC means the National Industrial Security Program Policy Advisory Committee established by Executive Order 12829 (50 U.S.C. 3161 note; relating to national industrial security program).
Sec. 3 Assessment of foreign influence in National Industrial Security Program
In general— The Director shall convene and direct NISPPAC to complete and submit, not later than 1 year after the date of the enactment of this Act, to the Director an assessment of foreign influence in the National Industrial Security Program.
Elements— The assessment required by subsection (a) shall include the following:
A definition of foreign influence that focuses on contractual agreements or other non-ownership means that may allow foreign interests unauthorized access to classified information or to adversely affect performance of a contract or agreement requiring access to classified information.
An assessment of the extent of the threat of foreign influence in the National Industrial Security Program.
A description of the challenges in identifying foreign influence.
A list of the criteria and factors that should be considered to identify foreign influence requiring mitigation.
An identification of the methods, if any, currently used to mitigate foreign influence.
An assessment of the effectiveness and limitations of such mitigations, and recommendations for new mitigation methods.
An assessment of whether processes to identify and mitigate foreign influence are consistent across cognizant security agencies.
An identification of the tools available to assist entities identify and avoid foreign influence that would require mitigation, and recommendations for tools needed.
Submission to Congress— Not later than 1 year after the date of the enactment of this Act, the Director shall submit to the appropriate congressional committees the assessment completed under subsection (a).
Sec. 4 Strategy to identify and mitigate foreign influence in National Industrial Security Program
In general— Not later than 540 days after the date of the enactment of this Act, the Director, in consultation with the cognizant security agencies, shall submit to the appropriate committees of Congress a strategy, to be known as the “National Strategy to Mitigate Foreign Influence in the National Industrial Security Program”, to improve the ability of the Federal Government and entities to identify and mitigate foreign influence.
Elements— The strategy required by subsection (a) shall include the following:
Processes to identify foreign influence requiring mitigation, including entity submission of standard forms and government security reviews.
Methods to mitigate foreign influence.
Practices to ensure processes to identify foreign influence and methods to mitigate foreign influence are consistent across cognizant security agencies.
Tools, including best practices, to assist entities in recognizing the risk of foreign influence and implementing methods to mitigate foreign influence.
Proposed updates to parts 117 and 2004 of title 32, Code of Federal Regulations.
Recommendations for legislation as the Director considers appropriate.
Implementation—
In general— Not later than 90 days after the date on which the strategy required under subsection (a) is submitted to the appropriate committees of Congress, the Director, in collaboration with the cognizant security agencies, shall commence implementation of the strategy.
Report— Not later than 1 year after the date on which the Director commences implementation of the strategy required by subsection (a) in accordance with paragraph (1), the Director shall submit to the appropriate committees of Congress a report describing the efforts of the cognizant security agencies to implement the strategy and the progress of such efforts.